
From nobody Sat Apr  1 13:56:27 2017
Return-Path: <brian.peter.dickson@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B9CF129693 for <idr@ietfa.amsl.com>; Sat,  1 Apr 2017 13:56:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S5T4F3cXntOU for <idr@ietfa.amsl.com>; Sat,  1 Apr 2017 13:56:13 -0700 (PDT)
Received: from mail-it0-x22b.google.com (mail-it0-x22b.google.com [IPv6:2607:f8b0:4001:c0b::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78678127077 for <idr@ietf.org>; Sat,  1 Apr 2017 13:56:11 -0700 (PDT)
Received: by mail-it0-x22b.google.com with SMTP id y18so27225541itc.1 for <idr@ietf.org>; Sat, 01 Apr 2017 13:56:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=S6WmCwNFywkKEPvdbVt/DjU+RKMew+pxey9NeUcxBWo=; b=NcbFXcRQxYB5TO4cziMvLKqoE/JH5F5GFn05o9Wx/W3g/rY2dbUyUtSztSGjpIn9g1 QaXjlueyn2ZbbZQqn/0tH2pYSJDt9AHyXRI4eWXYW2uY1b4Tv6azEIq6FaZLbfmCPT3L u39UkU/lodlvcXEeZnS0A2DYazHz6cTfl0iNUitmE02w57H/n5sa2s6y6S3EIu12Eg/s 2hVih6DIlAgLQomhse9mD+NrSPkNIzgHybFL4elxvgSZjENGNI9TjYXXKJNzf7JwbCq1 8WPvCSS4Paqs/TchDbfhxPGRBHArfN6JhtYzyvTpHVw0hI6bPPT9CTz6qEyGPy17xU7f FE9A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=S6WmCwNFywkKEPvdbVt/DjU+RKMew+pxey9NeUcxBWo=; b=I2qHL4c6QXyAANBkSLgSN90CP9YajKfeslDXnyYjVN+pAcFtDgMl8Y4Gqiud6k/05g vEJCu2bm9XnS8AlAeK3FnrUctJHALs1vswlgnG7ULk2545Doq2SmlR53IjfDtBQ6EmFz MY7VtFRnOsImxq8wsnmdu+SdFKbrUpKnSw3flQj3VJjrf7aNVPXDP+FF5Exy3z6Iivbu j2sYePfVK7TAZVPMMM7041MDODOa247VmvlS3fGvFTsitrEQFZk1Vh4rOnZChW9W8hOy IRU5s8rf/PbZzQR7aPmsYkPw5Uedvq3RzEX12w7ZXzmyOyB2UNtgwLXsuCMI8ymZqmDE +GjQ==
X-Gm-Message-State: AFeK/H2hy5kACaBsCsXZdI+Hw4t3BrLe/Ibuh37ylhlRjyXAPJwEjYOs LIMmEeW7wUv8abkmxlYDlu/vwOAraiuI
X-Received: by 10.36.91.76 with SMTP id g73mr4057414itb.75.1491080170478; Sat, 01 Apr 2017 13:56:10 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.36.46.151 with HTTP; Sat, 1 Apr 2017 13:56:09 -0700 (PDT)
In-Reply-To: <20170401020136.ftbjliohoaznzqyx@dhcp-86cf.meeting.ietf.org>
References: <20170401020136.ftbjliohoaznzqyx@dhcp-86cf.meeting.ietf.org>
From: Brian Dickson <brian.peter.dickson@gmail.com>
Date: Sat, 1 Apr 2017 15:56:09 -0500
Message-ID: <CAH1iCioRzKouQuh_DqKQVMB=azFaWzZ-YKZT7Jo4UpNF23=gEQ@mail.gmail.com>
To: Job Snijders <job@ntt.net>
Cc: IETF IDR <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a1144ca76e4a4bb054c212714
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/omyR7TfntfvNhFPb-EV9dDVs3Hc>
Subject: Re: [Idr] dear diary: well-known community vs new path attribute
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 01 Apr 2017 20:56:25 -0000

--001a1144ca76e4a4bb054c212714
Content-Type: text/plain; charset=UTF-8

Hi, Job,

Your message was very well written, well thought-out, and presents a good
case for use of communities.

I think it makes one or two assumptions that turn out to be incorrect.

I will try to address a couple of issues, that I think need to be
discussed. (Sorry, it is a long message.)

First, a point of clarification - in Sri's presentation, the slide where he
is discussing "community vs attribute", the context is ONLY for intra-AS,
not inter-AS, usage.

This is also in-scope for the "open" draft, which includes a non-transitive
attribute (iOTC, internal only to customer), and probably more relevant in
that discussion. (For that case, I would point out that they are not
mutually exclusive, and for any AS already using communities, the impact of
adding the Open and the iOTC attribute, would be classified as "belt and
suspenders" - redundant methods of protection against accidental leaks.

Second is the propagation characteristics of communities (1997 in
particular), vs any new path attribute.

It is unfortunately the case, that in at least one major vendor's
implementation, propagation of communities is off by default. This means
that even if a new well-known community were agreed upon, the usefulness of
it would be extremely limited until every AS using firmware that does not
propagate-by-default, has changed the configuration on every BGP neighbor
to propagate communities.

In contrast, the BGP protocol RFCs require optional transitive attributes
which are not understood, to be propagated. If the rules for a particular
new attribute also require the attribute to be propagated (regardless of
the attributes value(s)), a new attribute would have global visibility as
soon as it gets deployed by any ASN, and as it gained adoption, the
usefulness of the attribute (based on the attribute values) would increase
monotonically.

The _Feature_X_ value IS in its propagation, NOT on its active use. This
distinction is very important, and tips the equation in favor of
attributes. Note also, this does NOT preclude the use of communities, even
before the attribute is available in shipping code. It does mean that the
usefulness is significantly restricted outside of the contiguous zone of
bidirectional community usage. E.g. Does every ISP that accepts communities
also send them, and if that is not the case, the community implementation
would suffer.

The presentation and current state of the I-D are not necessarily clear
(and possibly not correct) on the intended behavior. I will be working with
my co-authors to correct these problems. The correct rules for the
attribute are as follows:


   - Session-level Role is used to control marking and detection rules
   applicable for that session.
   - Marking and detection is per-prefix.
   - Some details on interactions with other BGP mechanisms needs more work
   (I'll be working with my co-authors on that), such as atomic-aggregate.
   - Incremental deployment is a fundamental characteristic, and is
   intended to incrementally improve detection, without causing false
   positives if deployed consistently with actual neighbor roles
   - If a given neighbor does not support the Role attribute (during Open),
   the locally configured Role should still be used:
      - Since the inbound marking will not exist on the last hop, the
      locally configured Role should be used to apply an inbound marking as if
      the Role had been negotiated and the prefix marked by the neighbor
      accordingly
      - Inbound detection based on the Role should be done.
   - Of the four Role types, this unilateral Role setting (if not
   understood by a peer) will work correctly for three (peer, customer,
   transit) but not the fourth (complex)
      - Complex Role, and complex behavior requires successful negotiation
      with a peer that supports Role, and is also configured for complex
      - Complex is the one Role where marking is dependent on prefixes
      having existing markings, or local origination.
      - Complex
   - All marking is intended to be automatic, with no operator input other
   than Role setting towards neighbors
      - It may be the case that implementations provide a "safety-valve"
      during early deployments, to disable marking to handle situations where
      implementation errors are discovered
      - iBGP peers and confederation peers should probably be implemented
      to automatically have role Complex
      - Sensible defaults should be used to avoid creating the problem
      being solved.
      - Default Role, if any, should be Peer (or maybe Transit).
      - The combination of existing marking and outbound Role type must
      also prevent announcement or propagation of leaks
         - During ongoing WG discussion and revisions, the consensus on
         "must" might not be reached, in which case "should" is the
minimum, with
         local policy override possible
         - Regardless of announcement, the received marking MUST NOT be
         modified, so that other parties are aware of the prefix's status
      - As long as a prefix is marked at some point as having been received
   from a peer or transit neighbor, it will be possible to detect that a leak
   has occurred by a receiving party whose neighbor is "peer" or "customer".
   - Two parties benefit in deploying the attribute immediately, by being
   protected against leaks of their announced routes by any direct or indirect
   mutual customer.
      - This happens even without coordination between the two parties.
   - Until very widely deployed, leaks will still be possible, however:
      - The scope of leaks will be reduced to the set of unmarked prefixes
      - Unmarked prefixes can only be heard from ISPs who don't mark, or
      from their customer cone(s)
         - At that point, the feedback mechanism provides strong incentive
         to mark
         - The bigger an ISP is, the more impact to a leak beneath them
         there is, and the more incentive there is to mark
      - The set of ISPs who don't mark could be significantly reduced
      if/when individual IXPs adopt policies that require marking
      - ISPs who require peers and customers to mark would also have
      significant impact on potential sources
   - Early deployment by large ISPs (preferably Tier-1) would directly
   benefit themselves, and impact the cone of leak-resistant networks.
   - There is benefit even to leaf networks, in protecting themselves from
   leaks heard from transit providers
      - Suppose a leaf network has providers A and B
      - Suppose a leak is propagated by B, but not by A
         - Suppose B only has one path to the leaked prefix(es) and elects
         to propagate a known leak
      - By filtering out (automatically) prefixes from B that are leaks:
         - The leaf network can send traffic to those prefixes via A
         - The path through A is highly likely to not be adversely affected
         by traffic following the leak
         - This is still per-prefix behavior



The incremental deployment does require setting the Role without the
benefit of negotiation. In the case of correctly applied Roles, the
automated per-prefix marking and detection works. The marking controls the
internal propagation behavior to prevent leak origination, and depending on
existing markings, may prevent leak propagation. Similarly, detection may
allow inbound detection of leaks or propagated leaks, making filtering
possible.

Unilateral Role-setting (and "proxy" marking) allows gap-filling in
late-deployment scenarios.
Here are the behaviors of unilateral role setting, at different stages of
partial deployment:

   - Suppose only one AS, X, does not participate
   - All of X's neighbors do participate
      - Every prefix propagated through X will be marked, including with
      values that correspond to the receiver's configured Role assignment of X
      - If all the Role assignments toward X are correct, then:
      - Leaks propagated and not blocked by X (which would have been
         blocked, if X implemented) will be blocked by every neighbor of X upon
         receipt (modulo local policy on the recipient)
         - Leaks by X will be detected and blocked (modulo local policy)
         - If a Role assignment toward X is wrong:
      - X is transit, configured as customer
         - Sender sends all routes, leak toward X; X may filter (no
            impact), otherwise everyone is impacted incl. sender's
transits and peer s
            - X sends all routes, recipient leaks all routes - X, X's
            peers/transits, and recipient are all impacted
            - X is peer, configured as customer
         - Sender sends all routes, leaks; impact is sender's upstreams
            - X sends X's customer's routes, recipient leaks to
            peers/transits - X and recipient + upstreams affected
            - X is transit, configured as peer
         - Sender sends only customer prefixes - correct behavior
            - X sends all routes, sent only to customers - correct
            behavior, except X's transit's prefixes are blocked
            - X is peer, configured as transit
         - Sender sends only customer prefixes - correct behavior
            - X sends only customer routes, sent only to customers -
            correct behavior
            - X is customer, configured as transit
         - Sender sends only customer prefixes - subset of expected
            prefixes - only X is impacted
            - X sends only customer prefixes - not sent to peers/transit,
            only X is impacted
            - X is customer, configured as peer
         - Sender sends only customer prefixes - subset of expected
            prefixes - only X is impacted
            - X sends only customer prefixes - not sent to peers/transit,
            only X is impacted
            - Suppose every AS that does not participate, has only
   neighbors that do participate
   - The same situation occurs as in the "only one AS does not participate":
      - A leak has to originate somewhere
         - If the leak originates on a non-participant, it gets detected
         and block by all its neighbors, unless the unilateral Role of the
         non-participant is incorrect on the receiver side
         - Role error on the sender side, would be an instance of "leak
            originates on a participant", below
            - Leaked non-local prefixes which are first correctly marked by
            a participant, and leaked by the non-participant:
            - Transit leaked to transit-marked-as-transit: sent only to
               customers, impact is leaker and its upstreams, and customers
               - Transit leaked to peer-marked-as-transit: same
               - Peer leaked to transit-marked-as-transit: same
               - Peer leaked to peer-marked-as-transit: same
               - Transit leaked to transit-marked-as-peer: same
               - Peer leaked to peer-marked-as-transit: same
            - In all cases, impacts are to non-participant, and to
            participant making error in manual Role setting
         - If the leak originates on a participant, it means there was a
         Role mismatch between that participant, and a non-participant
         - Marking a customer as a peer or provider fails "safe" - only
            customer routes are received, and get blocked towards
peers or providers
            - Marking a peer or provider as a customer, results in the
            following:
            - Previously unmarked prefixes (local to the Peer or Provider)
               get marked as "customer"; only the Peer or Provider
itself is affected
               - Prefixes marked by the non-participant's neighbors get
               marked, then detection rules apply:
               - non-participant's peer/provider routes are detected as
                  leaks, and are blocked (modulo local policy)
                  - non-participant's customers' routes are not considered
                  leaks; only non-participant is affected
                  - Note that all of the failures (in the singleton
   contiguous non-implementer topologies) are induced by errors in Role
   setting, and possibly a combination of Role error and leakage.
      - This provides incremental incentive to request peers to implement
      and configure their Role
      - The recommended method is to keep any existing measures in place to
      prevent leaking, and identify marking errors seen inbound
      - One all Roles are set correctly, no further leaks can occur if all
      neighbors' neighbors either implement or have their Roles set correctly.

I realize that a lot of this needs to go in the document(s), but I hope I
have at least indicated that this has had some thought given to it, and
that I don't yet see situations where this makes anything worse, and in
most cases offers benefit even at relatively sparse deployment.

Brian

On Fri, Mar 31, 2017 at 9:01 PM, Job Snijders <job@ntt.net> wrote:

> Dear colleagues,
>
> In today's IDR session (thank you for the orderly meeting, chairs &
> secretary!) the topic of 'well-known BGP community vs BGP Path
> attribute' came up, in context of having a marker to signify or signal a
> route's audience [Sriram] https://datatracker.ietf.org/
> meeting/98/agenda/idr/
>
> I've come to the conclusion that we have no choice other then to use a
> well-known communities for boolean functions like the ones currently on
> the table.
>
> There are a number of significant advantages to using communities, that
> in my opinion outweigh the perceived benefit of introducing a new path
> attribute. This is asserted from a deployment process and adoption rate
> perspective. Throughout this email I'll refer to the _function_ of the
> path attribute/community as "feature X". Most reasons relate to
> "accelerated" deployment rates. With "accelerated" I'm referring to a
> 2-3 year timescale rather then 8+ years. I'll share my analysis below.
>
> We have to assume that there are many networks which might (from this
> moment on) _never_ upgrade their software to the required newer software
> to support feature X natively. There are a number of reasons why a
> network might never receive the necessary software upgrades: the network
> choose to continue using devices well after the End-of-Sale/Support/Life
> date for economic reasons. Some networks use hardware longer then the
> vendor intended, sometimes because the operator disagreed with the
> vendor's view on longevity. Like some of you, I've travelled to regions
> of the world where a good router, is a router without bullet holes in
> it, in such cases you'll have to make things work with whatever was
> loaded on there. In other cases, the vendor simply has gone bankrupt,
> and the network has to make do with what is available on their sparing
> shelves until the hardware is fully amortised.
>
> With the above in mind, I'd argue that for many BGP features it is
> entirely acceptable to state "upgrade your software and receive awesome
> feature Y!". But in the instance of routing security, one might need to
> salvage as much as one can in existing deployments, for altruistic
> reasons.
>
> I think it is fair to assume that in all cases, the BGP speakers will
> support RFC 1997 BGP Communities. We can also assume that the device
> supports neighbor-specific routing policy options to (at the very least)
> match, and subsequently deny or permit based on the RFC 1997 community.
>
> Another interesting (perhaps underappreciated) angle is that there are
> both open source and commercial ancillary configuration management
> systems on the market, which will happily manage devices which were not
> upgraded to support Feature X natively. When vendor B doesn't want to
> implement native support for Feature X, perhaps the ancillary third
> market will support Feature X on vendor B.
>
> A number considerations apply for well-known BGP communities in context
> of route leak prevention:
>
> - on day 0, there will be no routes tagged with the well-known
>   community, likewise on day 365, there will be a small number of routes
>   tagged with the well-known community.
>
> - throughout the lifetime of feature X, the tagged routs are likely
>   to be outnumbered by the untagged routes, in all contexts.
>
> - ideally feature X can be deployed incrementally within an AS, so it
>   should _add_ an extra layer of protection, rather then replace or
>   hotswap an existing protection function.
>
> - RFC 1997 communities are transitive, so Feature X must at the very
>   least not be significantly hindered by the transivity, and in an ideal
>   case actually benefit from the transivity property. Enforcing
>   non-transivity through a RFC 2119-style "When received on EBGP, MUST
>   delete" is also acceptable. Operators can manually emulate the
>   non-transivity, and wait for software upgrades to do it for them.
>
> - the presence of a well-known community on one route, cannot, and
>   should not be superimposed to other routes received through the same
>   BGP session. In a more general sense, a well-known community on one
>   route cannot act as a semaphore for the entire session. I am not aware
>   of any implementations which allow to match/act on one route and
>   perform congruent manipulation of properties on a different route.
>
> - When the well-known community for Feature X is present (aka 'true'),
>   we can assume feature X for the route was enabled intentionally,
>   however, in the case where it is absent, we're dealing with either an
>   'unknown' or 'false'. The deny/accept logic we expect to be present
>   either through manual manipulation or through
>
> We also might be able to assume that networks looking to implement
> Feature X, will do so out of their own volition, sufficiently motivated
> to do so correctly. (Even though they are implementing the feature
> manually!) Likewise, there will be a significant number of networks
> which will not hear about Feature X for the foreseeable future, and only
> receive the feature through software upgrades. In other words: network
> operators whom are ignorant of Feature X until they read Release notes,
> could be considered harmless. Furthermore, networks which are well
> intended, might be in a position to recitfy erroneous use of the
> well-known community for feature X when received across EBGP sessions.
>
> >From my own deployment perspective, when using a BGP Community,
> (disclaimer: merely stating options!) I can start deploying _right_now_,
> _network-wide_ (meanwhile waiting for software upgrades to slowly start
> catching up and replace my manual implementation). More importantly, I
> can deploy in a heterogeneous environment where the timelines for policy
> deployment and software deployment are not aligned, or with parts of the
> network not even expected to receive the required software upgrade for
> native support.
>
> We haven't seen a standards track well-known community in a while, but
> I'd be supportive of a well-known community RFC which demands rigorous
> discipline related to the transivity, semantics, and would provide
> configuration examples for those who cannot (yet) use Feature X
> natively, with an agreed upon upgrade path to native support for
> feature X.
>
> As long as the benefits of using Feature X are 'egocentric' (aka
> "deploying this concept helps me, and I don't need others to cooperate
> with me"), and misuse of Feature X through the well-known community is
> either merely self-inflicted pain, or harmless, we'll be fine.
>
> Since Feature X is positioned in context of routing security, something
> we'd probably like to see broad adoption on, I'd argue that the lowest
> common denominator should be used: well-known BGP communities.
>
> Kind regards,
>
> Job
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a1144ca76e4a4bb054c212714
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi, Job,<div><br></div><div>Your message was very well wri=
tten, well thought-out, and presents a good case for use of communities.</d=
iv><div><br></div><div>I think it makes one or two assumptions that turn ou=
t to be incorrect.</div><div><br></div><div>I will try to address a couple =
of issues, that I think need to be discussed. (Sorry, it is a long message.=
)</div><div><br></div><div>First, a point of clarification - in Sri&#39;s p=
resentation, the slide where he is discussing &quot;community vs attribute&=
quot;, the context is ONLY for intra-AS, not inter-AS, usage.</div><div><br=
></div><div>This is also in-scope for the &quot;open&quot; draft, which inc=
ludes a non-transitive attribute (iOTC, internal only to customer), and pro=
bably more relevant in that discussion. (For that case, I would point out t=
hat they are not mutually exclusive, and for any AS already using communiti=
es, the impact of adding the Open and the iOTC attribute, would be classifi=
ed as &quot;belt and suspenders&quot; - redundant methods of protection aga=
inst accidental leaks.</div><div><br></div><div>Second is the propagation c=
haracteristics of communities (1997 in particular), vs any new path attribu=
te.</div><div><br></div><div>It is unfortunately the case, that in at least=
 one major vendor&#39;s implementation, propagation of communities is off b=
y default. This means that even if a new well-known community were agreed u=
pon, the usefulness of it would be extremely limited until every AS using f=
irmware that does not propagate-by-default, has changed the configuration o=
n every BGP neighbor to propagate communities.</div><div><br></div><div>In =
contrast, the BGP protocol RFCs require optional transitive attributes whic=
h are not understood, to be propagated. If the rules for a particular new a=
ttribute also require the attribute to be propagated (regardless of the att=
ributes value(s)), a new attribute would have global visibility as soon as =
it gets deployed by any ASN, and as it gained adoption, the usefulness of t=
he attribute (based on the attribute values) would increase monotonically.<=
/div><div><br></div><div>The _Feature_X_ value IS in its propagation, NOT o=
n its active use. This distinction is very important, and tips the equation=
 in favor of attributes. Note also, this does NOT preclude the use of commu=
nities, even before the attribute is available in shipping code. It does me=
an that the usefulness is significantly restricted outside of the contiguou=
s zone of bidirectional community usage. E.g. Does every ISP that accepts c=
ommunities also send them, and if that is not the case, the community imple=
mentation would suffer.</div><div><br></div><div>The presentation and curre=
nt state of the I-D are not necessarily clear (and possibly not correct) on=
 the intended behavior. I will be working with my co-authors to correct the=
se problems. The correct rules for the attribute are as follows:</div><div>=
<br></div><div><ul><li>Session-level Role is used to control marking and de=
tection rules applicable for that session.=C2=A0</li><li>Marking and detect=
ion is per-prefix.</li><li>Some details on interactions with other BGP mech=
anisms needs more work (I&#39;ll be working with my co-authors on that), su=
ch as atomic-aggregate.</li><li>Incremental deployment is a fundamental cha=
racteristic, and is intended to incrementally improve detection, without ca=
using false positives if deployed consistently with actual neighbor roles</=
li><li>If a given neighbor does not support the Role attribute (during Open=
), the locally configured Role should still be used:</li><ul><li>Since the =
inbound marking will not exist on the last hop, the locally configured Role=
 should be used to apply an inbound marking as if the Role had been negotia=
ted and the prefix marked by the neighbor accordingly</li><li>Inbound detec=
tion based on the Role should be done.</li></ul><li>Of the four Role types,=
 this unilateral Role setting (if not understood by a peer) will work corre=
ctly for three (peer, customer, transit) but not the fourth (complex)</li><=
ul><li>Complex Role, and complex behavior requires successful negotiation w=
ith a peer that supports Role, and is also configured for complex</li><li>C=
omplex is the one Role where marking is dependent on prefixes having existi=
ng markings, or local origination.</li><li>Complex=C2=A0</li></ul><li>All m=
arking is intended to be automatic, with no operator input other than Role =
setting towards neighbors</li><ul><li>It may be the case that implementatio=
ns provide a &quot;safety-valve&quot; during early deployments, to disable =
marking to handle situations where implementation errors are discovered</li=
><li>iBGP peers and confederation peers should probably be implemented to a=
utomatically have role Complex</li><li>Sensible defaults should be used to =
avoid creating the problem being solved.=C2=A0</li><li>Default Role, if any=
, should be Peer (or maybe Transit).=C2=A0</li><li>The combination of exist=
ing marking and outbound Role type must also prevent announcement or propag=
ation of leaks</li><ul><li>During ongoing WG discussion and revisions, the =
consensus on &quot;must&quot; might not be reached, in which case &quot;sho=
uld&quot; is the minimum, with local policy override possible</li><li>Regar=
dless of announcement, the received marking MUST NOT be modified, so that o=
ther parties are aware of the prefix&#39;s status</li></ul></ul><li>As long=
 as a prefix is marked at some point as having been received from a peer or=
 transit neighbor, it will be possible to detect that a leak has occurred b=
y a receiving party whose neighbor is &quot;peer&quot; or &quot;customer&qu=
ot;.</li><li>Two parties benefit in deploying the attribute immediately, by=
 being protected against leaks of their announced routes by any direct or i=
ndirect mutual customer.=C2=A0</li><ul><li>This happens even without coordi=
nation between the two parties.</li></ul><li>Until very widely deployed, le=
aks will still be possible, however:</li><ul><li>The scope of leaks will be=
 reduced to the set of unmarked prefixes</li><li>Unmarked prefixes can only=
 be heard from ISPs who don&#39;t mark, or from their customer cone(s)</li>=
<ul><li>At that point, the feedback mechanism provides strong incentive to =
mark</li><li>The bigger an ISP is, the more impact to a leak beneath them t=
here is, and the more incentive there is to mark</li></ul><li>The set of IS=
Ps who don&#39;t mark could be significantly reduced if/when individual IXP=
s adopt policies that require marking</li><li>ISPs who require peers and cu=
stomers to mark would also have significant impact on potential sources</li=
></ul><li>Early deployment by large ISPs (preferably Tier-1) would directly=
 benefit themselves, and impact the cone of leak-resistant networks.</li><l=
i>There is benefit even to leaf networks, in protecting themselves from lea=
ks heard from transit providers</li><ul><li>Suppose a leaf network has prov=
iders A and B</li><li>Suppose a leak is propagated by B, but not by A</li><=
ul><li>Suppose B only has one path to the leaked prefix(es) and elects to p=
ropagate a known leak</li></ul><li>By filtering out (automatically) prefixe=
s from B that are leaks:</li><ul><li>The leaf network can send traffic to t=
hose prefixes via A</li><li>The path through A is highly likely to not be a=
dversely affected by traffic following the leak</li><li>This is still per-p=
refix behavior</li></ul></ul></ul><div><br></div><div><br></div><div>The in=
cremental deployment does require setting the Role without the benefit of n=
egotiation. In the case of correctly applied Roles, the automated per-prefi=
x marking and detection works. The marking controls the internal propagatio=
n behavior to prevent leak origination, and depending on existing markings,=
 may prevent leak propagation. Similarly, detection may allow inbound detec=
tion of leaks or propagated leaks, making filtering possible.</div><div><br=
></div>Unilateral Role-setting (and &quot;proxy&quot; marking) allows gap-f=
illing in late-deployment scenarios.=C2=A0</div><div>Here are the behaviors=
 of unilateral role setting, at different stages of partial deployment:<br>=
<ul><li>Suppose only one AS, X, does not participate<br></li><ul><li>All of=
 X&#39;s neighbors do participate<br></li><li>Every prefix propagated throu=
gh X will be marked, including with values that correspond to the receiver&=
#39;s configured Role assignment of X<br></li><li>If all the Role assignmen=
ts toward X are correct, then:<br></li><ul><li>Leaks propagated and not blo=
cked by X (which would have been blocked, if X implemented) will be blocked=
 by every neighbor of X upon receipt (modulo local policy on the recipient)=
<br></li><li>Leaks by X will be detected and blocked (modulo local policy)<=
br></li></ul><li>If a Role assignment toward X is wrong:<br></li><ul><li>X =
is transit, configured as customer<br></li><ul><li>Sender sends all routes,=
 leak toward X; X may filter (no impact), otherwise everyone is impacted in=
cl. sender&#39;s transits and peer s<br></li><li>X sends all routes, recipi=
ent leaks all routes - X, X&#39;s peers/transits, and recipient are all imp=
acted<br></li></ul><li>X is peer, configured as customer<br></li><ul><li>Se=
nder sends all routes, leaks; impact is sender&#39;s upstreams<br></li><li>=
X sends X&#39;s customer&#39;s routes, recipient leaks to peers/transits - =
X and recipient + upstreams affected<br></li></ul><li>X is transit, configu=
red as peer<br></li><ul><li>Sender sends only customer prefixes - correct b=
ehavior<br></li><li>X sends all routes, sent only to customers - correct be=
havior, except X&#39;s transit&#39;s prefixes are blocked<br></li></ul><li>=
X is peer, configured as transit<br></li><ul><li>Sender sends only customer=
 prefixes - correct behavior<br></li><li>X sends only customer routes, sent=
 only to customers - correct behavior<br></li></ul><li>X is customer, confi=
gured as transit<br></li><ul><li>Sender sends only customer prefixes - subs=
et of expected prefixes - only X is impacted<br></li><li>X sends only custo=
mer prefixes - not sent to peers/transit, only X is impacted<br></li></ul><=
li>X is customer, configured as peer<br></li><ul><li>Sender sends only cust=
omer prefixes - subset of expected prefixes - only X is impacted<br></li><l=
i>X sends only customer prefixes - not sent to peers/transit, only X is imp=
acted<br></li></ul></ul></ul><li>Suppose every AS that does not participate=
, has only neighbors that do participate<br></li><ul><li>The same situation=
 occurs as in the &quot;only one AS does not participate&quot;:<br></li><ul=
><li>A leak has to originate somewhere<br></li><li>If the leak originates o=
n a non-participant, it gets detected and block by all its neighbors, unles=
s the unilateral Role of the non-participant is incorrect on the receiver s=
ide<br></li><ul><li>Role error on the sender side, would be an instance of =
&quot;leak originates on a participant&quot;, below</li><li>Leaked non-loca=
l prefixes which are first correctly marked by a participant, and leaked by=
 the non-participant:<br></li><ul><li>Transit leaked to transit-marked-as-t=
ransit: sent only to customers, impact is leaker and its upstreams, and cus=
tomers</li><li>Transit leaked to peer-marked-as-transit: same</li><li>Peer =
leaked to transit-marked-as-transit: same</li><li>Peer leaked to peer-marke=
d-as-transit: same</li><li>Transit leaked to transit-marked-as-peer: same</=
li><li>Peer leaked to peer-marked-as-transit: same</li></ul><li>In all case=
s, impacts are to non-participant, and to participant making error in manua=
l Role setting</li></ul><li>If the leak originates on a participant, it mea=
ns there was a Role mismatch between that participant, and a non-participan=
t<br></li><ul><li>Marking a customer as a peer or provider fails &quot;safe=
&quot; - only customer routes are received, and get blocked towards peers o=
r providers<br></li><li>Marking a peer or provider as a customer, results i=
n the following:<br></li><ul><li>Previously unmarked prefixes (local to the=
 Peer or Provider) get marked as &quot;customer&quot;; only the Peer or Pro=
vider itself is affected<br></li><li>Prefixes marked by the non-participant=
&#39;s neighbors get marked, then detection rules apply:<br></li><ul><li>no=
n-participant&#39;s peer/provider routes are detected as leaks, and are blo=
cked (modulo local policy)<br></li><li>non-participant&#39;s customers&#39;=
 routes are not considered leaks; only non-participant is affected<br></li>=
</ul></ul></ul></ul></ul><li>Note that all of the failures (in the singleto=
n contiguous non-implementer topologies) are induced by errors in Role sett=
ing, and possibly a combination of Role error and leakage.</li><ul><li>This=
 provides incremental incentive to request peers to implement and configure=
 their Role</li><li>The recommended method is to keep any existing measures=
 in place to prevent leaking, and identify marking errors seen inbound</li>=
<li>One all Roles are set correctly, no further leaks can occur if all neig=
hbors&#39; neighbors either implement or have their Roles set correctly.</l=
i></ul></ul><div>I realize that a lot of this needs to go in the document(s=
), but I hope I have at least indicated that this has had some thought give=
n to it, and that I don&#39;t yet see situations where this makes anything =
worse, and in most cases offers benefit even at relatively sparse deploymen=
t.</div></div><div><br></div><div>Brian</div></div><div class=3D"gmail_extr=
a"><br><div class=3D"gmail_quote">On Fri, Mar 31, 2017 at 9:01 PM, Job Snij=
ders <span dir=3D"ltr">&lt;<a href=3D"mailto:job@ntt.net" target=3D"_blank"=
>job@ntt.net</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Dear c=
olleagues,<br>
<br>
In today&#39;s IDR session (thank you for the orderly meeting, chairs &amp;=
<br>
secretary!) the topic of &#39;well-known BGP community vs BGP Path<br>
attribute&#39; came up, in context of having a marker to signify or signal =
a<br>
route&#39;s audience [Sriram] <a href=3D"https://datatracker.ietf.org/meeti=
ng/98/agenda/idr/" rel=3D"noreferrer" target=3D"_blank">https://datatracker=
.ietf.org/<wbr>meeting/98/agenda/idr/</a><br>
<br>
I&#39;ve come to the conclusion that we have no choice other then to use a<=
br>
well-known communities for boolean functions like the ones currently on<br>
the table.<br>
<br>
There are a number of significant advantages to using communities, that<br>
in my opinion outweigh the perceived benefit of introducing a new path<br>
attribute. This is asserted from a deployment process and adoption rate<br>
perspective. Throughout this email I&#39;ll refer to the _function_ of the<=
br>
path attribute/community as &quot;feature X&quot;. Most reasons relate to<b=
r>
&quot;accelerated&quot; deployment rates. With &quot;accelerated&quot; I&#3=
9;m referring to a<br>
2-3 year timescale rather then 8+ years. I&#39;ll share my analysis below.<=
br>
<br>
We have to assume that there are many networks which might (from this<br>
moment on) _never_ upgrade their software to the required newer software<br=
>
to support feature X natively. There are a number of reasons why a<br>
network might never receive the necessary software upgrades: the network<br=
>
choose to continue using devices well after the End-of-Sale/Support/Life<br=
>
date for economic reasons. Some networks use hardware longer then the<br>
vendor intended, sometimes because the operator disagreed with the<br>
vendor&#39;s view on longevity. Like some of you, I&#39;ve travelled to reg=
ions<br>
of the world where a good router, is a router without bullet holes in<br>
it, in such cases you&#39;ll have to make things work with whatever was<br>
loaded on there. In other cases, the vendor simply has gone bankrupt,<br>
and the network has to make do with what is available on their sparing<br>
shelves until the hardware is fully amortised.<br>
<br>
With the above in mind, I&#39;d argue that for many BGP features it is<br>
entirely acceptable to state &quot;upgrade your software and receive awesom=
e<br>
feature Y!&quot;. But in the instance of routing security, one might need t=
o<br>
salvage as much as one can in existing deployments, for altruistic<br>
reasons.<br>
<br>
I think it is fair to assume that in all cases, the BGP speakers will<br>
support RFC 1997 BGP Communities. We can also assume that the device<br>
supports neighbor-specific routing policy options to (at the very least)<br=
>
match, and subsequently deny or permit based on the RFC 1997 community.<br>
<br>
Another interesting (perhaps underappreciated) angle is that there are<br>
both open source and commercial ancillary configuration management<br>
systems on the market, which will happily manage devices which were not<br>
upgraded to support Feature X natively. When vendor B doesn&#39;t want to<b=
r>
implement native support for Feature X, perhaps the ancillary third<br>
market will support Feature X on vendor B.<br>
<br>
A number considerations apply for well-known BGP communities in context<br>
of route leak prevention:<br>
<br>
- on day 0, there will be no routes tagged with the well-known<br>
=C2=A0 community, likewise on day 365, there will be a small number of rout=
es<br>
=C2=A0 tagged with the well-known community.<br>
<br>
- throughout the lifetime of feature X, the tagged routs are likely<br>
=C2=A0 to be outnumbered by the untagged routes, in all contexts.<br>
<br>
- ideally feature X can be deployed incrementally within an AS, so it<br>
=C2=A0 should _add_ an extra layer of protection, rather then replace or<br=
>
=C2=A0 hotswap an existing protection function.<br>
<br>
- RFC 1997 communities are transitive, so Feature X must at the very<br>
=C2=A0 least not be significantly hindered by the transivity, and in an ide=
al<br>
=C2=A0 case actually benefit from the transivity property. Enforcing<br>
=C2=A0 non-transivity through a RFC 2119-style &quot;When received on EBGP,=
 MUST<br>
=C2=A0 delete&quot; is also acceptable. Operators can manually emulate the<=
br>
=C2=A0 non-transivity, and wait for software upgrades to do it for them.<br=
>
<br>
- the presence of a well-known community on one route, cannot, and<br>
=C2=A0 should not be superimposed to other routes received through the same=
<br>
=C2=A0 BGP session. In a more general sense, a well-known community on one<=
br>
=C2=A0 route cannot act as a semaphore for the entire session. I am not awa=
re<br>
=C2=A0 of any implementations which allow to match/act on one route and<br>
=C2=A0 perform congruent manipulation of properties on a different route.<b=
r>
<br>
- When the well-known community for Feature X is present (aka &#39;true&#39=
;),<br>
=C2=A0 we can assume feature X for the route was enabled intentionally,<br>
=C2=A0 however, in the case where it is absent, we&#39;re dealing with eith=
er an<br>
=C2=A0 &#39;unknown&#39; or &#39;false&#39;. The deny/accept logic we expec=
t to be present<br>
=C2=A0 either through manual manipulation or through<br>
<br>
We also might be able to assume that networks looking to implement<br>
Feature X, will do so out of their own volition, sufficiently motivated<br>
to do so correctly. (Even though they are implementing the feature<br>
manually!) Likewise, there will be a significant number of networks<br>
which will not hear about Feature X for the foreseeable future, and only<br=
>
receive the feature through software upgrades. In other words: network<br>
operators whom are ignorant of Feature X until they read Release notes,<br>
could be considered harmless. Furthermore, networks which are well<br>
intended, might be in a position to recitfy erroneous use of the<br>
well-known community for feature X when received across EBGP sessions.<br>
<br>
&gt;From my own deployment perspective, when using a BGP Community,<br>
(disclaimer: merely stating options!) I can start deploying _right_now_,<br=
>
_network-wide_ (meanwhile waiting for software upgrades to slowly start<br>
catching up and replace my manual implementation). More importantly, I<br>
can deploy in a heterogeneous environment where the timelines for policy<br=
>
deployment and software deployment are not aligned, or with parts of the<br=
>
network not even expected to receive the required software upgrade for<br>
native support.<br>
<br>
We haven&#39;t seen a standards track well-known community in a while, but<=
br>
I&#39;d be supportive of a well-known community RFC which demands rigorous<=
br>
discipline related to the transivity, semantics, and would provide<br>
configuration examples for those who cannot (yet) use Feature X<br>
natively, with an agreed upon upgrade path to native support for<br>
feature X.<br>
<br>
As long as the benefits of using Feature X are &#39;egocentric&#39; (aka<br=
>
&quot;deploying this concept helps me, and I don&#39;t need others to coope=
rate<br>
with me&quot;), and misuse of Feature X through the well-known community is=
<br>
either merely self-inflicted pain, or harmless, we&#39;ll be fine.<br>
<br>
Since Feature X is positioned in context of routing security, something<br>
we&#39;d probably like to see broad adoption on, I&#39;d argue that the low=
est<br>
common denominator should be used: well-known BGP communities.<br>
<br>
Kind regards,<br>
<br>
Job<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</blockquote></div><br></div>

--001a1144ca76e4a4bb054c212714--


From nobody Mon Apr  3 13:13:55 2017
Return-Path: <adrian@olddog.co.uk>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 436B21294FF for <idr@ietfa.amsl.com>; Mon,  3 Apr 2017 13:13:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.619
X-Spam-Level: 
X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9aL7hXSnt1VD for <idr@ietfa.amsl.com>; Mon,  3 Apr 2017 13:13:49 -0700 (PDT)
Received: from asmtp1.iomartmail.com (asmtp1.iomartmail.com [62.128.201.248]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1694F120726 for <idr@ietf.org>; Mon,  3 Apr 2017 13:13:48 -0700 (PDT)
Received: from asmtp1.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp1.iomartmail.com (8.13.8/8.13.8) with ESMTP id v33KDkF1005837; Mon, 3 Apr 2017 21:13:46 +0100
Received: from 950129200 ([176.241.250.3]) (authenticated bits=0) by asmtp1.iomartmail.com (8.13.8/8.13.8) with ESMTP id v33KDeBR005814 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 3 Apr 2017 21:13:43 +0100
Reply-To: <adrian@olddog.co.uk>
From: "Adrian Farrel" <adrian@olddog.co.uk>
To: "'Susan Hares'" <shares@ndzh.com>, "'idr wg'" <idr@ietf.org>
References: <035901d2a263$a204a0c0$e60de240$@ndzh.com>
In-Reply-To: <035901d2a263$a204a0c0$e60de240$@ndzh.com>
Date: Mon, 3 Apr 2017 21:13:41 +0100
Message-ID: <03d201d2acb6$cbde3b10$639ab130$@olddog.co.uk>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_03D3_01D2ACBF.2DA9CF00"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQJy9qBC8F701cXQis495LO0YAEVQ6BzgAOQ
Content-Language: en-gb
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.1.0.1062-22984.002
X-TM-AS-Result: No--6.196-10.0-31-10
X-imss-scan-details: No--6.196-10.0-31-10
X-TMASE-MatchedRID: yebcs53SkkADJrf2+hNOhR/XcAla9LsVGSqdEmeD/nUJW4Re2U2pywLy tDvV39h+akWhnG4LWFMe1dimxk/EMQt3e7z0WipRaK+MsTwM+1nRahuPwaQ1Wp34fb7E2X5X678 QLKEvGo5ScMO53ropjOltpAMjEbBlDkubg39L7f92aFFWhkT3QIfGLZ++QpQzV9eB8vnmKe8mTu 1wNQz7bWpGhHN2hzD2rTHRCIAhqg5ksv7qaWt2jLMjW/sniEQKKVrLOZD1BXR/tE9YIUrwYv688 b7UXBa5hh+zDuoppuIeyhqogscOqfazQK8vdF3c85L5JHGOAXB6+4H1+M9GHpGntM3CLyHIjKcD Q/TrHaTgTqW7m1ORTxOiym2ygFHRyi3rT9eHsAHi3aa5wOREEYHTV2uJaSjbbM3UnqznDLYtjYL FZ2xmSlKRkLRcLF1LPxGNUiN+AyYXa+syOp067QXysW33GYMpYY0tNGdvli2VCgMHKlN03W5n3p /PBaJMhKLPzEV+09FwoI7ADD6NSAvuBkbttOji6ivQ8oO6nUJvibOW4IkXhD6IXkgHUCXL8z70X DTUjsY0gGvDuBPXdGHbb7mQgkX3IfPTd+OTqvFGypC5CVFOH2cuTq1AtxjpT7S4ZU4XTxDz/Kux bhpDT9NQo22x5OZQVdG7zs0JFFSBnJ5ETtWXfUKcYi5Qw/RVF2pUb6YRYK61eX0jEQ9c6okuTXu Mw1pdzI5U2cfi+8cdJWgVhit1DrqrIFIJwJ9i71Wx2uUbPLdDr8MVm6DK3TA4N9SXuYkp/hkBSy 3LYQ17CjyP3UZ5MbpGAQ2wD/3Qyx6w4CJ+2uWeAiCmPx4NwGmRqNBHmBvevqq8s2MNhPB9j2Gwz TE3vXl6hn76fRjuIZa9wiplIRXXmL4Mlh72yBVMye5OHmDzLpc0aJbFHlIQV6vLex6ViMPBQZIV vM9P+z0SyaQKAWrtEJdFpPV7T/gIiuF7tZeAlExlQIQeRG0=
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Y_wXx77xGfLcP004mar-bP8qGdA>
Subject: Re: [Idr] 2 Week WG LC for draft-ietf-idr-bgp-prefix-sid-04.txt - 3/6 to 3/20/2017 - extending to 3/31
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Apr 2017 20:13:53 -0000

This is a multipart message in MIME format.

------=_NextPart_000_03D3_01D2ACBF.2DA9CF00
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit

Hi Sue, WG,
 
Yes, sorry for not getting to this the first time around.
 
It's a good piece of work that needs to be standardised, and this document is
ready modulo the relatively small comments below.
 
Thanks,
Adrian
 
 
=== Code point stuff ===
 
I thought we had some fairly good clue in IDR about not "suggesting"
code point values, but in section 4 I found...
 
   The BGP Prefix SID attribute is an optional, transitive BGP path
   attribute.  The attribute type code is to be assigned by IANA
   (suggested value: 40).
 
As it turns out, an early allocation has been done and is recorded in
section 8. So this text should read...
 
   The BGP Prefix SID attribute is an optional, transitive BGP path
   attribute.  The attribute type code 40 has been assigned by IANA
   (see Section 8).
 
 
=== Rambling Thoughts ===
 
Section 4.2
 
      *  S flag: if set then it means that the BGP speaker attaching the
         Prefix-SID Attribute to a prefix is capable of processing the
         IPv6 Segment Routing Header (SRH,
         [I-D.ietf-6man-segment-routing-header]) for the segment
         corresponding to the originated IPv6 prefix.  The use case
         leveraging the S flag is described in
         [I-D.ietf-spring-segment-routing-msdc].
 
Suppose that sometime in the future a third type of SID processing is
defined. Well, you'd burn a new bit, say the X bit, to indicate the
support of that method. But how would you set the S bit in that case?
So, perhaps you need two bits already.
 
 
=== Minor ===
 
Odd to reference draft-ietf-6man-segment-routing-header but not
draft-ietf-spring-segment-routing-mpls.
 
---
 
I think draft-ietf-spring-segment-routing and draft-ietf-spring-segment-
routing-msdc are normative references based both on the importance as
background material and the text in the first paragraph of the document.
 
The material in Section 1 suggests that draft-ietf-spring-segment-
routing-central-epe and draft-ietf-idr-bgpls-segment-routing-epe might
also be normative references.
 
---
 
The RFC Editor will require that the first section of the document is
the "Introduction".  I think you fix this by moving the current Section
1 to be a sub-section of the current Section 2.
 
---
 
I wish we (or the SPRING WG) would nail down the terminology of a
"segment" and a "segment identifier." This muddiness is just not
necessary, but is perpetrated by this document saying that
  The ingress node of the SR domain prepends a (sic) SR
  header containing "segments" to an incoming packet.
but then saying that
  Each segment is identified by a Segment Identifier (SID).
So, in fact, the SR header contains SIDs not segments.
 
This confusions is continued by
  Each segment represents a topological instruction
Do segments *represent* topological instructions or are they
topological instruction?
 
---
 
Section 2 has...
   A BGP-Prefix-SID is always global within the SR/BGP domain
While this language is clear from the referenced documents, it is not
very clear in this document. I think you need to say ...
   A BGP-Prefix-SID is always a global SID [I-D.ietf-spring-segment-
   routing] within the SR/BGP domain
...although (of course) draft-ietf-spring-segment-routing talks about
global segments but not global SIDs except in 3.1.3 where the mention
is a little without context.
 
---
 
Section 3.1 has...
      While it is recommended to use the same SRGB across
      all the nodes within the SR domain, the SRGB of a node is a local
      property and could be different on different speakers.
I *think* that this recommendation comes from the referenced document
[I-D.ietf-spring-segment-routing] and not from this current document.
This would be clearer by writing...
      While [I-D.ietf-spring-segment-routing] recommends to use the same
      SRGB across all the nodes within the SR domain, the SRGB of a node
      is a local property and could be different on different speakers.
Doing this will stop questions about whether "recommended" is supposed
to be in 2119 upper case.
 
---
 
In 3.1...
 
      The index L_I is a 32 bit offset in the SRGB.  Each BGP speaker
      derives its local MPLS label, L, by adding L_I to the start value
      of its own SRGB, and programs L in its MPLS dataplane as its
      incoming/local label for the prefix.
 
Is this right or is L_I, as defined in draft-ietf-spring-segment-
routing-mpls, a 20 bit offset into a reduced 20-bit space out of the 32-
bit SID space?
 
FWIW, this section is another place I would have expected to see a
reference to draft-ietf-spring-segment-routing-mpls.
 
---
 
First para of section 4 ends...
 
   The value field of the BGP-Prefix-SID
   attribute has the following format:
 
Is there supposed to be a figure here? The next paragraph doesn't seem
to flow. Maybe this sentence can be deleted.
 
---
 
4.2
Are you sure you don't want a registry for flags?
 
---
 
5.1
   A BGP speaker may be locally configured with an SRGB=[GB_S, GB_E].
Probably "MAY"?
I think that the notation needs some small explanation.
 
---
 
5.1
   The Label Index gives a hint to the receiving node on which
   local/incoming label the BGP speaker SHOULD use.
 
This is like a double SHOULD: "hint" and "SHOULD use".
It might be helpful to describe the potential variance.
 
---
 
6.
   In order to
   prevent distribution of the BGP Prefix-SID attribute beyond its
   intended scope of applicability, attribute filtering MAY be deployed.
 
Yeah. That's OK, but the language implies there are other ways to prevent
distribution beyond the intended scope.
 
---
 
7.
   all the occurrences of
   the attribute other than the first one SHALL be discarded and the BGP
   Update message shall continue to be processed.
 
I think the second "shall" is a "SHALL" as well.
 
 
 
=== Nits ===
 
The authors need to sort out their affiliations and email addresses.
 
---
 
The AD will probably not be happy with 7 names on the front page.
 
---
 
3.1
s/This informations/This information/
 
---
 
4.1 and 4.3
s/None are/None is/
 
---
 
5.2
   When a SR IPv6 BGP speaker receives a IPv6 Unicast BGP Update with
s/a/an/ x2
 
---
 
6.
s/[RFC3107]or/[RFC3107] or/
 
---
 
6.1
s/([RFC3107])The/([RFC3107]).  The/
 
---
 
Section 11 might possibly be of no value.
 
From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Susan Hares
Sent: 21 March 2017 16:53
To: 'idr wg'
Subject: Re: [Idr] 2 Week WG LC for draft-ietf-idr-bgp-prefix-sid-04.txt - 3/6
to 3/20/2017 - extending to 3/31
 
IDR WG: 
 
Perhaps the WG LC came at a bad time since have received only 1 response.  We
will length the call to 3/31.  Unless with have substantial input, this WG LC
will not indicate consensus. 
 
Sue Hares 

------=_NextPart_000_03D3_01D2ACBF.2DA9CF00
Content-Type: text/html;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta =
http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii"><meta name=3DProgId content=3DWord.Document><meta =
name=3DGenerator content=3D"Microsoft Word 14"><meta name=3DOriginator =
content=3D"Microsoft Word 14"><link rel=3DFile-List =
href=3D"cid:filelist.xml@01D2ACBF.29CDF460"><!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:EnvelopeVis/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-GB</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:DoNotExpandShiftReturn/>
<w:BreakWrappedTables/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
<m:mathPr>
<m:mathFont m:val=3D"Cambria Math"/>
<m:brkBin m:val=3D"before"/>
<m:brkBinSub m:val=3D"&#45;-"/>
<m:smallFrac m:val=3D"off"/>
<m:dispDef/>
<m:lMargin m:val=3D"0"/>
<m:rMargin m:val=3D"0"/>
<m:defJc m:val=3D"centerGroup"/>
<m:wrapIndent m:val=3D"1440"/>
<m:intLim m:val=3D"subSup"/>
<m:naryLim m:val=3D"undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState=3D"false" DefUnhideWhenUsed=3D"true" =
DefSemiHidden=3D"true" DefQFormat=3D"false" DefPriority=3D"99" =
LatentStyleCount=3D"267">
<w:LsdException Locked=3D"false" Priority=3D"0" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Normal"/>
<w:LsdException Locked=3D"false" Priority=3D"9" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"heading 1"/>
<w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" =
Name=3D"heading 2"/>
<w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" =
Name=3D"heading 3"/>
<w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" =
Name=3D"heading 4"/>
<w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" =
Name=3D"heading 5"/>
<w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" =
Name=3D"heading 6"/>
<w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" =
Name=3D"heading 7"/>
<w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" =
Name=3D"heading 8"/>
<w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" =
Name=3D"heading 9"/>
<w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 1"/>
<w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 2"/>
<w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 3"/>
<w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 4"/>
<w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 5"/>
<w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 6"/>
<w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 7"/>
<w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 8"/>
<w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 9"/>
<w:LsdException Locked=3D"false" Priority=3D"35" QFormat=3D"true" =
Name=3D"caption"/>
<w:LsdException Locked=3D"false" Priority=3D"10" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Title"/>
<w:LsdException Locked=3D"false" Priority=3D"1" Name=3D"Default =
Paragraph Font"/>
<w:LsdException Locked=3D"false" Priority=3D"11" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Subtitle"/>
<w:LsdException Locked=3D"false" Priority=3D"22" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Strong"/>
<w:LsdException Locked=3D"false" Priority=3D"20" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Emphasis"/>
<w:LsdException Locked=3D"false" Priority=3D"59" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Table Grid"/>
<w:LsdException Locked=3D"false" UnhideWhenUsed=3D"false" =
Name=3D"Placeholder Text"/>
<w:LsdException Locked=3D"false" Priority=3D"1" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"No Spacing"/>
<w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Shading"/>
<w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light List"/>
<w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Grid"/>
<w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1"/>
<w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2"/>
<w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 1"/>
<w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 2"/>
<w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1"/>
<w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2"/>
<w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3"/>
<w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Dark List"/>
<w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Shading"/>
<w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful List"/>
<w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Grid"/>
<w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light List Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 1"/>
<w:LsdException Locked=3D"false" UnhideWhenUsed=3D"false" =
Name=3D"Revision"/>
<w:LsdException Locked=3D"false" Priority=3D"34" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"List Paragraph"/>
<w:LsdException Locked=3D"false" Priority=3D"29" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Quote"/>
<w:LsdException Locked=3D"false" Priority=3D"30" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Intense Quote"/>
<w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 1"/>
<w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light List Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 2"/>
<w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light List Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 3"/>
<w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light List Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 4"/>
<w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light List Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 5"/>
<w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light List Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 6"/>
<w:LsdException Locked=3D"false" Priority=3D"19" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Subtle Emphasis"/>
<w:LsdException Locked=3D"false" Priority=3D"21" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Intense Emphasis"/>
<w:LsdException Locked=3D"false" Priority=3D"31" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Subtle Reference"/>
<w:LsdException Locked=3D"false" Priority=3D"32" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Intense Reference"/>
<w:LsdException Locked=3D"false" Priority=3D"33" SemiHidden=3D"false" =
UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Book Title"/>
<w:LsdException Locked=3D"false" Priority=3D"37" Name=3D"Bibliography"/>
<w:LsdException Locked=3D"false" Priority=3D"39" QFormat=3D"true" =
Name=3D"TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><style><!--
/* Font Definitions */
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;
	mso-font-charset:0;
	mso-generic-font-family:swiss;
	mso-font-pitch:variable;
	mso-font-signature:-536870145 1073786111 1 0 415 0;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;
	mso-font-charset:0;
	mso-generic-font-family:swiss;
	mso-font-pitch:variable;
	mso-font-signature:-520081665 -1073717157 41 0 66047 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{mso-style-unhide:no;
	mso-style-qformat:yes;
	mso-style-parent:"";
	margin:0cm;
	margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-font-family:Calibri;
	mso-bidi-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{mso-style-noshow:yes;
	mso-style-priority:99;
	color:blue;
	text-decoration:underline;
	text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-noshow:yes;
	mso-style-priority:99;
	color:purple;
	text-decoration:underline;
	text-underline:single;}
span.EmailStyle17
	{mso-style-type:personal;
	mso-style-noshow:yes;
	mso-style-unhide:no;
	font-family:"Calibri","sans-serif";
	mso-ascii-font-family:Calibri;
	mso-hansi-font-family:Calibri;
	color:windowtext;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	mso-style-noshow:yes;
	mso-style-unhide:no;
	mso-ansi-font-size:11.0pt;
	mso-bidi-font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	mso-ascii-font-family:Calibri;
	mso-fareast-font-family:Calibri;
	mso-hansi-font-family:Calibri;
	mso-bidi-font-family:"Times New Roman";
	color:#1F497D;}
span.SpellE
	{mso-style-name:"";
	mso-spl-e:yes;}
.MsoChpDefault
	{mso-style-type:export-only;
	mso-default-props:yes;
	font-size:10.0pt;
	mso-ansi-font-size:10.0pt;
	mso-bidi-font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;
	mso-header-margin:36.0pt;
	mso-footer-margin:36.0pt;
	mso-paper-source:0;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 10]><style>/* Style Definitions */
table.MsoNormalTable
	{mso-style-name:"Table Normal";
	mso-tstyle-rowband-size:0;
	mso-tstyle-colband-size:0;
	mso-style-noshow:yes;
	mso-style-priority:99;
	mso-style-parent:"";
	mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
	mso-para-margin:0cm;
	mso-para-margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:10.0pt;
	font-family:"Times New Roman","serif";}
</style><![endif]--><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-GB link=3Dblue =
vlink=3Dpurple style=3D'tab-interval:36.0pt'><div =
class=3DWordSection1><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Hi Sue, =
WG,<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Yes, sorry for not =
getting to this the first time around.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>It's a good piece of =
work that needs to be standardised, and this document is ready modulo =
the relatively small comments below.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>Thanks,<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>Adrian<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>=3D=3D=3D Code point =
stuff =3D=3D=3D<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>I thought we had some =
fairly good clue in IDR about not =
&quot;suggesting&quot;<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>code point values, but =
in section 4 I found...<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>The BGP Prefix SID =
attribute is an optional, transitive BGP path<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>attribute.<span =
style=3D'mso-spacerun:yes'>&nbsp; </span>The attribute type code is to =
be assigned by IANA<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>(suggested value: =
40).<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>As it turns out, an =
early allocation has been done and is recorded =
in<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>section 8. So this =
text should read...<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>The BGP Prefix SID =
attribute is an optional, transitive BGP path<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>attribute.<span =
style=3D'mso-spacerun:yes'>&nbsp; </span>The attribute type code 40 has =
been assigned by IANA<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>(see Section =
8).<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>=3D=3D=3D Rambling =
Thoughts =3D=3D=3D<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Section =
4.2<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>*<span =
style=3D'mso-spacerun:yes'>&nbsp; </span>S flag: if set then it means =
that the BGP speaker attaching the<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; </span>Prefix-SID Attribute to a prefix is capable of processing =
the<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; </span>IPv6 Segment Routing Header (SRH,<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; </span>[I-D.ietf-6man-segment-routing-header]) for the =
segment<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp; </span><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span>correspon=
ding to the originated IPv6 prefix.<span =
style=3D'mso-spacerun:yes'>&nbsp; </span>The use =
case<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; </span>leveraging the S flag is described in<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; =
</span>[I-D.ietf-spring-segment-routing-msdc].<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Suppose that sometime =
in the future a third type of SID processing is<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>defined. Well, you'd =
burn a new bit, say the X bit, to indicate the<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>support of that =
method. But how would you set the S bit in that =
case?<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>So, perhaps you need =
two bits already.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>=3D=3D=3D Minor =
=3D=3D=3D<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Odd to reference =
draft-ietf-6man-segment-routing-header but not<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>draft-ietf-spring-segment-routing-mpls.<o:p></o:p><=
/span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>I think =
draft-ietf-spring-segment-routing and =
draft-ietf-spring-segment-<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>routing-msdc are =
normative references based both on the importance =
as<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>background material =
and the text in the first paragraph of the =
document.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>The material in =
Section 1 suggests that =
draft-ietf-spring-segment-<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>routing-central-epe =
and draft-ietf-idr-bgpls-segment-routing-epe =
might<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>also be normative =
references.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>The RFC Editor will =
require that the first section of the document =
is<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>the =
&quot;Introduction&quot;.<span style=3D'mso-spacerun:yes'>&nbsp; =
</span>I think you fix this by moving the current =
Section<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>1 to be a sub-section =
of the current Section 2.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>I wish we (or the =
SPRING WG) would nail down the terminology of a<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>&quot;segment&quot; =
and a &quot;segment identifier.&quot; This muddiness is just =
not<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>necessary, but is =
perpetrated by this document saying that<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp; </span>The ingress node of the SR =
domain prepends a (sic) SR<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp; </span>header containing =
&quot;segments&quot; to an incoming packet.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>but then saying =
that<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp; </span>Each segment is identified by a =
Segment Identifier (SID).<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>So, in fact, the SR =
header contains SIDs not segments.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>This confusions is =
continued by<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp; </span>Each segment represents a =
topological instruction<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Do segments =
*represent* topological instructions or are they<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>topological =
instruction?<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Section 2 =
has...<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>A BGP-Prefix-SID is =
always global within the SR/BGP domain<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>While this language is =
clear from the referenced documents, it is not<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>very clear in this =
document. I think you need to say ...<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>A BGP-Prefix-SID is =
always a global SID [I-D.ietf-spring-segment-<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>routing] within the =
SR/BGP domain<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>...although (of =
course) draft-ietf-spring-segment-routing talks =
about<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>global segments but =
not global SIDs except in 3.1.3 where the =
mention<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>is a little without =
context.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Section 3.1 =
has...<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>While =
it is recommended to use the same SRGB across<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>all the =
nodes within the SR domain, the SRGB of a node is a =
local<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
</span>property and could be different on different =
speakers.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>I *think* that this =
recommendation comes from the referenced =
document<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>[I-D.ietf-spring-segment-routing] and not from =
this current document.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>This would be clearer =
by writing...<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>While =
[I-D.ietf-spring-segment-routing] recommends to use the =
same<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>SRGB =
across all the nodes within the SR domain, the SRGB of a =
node<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>is a =
local property and could be different on different =
speakers.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Doing this will stop =
questions about whether &quot;recommended&quot; is =
supposed<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>to be in 2119 upper =
case.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>In =
3.1...<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>The =
index L_I is a 32 bit offset in the SRGB.<span =
style=3D'mso-spacerun:yes'>&nbsp; </span>Each BGP =
speaker<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>derives =
its local MPLS label, L, by adding L_I to the start =
value<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>of its =
own SRGB, and programs L in its MPLS dataplane as =
its<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
</span>incoming/local label for the prefix.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Is this right or is =
L_I, as defined in draft-ietf-spring-segment-<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>routing-mpls, a 20 bit =
offset into a reduced 20-bit space out of the =
32-<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>bit SID =
space?<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>FWIW, this section is =
another place I would have expected to see a<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>reference to =
draft-ietf-spring-segment-routing-mpls.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>First para of section =
4 ends...<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>The value field of the =
BGP-Prefix-SID<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>attribute has the =
following format:<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Is there supposed to =
be a figure here? The next paragraph doesn't =
seem<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>to flow. Maybe this =
sentence can be deleted.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>4.2<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Are you sure you don't =
want a registry for flags?<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>5.1<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>A BGP speaker may be =
locally configured with an SRGB=3D[GB_S, GB_E].<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Probably =
&quot;MAY&quot;?<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>I think that the =
notation needs some small explanation.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>5.1<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>The Label Index gives a =
hint to the receiving node on which<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>local/incoming label the =
BGP speaker SHOULD use.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>This is like a double =
SHOULD: &quot;hint&quot; and &quot;SHOULD =
use&quot;.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>It might be helpful to =
describe the potential variance.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>6.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>In order =
to<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>prevent distribution of =
the BGP Prefix-SID attribute beyond its<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>intended scope of =
applicability, attribute filtering MAY be =
deployed.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Yeah. That's OK, but =
the language implies there are other ways to =
prevent<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>distribution beyond =
the intended scope.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>7.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>all the occurrences =
of<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>the attribute other than =
the first one SHALL be discarded and the BGP<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp; </span><span =
style=3D'mso-spacerun:yes'>&nbsp;</span>Update message shall continue to =
be processed.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>I think the second =
&quot;shall&quot; is a &quot;SHALL&quot; as =
well.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>=3D=3D=3D Nits =
=3D=3D=3D<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>The authors need to =
sort out their affiliations and email addresses.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>The AD will probably =
not be happy with 7 names on the front page.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>3.1<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>s/This =
informations/This information/<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>4.1 and =
4.3<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>s/None are/None =
is/<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>5.2<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'><span =
style=3D'mso-spacerun:yes'>&nbsp;&nbsp; </span>When a SR IPv6 BGP =
speaker receives a IPv6 Unicast BGP Update with<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>s/a/an/ =
x2<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>6.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>s/[RFC3107]or/[RFC3107] =
or/<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>6.1<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>s/([RFC3107])The/([RFC3107]).<span =
style=3D'mso-spacerun:yes'>&nbsp; </span>The/<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'>---<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New Roman";color:#1F497D'>Section 11 might =
possibly be of no value.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-=
bidi-font-family:"Times New =
Roman";color:#1F497D'><o:p>&nbsp;</o:p></span></p><div =
style=3D'border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm =
4.0pt'><div><div style=3D'border:none;border-top:solid #B5C4DF =
1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=3DMsoNormal><b><span =
lang=3DEN-US =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-f=
ont-family:"Times New =
Roman";mso-ansi-language:EN-US'>From:</span></b><span lang=3DEN-US =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-f=
ont-family:"Times New Roman";mso-ansi-language:EN-US'> Idr =
[mailto:idr-bounces@ietf.org] <b>On Behalf Of </b>Susan =
Hares<br><b>Sent:</b> 21 March 2017 16:53<br><b>To:</b> 'idr =
wg'<br><b>Subject:</b> Re: [Idr] 2 Week WG LC for =
draft-ietf-idr-bgp-prefix-sid-04.txt - 3/6 to 3/20/2017 - extending to =
3/31<o:p></o:p></span></p></div></div><p =
class=3DMsoNormal><o:p>&nbsp;</o:p></p><p class=3DMsoNormal><span =
lang=3DEN-US style=3D'mso-ansi-language:EN-US'>IDR WG: =
<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US =
style=3D'mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-US =
style=3D'mso-ansi-language:EN-US'>Perhaps the WG LC came at a bad time =
since have received only 1 response.&nbsp; We will length the call to =
3/31.&nbsp; Unless with have substantial input, this WG LC will not =
indicate consensus. <o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-US =
style=3D'mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-US =
style=3D'mso-ansi-language:EN-US'>Sue Hares =
<o:p></o:p></span></p></div></div></body></html>
------=_NextPart_000_03D3_01D2ACBF.2DA9CF00--


From nobody Tue Apr  4 05:33:41 2017
Return-Path: <loa@pi.nu>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 153FF129677; Tue,  4 Apr 2017 05:33:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X-Y-BRPb2s64; Tue,  4 Apr 2017 05:33:31 -0700 (PDT)
Received: from pipi.pi.nu (pipi.pi.nu [83.168.239.141]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3332129673; Tue,  4 Apr 2017 05:33:31 -0700 (PDT)
Received: from [192.168.1.10] (unknown [119.95.45.237]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: loa@pi.nu) by pipi.pi.nu (Postfix) with ESMTPSA id 290461801581; Tue,  4 Apr 2017 14:33:24 +0200 (CEST)
From: Loa Andersson <loa@pi.nu>
To: "mpls@ietf.org" <mpls@ietf.org>, idr@ietf.org, BESS <bess@ietf.org>
Cc: "mpls-chairs@ietf.org" <mpls-chairs@ietf.org>, bess-chairs@ietf.org, idr-chairs@ietf.org, "<rtg-ads@ietf.org>" <rtg-ads@ietf.org>, draft-ietf-mpls-rfc3107bis@ietf.org
Message-ID: <93a6a754-0a2e-2053-542c-a4ce8bf9213b@pi.nu>
Date: Tue, 4 Apr 2017 20:33:14 +0800
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/TTPzkrcXZuzE0SvhA7xDYm7rUDw>
Subject: [Idr] Working Group Last Call on draft-ietf-mpls-rfc3107bis
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Apr 2017 12:33:34 -0000

Working Groups,

This is to initiate a two week working group last call in four working
groups on draft-ietf-mpls-rfc3107bis-01.

According to agreement when we decided to host this document in the
MPLS working group, this last call is also copied to the IDR and BESS
working groups.

Please send your comments to the mpls wg mailing list (mpls@ietf.org),
if you are not subscribed to the mpls wg list, send to "your own"
working group mailing list, and we'll make sure they are posted to the
MPLS wg list.

There are no IPR disclosures against this document.

All the authors and contributors have stated on the working group
mailing list that they are not aware of any other IPRs that relates
to this document.

This working group last call ends April 20, 2017.


/Loa
MPLS wg co-chairs
-- 


Loa Andersson                        email: loa@mail01.huawei.com
Senior MPLS Expert                          loa@pi.nu
Huawei Technologies (consultant)     phone: +46 739 81 21 64


From nobody Tue Apr  4 06:08:41 2017
Return-Path: <sprevidi@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56D8C126CE8 for <idr@ietfa.amsl.com>; Tue,  4 Apr 2017 06:08:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VsJEsaMNpzeI for <idr@ietfa.amsl.com>; Tue,  4 Apr 2017 06:08:37 -0700 (PDT)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D0600129680 for <idr@ietf.org>; Tue,  4 Apr 2017 06:08:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10448; q=dns/txt; s=iport; t=1491311316; x=1492520916; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=7bIfyXgAhCNyCeX3OeOaGE9hE0Rii1pDBNK40zqSt7c=; b=iT/43wcr0iYikvCDeRA+lDfTwuy+7wDAFzzyuj+MNkxwuOcn9FHP2O/1 9sthCIdqidw0fBy+VkkSm8B+TPQNUkU98nqhFTOPERJ88/W3oz0/887Rv YFLVmyQPxP8Uvpw70Dv+OjSVQzgdVqdC+AMPCzq1Wxs2JkFA3WKQXh33r I=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BfAgAjmuNY/51dJa1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1RhgQsHg1yKEpE7H5VTgg4fC4V4AhqDIj8YAQIBAQEBAQEBax0?= =?us-ascii?q?LhRUBAQEBAgEBASEROgsFCwIBCBEEAQEBAgIfBAMCAgIlCxQBCAgCBA4FigYID?= =?us-ascii?q?q14giaKWgEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgQuFQ4IFCIJihCYRARyDBi6?= =?us-ascii?q?CMQWcbQGKJogpgX2JB4Y4iFyLGAEfOH0IWxVBEQGERx0ZgUp1hm2BIYENAQEB?=
X-IronPort-AV: E=Sophos;i="5.36,275,1486425600"; d="scan'208";a="218248438"
Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 04 Apr 2017 13:08:35 +0000
Received: from XCH-RTP-009.cisco.com (xch-rtp-009.cisco.com [64.101.220.149]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id v34D8Ya3002436 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 4 Apr 2017 13:08:35 GMT
Received: from xch-rtp-010.cisco.com (64.101.220.150) by XCH-RTP-009.cisco.com (64.101.220.149) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 4 Apr 2017 09:08:34 -0400
Received: from xch-rtp-010.cisco.com ([64.101.220.150]) by XCH-RTP-010.cisco.com ([64.101.220.150]) with mapi id 15.00.1210.000; Tue, 4 Apr 2017 09:08:34 -0400
From: "Stefano Previdi (sprevidi)" <sprevidi@cisco.com>
To: "adrian@olddog.co.uk" <adrian@olddog.co.uk>
CC: Susan Hares <shares@ndzh.com>, idr wg <idr@ietf.org>
Thread-Topic: [Idr] 2 Week WG LC for draft-ietf-idr-bgp-prefix-sid-04.txt - 3/6 to 3/20/2017 - extending to 3/31
Thread-Index: AQHSrUSQN58x6kis/U6pO+BuZu9jyQ==
Date: Tue, 4 Apr 2017 13:08:34 +0000
Message-ID: <92DDAC3B-9191-4F94-B163-0E6C9500A95C@cisco.com>
References: <035901d2a263$a204a0c0$e60de240$@ndzh.com> <03d201d2acb6$cbde3b10$639ab130$@olddog.co.uk>
In-Reply-To: <03d201d2acb6$cbde3b10$639ab130$@olddog.co.uk>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.61.102.152]
Content-Type: text/plain; charset="utf-8"
Content-ID: <0706049F2F35DF4AAFF39ED7F515AA26@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/InwAGXnaj9VCQYZ7hdR5hG9I6cY>
Subject: Re: [Idr] 2 Week WG LC for draft-ietf-idr-bgp-prefix-sid-04.txt - 3/6 to 3/20/2017 - extending to 3/31
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Apr 2017 13:08:40 -0000
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==


From nobody Tue Apr  4 09:15:30 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7DB5127775; Tue,  4 Apr 2017 09:15:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -13.12
X-Spam-Level: 
X-Spam-Status: No, score=-13.12 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SC64vfQFF6B8; Tue,  4 Apr 2017 09:15:13 -0700 (PDT)
Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C6691287A7; Tue,  4 Apr 2017 09:15:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=117185; q=dns/txt; s=iport; t=1491322513; x=1492532113; h=from:to:cc:subject:date:message-id:mime-version; bh=VPq5kPXYpe4WtJcwKu78zmusRDKF5XVEQppGETLNWAY=; b=fcnGYV5b5/SsVDkBUpi7hx8JcyWfaoP6nCIkvIY5XO9kL9RypfSsot63 6aNVd8IM9gSGrjWeP9IBHD56ADlqvUGXotHFDE+U5rL+xeQ/I5ieyWzG2 eixqpp0ElLLL6c2mJx5AIeVn/ZgOQZtCKI25/wh08REV2OUYny49yoW2u g=;
X-Files: Diff_ draft-ietf-sidr-bgpsec-protocol-22-download.txt - draft-ietf-sidr-bgpsec-protocol-23.txt[1].html : 75707
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CqAgC3xeNY/4cNJK1cGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBgm47K2GBCweDXIIGiAyRO5Vygg4shByBWhyDKD8YAQIBAQEBAQEBax0?= =?us-ascii?q?LhTYJCjoHCxIBQAEGAwIEMBQTBA4FCQWKAA6sTA+BIIImK4oxAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBDg+GToIFCIV5gQQWgykugjEFiSOMd4IrhCgBg3uDAX6FU4U?= =?us-ascii?q?CgX0ZPIRZiFeBOohchnKEJgEfOIEFWxVBEQGEDjYggWN1AYZeASQHgQOBDQEBA?= =?us-ascii?q?Q?=
X-IronPort-AV: E=Sophos;i="5.36,275,1486425600";  d="html'217?scan'217,208,217";a="404513103"
Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 04 Apr 2017 16:15:10 +0000
Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v34GFAqP019695 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 4 Apr 2017 16:15:10 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 4 Apr 2017 11:15:09 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Tue, 4 Apr 2017 11:15:09 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: "sidr@ietf.org" <sidr@ietf.org>
CC: "sidr-chairs@ietf.org" <sidr-chairs@ietf.org>, "draft-ietf-sidr-bgpsec-protocol@ietf.org" <draft-ietf-sidr-bgpsec-protocol@ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
Thread-Index: AQHSrV6hkKLo0jlbPUCXfQgnSjWfzA==
Date: Tue, 4 Apr 2017 16:15:09 +0000
Message-ID: <65677770-43DB-4CE0-8E81-B35B9A82DF6F@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: multipart/mixed; boundary="_004_6567777043DB4CE08E81B35B9A82DF6Fciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/mWUSStttdgVPbaojZeOon_RNs58>
Subject: [Idr] BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Apr 2017 16:15:18 -0000

--_004_6567777043DB4CE08E81B35B9A82DF6Fciscocom_
Content-Type: multipart/alternative;
	boundary="_000_6567777043DB4CE08E81B35B9A82DF6Fciscocom_"

--_000_6567777043DB4CE08E81B35B9A82DF6Fciscocom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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==

--_000_6567777043DB4CE08E81B35B9A82DF6Fciscocom_
Content-Type: text/html; charset="utf-8"
Content-ID: <818D9C9D3C1A1D48977CEC4289437886@emea.cisco.com>
Content-Transfer-Encoding: base64
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==

--_000_6567777043DB4CE08E81B35B9A82DF6Fciscocom_--

--_004_6567777043DB4CE08E81B35B9A82DF6Fciscocom_
Content-Type: text/html;
	name="Diff_ draft-ietf-sidr-bgpsec-protocol-22-download.txt -
 draft-ietf-sidr-bgpsec-protocol-23.txt[1].html"
Content-Description: Diff_ draft-ietf-sidr-bgpsec-protocol-22-download.txt -
 draft-ietf-sidr-bgpsec-protocol-23.txt[1].html
Content-Disposition: attachment;
	filename="Diff_ draft-ietf-sidr-bgpsec-protocol-22-download.txt -
 draft-ietf-sidr-bgpsec-protocol-23.txt[1].html"; size=75707;
	creation-date="Tue, 04 Apr 2017 16:15:09 GMT";
	modification-date="Tue, 04 Apr 2017 16:15:09 GMT"
Content-ID: <AB894B41FF4DBE46BE14D5864C13C5A4@emea.cisco.com>
Content-Transfer-Encoding: base64

PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs
Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h
bC5kdGQiPgo8IS0tIHNhdmVkIGZyb20gdXJsPSgwMDQ5KWh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcv
dG9vbHMvcmZjZGlmZi9yZmNkaWZmLnB5aHQgLS0+CjxodG1sIHhtbG5zPSJodHRwOi8vd3d3Lncz
Lm9yZy8xOTk5L3hodG1sIj48aGVhZD48bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNv
bnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD1VVEYtOCI+IAogICAKICA8bWV0YSBodHRwLWVxdWl2
PSJDb250ZW50LVN0eWxlLVR5cGUiIGNvbnRlbnQ9InRleHQvY3NzIj4gCiAgPHRpdGxlPkRpZmY6
IGRyYWZ0LWlldGYtc2lkci1iZ3BzZWMtcHJvdG9jb2wtMjItZG93bmxvYWQudHh0IC0gZHJhZnQt
aWV0Zi1zaWRyLWJncHNlYy1wcm90b2NvbC0yMy50eHQ8L3RpdGxlPiAKICA8c3R5bGUgdHlwZT0i
dGV4dC9jc3MiPiAKICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBtYXJnaW4tcmlnaHQ6IGF1
dG87IH0gCiAgICB0ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0ZS1zcGFjZTogcHJlOyBm
b250LWZhbWlseTogbW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBmb250LXNpemU6IDAu
ODZlbTt9IAogICAgdGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9IAogICAgLnNtYWxsICB7
IGZvbnQtc2l6ZTogMC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1mYW1pbHk6IFZlcmRh
bmEsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAgeyBiYWNrZ3JvdW5kLWNv
bG9yOiAjRUVFOyB9IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IH0gCiAg
ICAuZGlmZiAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAgIC5sYmxvY2sgeyBiYWNr
Z3JvdW5kLWNvbG9yOiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tncm91bmQtY29sb3I6ICNG
Rjg7IH0gCiAgICAuaW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsgfSAKICAgIC5kZWxl
dGUgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvaWQgICB7IGJhY2tncm91bmQt
Y29sb3I6ICNGRkI7IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAK
ICAgIC5saW5lYnIgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxpbmVubyB7IGNv
bG9yOiByZWQ7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6ZTogMC43ZW07IHRleHQt
YWxpZ246IHJpZ2h0OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlwc2lzeyBiYWNrZ3JvdW5k
LWNvbG9yOiAjQUFBOyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRERE
OyB9IAogICAgLnJpZ2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5s
YmxvY2sgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAogICAgLnJibG9jayAuY29u
dCB7IGJhY2tncm91bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0IC5jb250IHsgYmFja2dy
b3VuZC1jb2xvcjogIzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9y
OiAjOEFEOyB9IAogICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7IGJhY2tncm91bmQt
Y29sb3I6ICNFRUU7IHBhZGRpbmc6IDJweCAwOyB9IAogICAgc3Bhbi5oaWRlIHsgZGlzcGxheTog
bm9uZTsgY29sb3I6ICNhYWE7fSAgICBhOmhvdmVyIHNwYW4geyBkaXNwbGF5OiBpbmxpbmU7IH0g
ICAgdHIuY2hhbmdlIHsgYmFja2dyb3VuZC1jb2xvcjogZ3JheTsgfSAKICAgIHRyLmNoYW5nZSBh
IHsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBjb2xvcjogYmxhY2sgfSAKICA8L3N0eWxlPiAKICAg
ICA8c2NyaXB0Pgp2YXIgY2h1bmtfaW5kZXggPSAwOwp2YXIgb2xkX2NodW5rID0gbnVsbDsKCmZ1
bmN0aW9uIGZvcm1hdF9jaHVuayhpbmRleCkgewogICAgdmFyIHByZWZpeCA9ICJkaWZmIjsKICAg
IHZhciBzdHIgPSBpbmRleC50b1N0cmluZygpOwogICAgZm9yICh4PTA7IHg8KDQtc3RyLmxlbmd0
aCk7ICsreCkgewogICAgICAgIHByZWZpeCs9JzAnOwogICAgfQogICAgcmV0dXJuIHByZWZpeCAr
IHN0cjsKfQoKZnVuY3Rpb24gZmluZF9jaHVuayhuKXsKICAgIHJldHVybiBkb2N1bWVudC5xdWVy
eVNlbGVjdG9yKCd0cltpZCQ9IicgKyBuICsgJyJdJyk7Cn0KCmZ1bmN0aW9uIGNoYW5nZV9jaHVu
ayhvZmZzZXQpIHsKICAgIHZhciBpbmRleCA9IGNodW5rX2luZGV4ICsgb2Zmc2V0OwogICAgdmFy
IG5ld19zdHI7CiAgICB2YXIgbmV3X2NodW5rOwoKICAgIG5ld19zdHIgPSBmb3JtYXRfY2h1bmso
aW5kZXgpOwogICAgbmV3X2NodW5rID0gZmluZF9jaHVuayhuZXdfc3RyKTsKICAgIGlmICghbmV3
X2NodW5rKSB7CiAgICAgICAgcmV0dXJuOwogICAgfQogICAgaWYgKG9sZF9jaHVuaykgewogICAg
ICAgIG9sZF9jaHVuay5zdHlsZS5vdXRsaW5lID0gIiI7CiAgICB9CiAgICBvbGRfY2h1bmsgPSBu
ZXdfY2h1bms7CiAgICBvbGRfY2h1bmsuc3R5bGUub3V0bGluZSA9ICIxcHggc29saWQgcmVkIjsK
ICAgIHdpbmRvdy5sb2NhdGlvbi5oYXNoID0gIiMiICsgbmV3X3N0cjsKICAgIHdpbmRvdy5zY3Jv
bGxCeSgwLC0xMDApOwogICAgY2h1bmtfaW5kZXggPSBpbmRleDsKfQoKZG9jdW1lbnQub25rZXlk
b3duID0gZnVuY3Rpb24oZSkgewogICAgc3dpdGNoIChlLmtleUNvZGUpIHsKICAgIGNhc2UgNzg6
CiAgICAgICAgY2hhbmdlX2NodW5rKDEpOwogICAgICAgIGJyZWFrOwogICAgY2FzZSA4MDoKICAg
ICAgICBjaGFuZ2VfY2h1bmsoLTEpOwogICAgICAgIGJyZWFrOwogICAgfQp9OwogICA8L3Njcmlw
dD4gCjwvaGVhZD4gCjxib2R5PiAKICA8dGFibGUgYm9yZGVyPSIwIiBjZWxscGFkZGluZz0iMCIg
Y2VsbHNwYWNpbmc9IjAiPiAKICA8dGJvZHk+PHRyIGlkPSJwYXJ0LTEiIGJnY29sb3I9Im9yYW5n
ZSI+PHRoPjwvdGg+PHRoPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvcmZjZGlmZj91
cmwyPWRyYWZ0LWlldGYtc2lkci1iZ3BzZWMtcHJvdG9jb2wtMjItZG93bmxvYWQudHh0IiBzdHls
ZT0iY29sb3I6IzAwODsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZuYnNwOzxhIGhy
ZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNpZHItYmdwc2VjLXBy
b3RvY29sLTIyLWRvd25sb2FkLnR4dCIgc3R5bGU9ImNvbG9yOiMwMDgiPmRyYWZ0LWlldGYtc2lk
ci1iZ3BzZWMtcHJvdG9jb2wtMjItZG93bmxvYWQudHh0PC9hPiZuYnNwOzwvdGg+PHRoPiA8L3Ro
Pjx0aD4mbmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0
Zi1zaWRyLWJncHNlYy1wcm90b2NvbC0yMy50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1p
ZXRmLXNpZHItYmdwc2VjLXByb3RvY29sLTIzLnR4dDwvYT4mbmJzcDs8YSBocmVmPSJodHRwczov
L3Rvb2xzLmlldGYub3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLXNpZHItYmdwc2VjLXByb3Rv
Y29sLTIzLnR4dCIgc3R5bGU9ImNvbG9yOiMwMDg7IHRleHQtZGVjb3JhdGlvbjpub25lOyI+Jmd0
OzwvYT48L3RoPjx0aD48L3RoPjwvdHI+IAogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu
byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPk5ldHdvcmsgV29ya2luZyBHcm91cCAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgTS4gTGVwaW5za2ksIEVkLjwvdGQ+PHRkPiA8L3RkPjx0
ZCBjbGFzcz0icmlnaHQiPk5ldHdvcmsgV29ya2luZyBHcm91cCAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgTS4gTGVwaW5za2ksIEVkLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm
dCI+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgTkNGPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+SW50ZXJu
ZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgTkNGPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk
IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0
YW5kYXJkcyBUcmFjayAgICAgICAgICAgICAgICAgICAgICAgICAgSy4gU3JpcmFtLCBFZC48L3Rk
Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBU
cmFjayAgICAgICAgICAgICAgICAgICAgICAgICAgSy4gU3JpcmFtLCBFZC48L3RkPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDEiPjx0ZD48L3RkPjwv
dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+
RXhwaXJlczogPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SnVseSAyMCw8L3NwYW4+IDIwMTcgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTklTVDwvdGQ+PHRkPiA8L3Rk
Pjx0ZCBjbGFzcz0icmJsb2NrIj5FeHBpcmVzOiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5PY3RvYmVy
IDUsPC9zcGFuPiAyMDE3ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICBOSVNUPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+
SmFudWFyeSAxNiw8L3NwYW4+IDIwMTc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BcHJpbCAzLDwvc3Bhbj4gMjAxNzwvdGQ+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0
ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICBCR1BzZWMgUHJvdG9jb2wg
U3BlY2lmaWNhdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAg
ICAgICAgICAgIEJHUHNlYyBQcm90b2NvbCBTcGVjaWZpY2F0aW9uPC90ZD48dGQgY2xhc3M9Imxp
bmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDAyIj48dGQ+PC90ZD48L3RyPgog
ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAg
ICAgICAgICAgICAgICBkcmFmdC1pZXRmLXNpZHItYmdwc2VjLXByb3RvY29sLTI8c3BhbiBjbGFz
cz0iZGVsZXRlIj4yPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAg
ICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1zaWRyLWJncHNlYy1wcm90b2NvbC0yPHNwYW4gY2xh
c3M9Imluc2VydCI+Mzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg
ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk
PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90
cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+QWJz
dHJhY3Q8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5BYnN0cmFjdDwvdGQ+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48
dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i
PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBCR1BzZWMs
IGFuIGV4dGVuc2lvbiB0byB0aGUgQm9yZGVyIEdhdGV3YXk8L3RkPjx0ZD4gPC90ZD48dGQgY2xh
c3M9InJpZ2h0Ij4gICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBCR1BzZWMsIGFuIGV4dGVuc2lv
biB0byB0aGUgQm9yZGVyIEdhdGV3YXk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+
CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFBy
b3RvY29sIChCR1ApIHRoYXQgcHJvdmlkZXMgc2VjdXJpdHkgZm9yIHRoZSBwYXRoIG9mIGF1dG9u
b21vdXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBQcm90b2NvbCAoQkdQKSB0
aGF0IHByb3ZpZGVzIHNlY3VyaXR5IGZvciB0aGUgcGF0aCBvZiBhdXRvbm9tb3VzPC90ZD48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzeXN0ZW1zIChBU2VzKSB0aHJvdWdoIHdoaWNoIGEgQkdQ
IHVwZGF0ZSBtZXNzYWdlIHBhc3Nlcy4gIEJHUHNlYyBpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz
cz0icmlnaHQiPiAgIHN5c3RlbXMgKEFTZXMpIHRocm91Z2ggd2hpY2ggYSBCR1AgdXBkYXRlIG1l
c3NhZ2UgcGFzc2VzLiAgQkdQc2VjIGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry
PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBp
bXBsZW1lbnRlZCB2aWEgYW4gb3B0aW9uYWwgbm9uLXRyYW5zaXRpdmUgQkdQIHBhdGggYXR0cmli
dXRlIHRoYXQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbXBsZW1lbnRlZCB2
aWEgYW4gb3B0aW9uYWwgbm9uLXRyYW5zaXRpdmUgQkdQIHBhdGggYXR0cmlidXRlIHRoYXQ8L3Rk
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu
byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNhcnJpZXMgZGlnaXRhbCBzaWduYXR1cmVzIHBy
b2R1Y2VkIGJ5IGVhY2ggYXV0b25vbW91cyBzeXN0ZW0gdGhhdDwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPiAgIGNhcnJpZXMgZGlnaXRhbCBzaWduYXR1cmVzIHByb2R1Y2VkIGJ5IGVh
Y2ggYXV0b25vbW91cyBzeXN0ZW0gdGhhdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90
cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg
cHJvcGFnYXRlcyB0aGUgdXBkYXRlIG1lc3NhZ2UuICBUaGUgZGlnaXRhbCBzaWduYXR1cmVzIHBy
b3ZpZGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwcm9wYWdhdGVzIHRoZSB1
cGRhdGUgbWVzc2FnZS4gIFRoZSBkaWdpdGFsIHNpZ25hdHVyZXMgcHJvdmlkZTwvdGQ+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgY29uZmlkZW5jZSB0aGF0IGV2ZXJ5IEFTIG9uIHRoZSBwYXRo
IG9mIEFTZXMgbGlzdGVkIGluIHRoZSB1cGRhdGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp
Z2h0Ij4gICBjb25maWRlbmNlIHRoYXQgZXZlcnkgQVMgb24gdGhlIHBhdGggb2YgQVNlcyBsaXN0
ZWQgaW4gdGhlIHVwZGF0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg
PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv
dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog
ICAgICA8dHIgaWQ9InBhcnQtMiIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5z
a2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5v
cmcvdG9vbHMvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC0yIj48ZW0+IHBhZ2UgMSwgbGluZSAz
ODxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRo
PjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vdG9v
bHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC0yIj48ZW0+IHBhZ2Ug
MSwgbGluZSAzODxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+
PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs
ZWZ0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRl
cm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEludGVy
bmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVy
aW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUYXNrIEZvcmNlIChJRVRGKS4gIE5v
dGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZTwvdGQ+PHRkPiA8L3RkPjx0
ZCBjbGFzcz0icmlnaHQiPiAgIFRhc2sgRm9yY2UgKElFVEYpLiAgTm90ZSB0aGF0IG90aGVyIGdy
b3VwcyBtYXkgYWxzbyBkaXN0cmlidXRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry
PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB3
b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50
IEludGVybmV0LTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHdvcmtpbmcgZG9j
dW1lbnRzIGFzIEludGVybmV0LURyYWZ0cy4gIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQt
PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs
aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEcmFmdHMgaXMgYXQgaHR0cDovL2RhdGF0
cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9
InJpZ2h0Ij4gICBEcmFmdHMgaXMgYXQgaHR0cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0
cy9jdXJyZW50Ly48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48
dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0
ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg
PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQt
RHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9u
dGhzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFy
ZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48
dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i
PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBv
ciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRl
ZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g
ICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJl
ZmVyZW5jZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRpbWUuICBJdCBpcyBp
bmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlPC90ZD48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhh
biBhcyAid29yayBpbiBwcm9ncmVzcy4iPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+
ICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jl
c3MuIjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz
PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9
ImRpZmYwMDAzIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUg
b24gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SnVseSAyMDwvc3Bhbj4sIDIwMTcuPC90ZD48dGQ+IDwv
dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUg
b24gPHNwYW4gY2xhc3M9Imluc2VydCI+T2N0b2JlciA1PC9zcGFuPiwgMjAxNy48L3RkPjx0ZCBj
bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+
PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v
Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkPiA8L3RkPjx0
ZCBjbGFzcz0icmlnaHQiPkNvcHlyaWdodCBOb3RpY2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48
L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl
ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l
bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz
cz0ibGVmdCI+ICAgQ29weXJpZ2h0IChjKSAyMDE3IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25z
IGlkZW50aWZpZWQgYXMgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ29w
eXJpZ2h0IChjKSAyMDE3IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMg
dGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkb2N1bWVudCBhdXRob3JzLiAgQWxs
IHJpZ2h0cyByZXNlcnZlZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkb2N1
bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5v
Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9
ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs
aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj
bGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhl
IElFVEYgVHJ1c3QncyBMZWdhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRo
aXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRydXN0J3MgTGVn
YWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8g
SUVURiBEb2N1bWVudHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBQcm92aXNp
b25zIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1lbnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0
Ij4gICAoaHR0cDovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24g
dGhlIGRhdGUgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAoaHR0cDovL3Ry
dXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24gdGhlIGRhdGUgb2Y8L3Rk
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu
byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQu
ICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i
cmlnaHQiPiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3IHRo
ZXNlIGRvY3VtZW50czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+
PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg
ICA8dHIgaWQ9InBhcnQtMyIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lw
cGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcv
dG9vbHMvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC0zIj48ZW0+IHBhZ2UgMiwgbGluZSAyMTxz
cGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxz
bWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMu
aWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC0zIj48ZW0+IHBhZ2UgMiwg
bGluZSAyMTxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90
ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0
Ij4gICAxLiAgSW50cm9kdWN0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAgIDI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAxLiAg
SW50cm9kdWN0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAgIDI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMS4xLiAgUmVxdWlyZW1l
bnRzIExhbmd1YWdlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMzwvdGQ+
PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMS4xLiAgUmVxdWlyZW1lbnRzIExhbmd1
YWdlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMzwvdGQ+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0
ZCBjbGFzcz0ibGVmdCI+ICAgMi4gIEJHUHNlYyBOZWdvdGlhdGlvbiAgLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy
aWdodCI+ICAgMi4gIEJHUHNlYyBOZWdvdGlhdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog
ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDIu
MS4gIFRoZSBCR1BzZWMgQ2FwYWJpbGl0eSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAgIDM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDIuMS4gIFRoZSBC
R1BzZWMgQ2FwYWJpbGl0eSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8
L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp
bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMi4yLiAgTmVnb3RpYXRpbmcgQkdQc2Vj
IFN1cHBvcnQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNDwvdGQ+PHRkPiA8L3Rk
Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMi4yLiAgTmVnb3RpYXRpbmcgQkdQc2VjIFN1cHBvcnQg
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i
PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i
bGVmdCI+ICAgMy4gIFRoZSBCR1BzZWNfUGF0aCBBdHRyaWJ1dGUgLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gICA2PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg
My4gIFRoZSBCR1BzZWNfUGF0aCBBdHRyaWJ1dGUgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gICA2PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+
PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDMuMS4gIFNlY3Vy
ZV9QYXRoIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDg8
L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDMuMS4gIFNlY3VyZV9QYXRoIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDg8L3RkPjx0ZCBj
bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMy4yLiAgU2lnbmF0dXJlX0Jsb2NrIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz
cz0icmlnaHQiPiAgICAgMy4yLiAgU2lnbmF0dXJlX0Jsb2NrIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90
cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg
NC4gIEJHUHNlYyBVcGRhdGUgTWVzc2FnZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gIDExPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgNC4gIEJHUHNl
YyBVcGRhdGUgTWVzc2FnZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
IDExPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDQuMS4gIEdlbmVyYWwgR3VpZGFu
Y2UgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTE8L3RkPjx0ZD4g
PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDQuMS4gIEdlbmVyYWwgR3VpZGFuY2UgIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTE8L3RkPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDQiPjx0ZD48L3RkPjwvdHI+CiAg
ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICA0
LjIuICBDb25zdHJ1Y3RpbmcgdGhlIEJHUHNlY19QYXRoIEF0dHJpYnV0ZSAgLiAuIC4gLiAuIC4g
LiAuIC4gIDE8c3BhbiBjbGFzcz0iZGVsZXRlIj4zPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmJsb2NrIj4gICAgIDQuMi4gIENvbnN0cnVjdGluZyB0aGUgQkdQc2VjX1BhdGggQXR0
cmlidXRlICAuIC4gLiAuIC4gLiAuIC4gLiAgMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjQ8L3NwYW4+
PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs
aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDQuMy4gIFByb2Nlc3NpbmcgSW5zdHJ1
Y3Rpb25zIGZvciBDb25mZWRlcmF0aW9uIE1lbWJlcnMgLiAuIC4gLiAgMTg8L3RkPjx0ZD4gPC90
ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDQuMy4gIFByb2Nlc3NpbmcgSW5zdHJ1Y3Rpb25zIGZv
ciBDb25mZWRlcmF0aW9uIE1lbWJlcnMgLiAuIC4gLiAgMTg8L3RkPjx0ZCBjbGFzcz0ibGluZW5v
Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9
ImxlZnQiPiAgICAgNC40LiAgUmVjb25zdHJ1Y3RpbmcgdGhlIEFTX1BBVEggQXR0cmlidXRlICAu
IC4gLiAuIC4gLiAuIC4gLiAuICAxOTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg
ICAgNC40LiAgUmVjb25zdHJ1Y3RpbmcgdGhlIEFTX1BBVEggQXR0cmlidXRlICAuIC4gLiAuIC4g
LiAuIC4gLiAuICAxOTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgNS4gIFByb2Nlc3Np
bmcgYSBSZWNlaXZlZCBCR1BzZWMgVXBkYXRlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDIx
PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgNS4gIFByb2Nlc3NpbmcgYSBSZWNl
aXZlZCBCR1BzZWMgVXBkYXRlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDIxPC90ZD48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDUuMS4gIE92ZXJ2aWV3IG9mIEJHUHNlYyBWYWxpZGF0
aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMjI8L3RkPjx0ZD4gPC90ZD48dGQgY2xh
c3M9InJpZ2h0Ij4gICAgIDUuMS4gIE92ZXJ2aWV3IG9mIEJHUHNlYyBWYWxpZGF0aW9uIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMjI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv
dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg
ICAgNS4yLiAgVmFsaWRhdGlvbiBBbGdvcml0aG0gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuICAyMzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgNS4yLiAg
VmFsaWRhdGlvbiBBbGdvcml0aG0gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
ICAyMzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgNi4gIEFsZ29yaXRobXMgYW5kIEV4
dGVuc2liaWxpdHkgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI3PC90ZD48dGQ+
IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgNi4gIEFsZ29yaXRobXMgYW5kIEV4dGVuc2liaWxp
dHkgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI3PC90ZD48dGQgY2xhc3M9Imxp
bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs
YXNzPSJsZWZ0Ij4gICAgIDYuMS4gIEFsZ29yaXRobSBTdWl0ZSBDb25zaWRlcmF0aW9ucyAgLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMjc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0
Ij4gICAgIDYuMS4gIEFsZ29yaXRobSBTdWl0ZSBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAgMjc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg
IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgNi4yLiAg
Q29uc2lkZXJhdGlvbnMgZm9yIHRoZSBTS0kgU2l6ZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
ICAyODwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgNi4yLiAgQ29uc2lkZXJh
dGlvbnMgZm9yIHRoZSBTS0kgU2l6ZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAyODwvdGQ+
PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v
Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICA2LjMuICBFeHRlbnNpYmlsaXR5IENvbnNpZGVy
YXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI4PC90ZD48dGQ+IDwvdGQ+PHRk
IGNsYXNzPSJyaWdodCI+ICAgICA2LjMuICBFeHRlbnNpYmlsaXR5IENvbnNpZGVyYXRpb25zICAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI4PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0
Ij4gICA3LiAgT3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudCBDb25zaWRlcmF0aW9ucyAgLiAuIC4g
LiAuIC4gLiAuIC4gLiAgMjk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICA3LiAg
T3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudCBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAu
IC4gLiAgMjk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0i
ZGlmZjAwMDUiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgOC4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDM8c3BhbiBjbGFzcz0iZGVsZXRlIj4z
PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA4LiAgU2VjdXJpdHkg
Q29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzxz
cGFuIGNsYXNzPSJpbnNlcnQiPjI8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g
ICAgIDguMS4gIFNlY3VyaXR5IEd1YXJhbnRlZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAgMzM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDguMS4g
IFNlY3VyaXR5IEd1YXJhbnRlZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAgMzM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlm
ZjAwMDYiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
dGQgY2xhc3M9ImxibG9jayI+ICAgICA4LjIuICBPbiB0aGUgUmVtb3ZhbCBvZiBCR1BzZWMgU2ln
bmF0dXJlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDM8c3BhbiBjbGFzcz0iZGVsZXRlIj40PC9z
cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgIDguMi4gIE9uIHRoZSBS
ZW1vdmFsIG9mIEJHUHNlYyBTaWduYXR1cmVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzxzcGFu
IGNsYXNzPSJpbnNlcnQiPjM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry
PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg
IDguMy4gIE1pdGlnYXRpb24gb2YgRGVuaWFsIG9mIFNlcnZpY2UgQXR0YWNrcyAuIC4gLiAuIC4g
LiAuIC4gLiAgMzU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDguMy4gIE1p
dGlnYXRpb24gb2YgRGVuaWFsIG9mIFNlcnZpY2UgQXR0YWNrcyAuIC4gLiAuIC4gLiAuIC4gLiAg
MzU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgOC40LiAgQWRkaXRpb25hbCBTZWN1
cml0eSBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAzNjwvdGQ+PHRkPiA8
L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgOC40LiAgQWRkaXRpb25hbCBTZWN1cml0eSBDb25z
aWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAzNjwvdGQ+PHRkIGNsYXNzPSJsaW5l
bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz
cz0ibGVmdCI+ICAgOS4gIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gIDM3PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+
ICAgOS4gIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gIDM3PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8
dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAxMC4gQ29udHJp
YnV0b3JzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg
Mzk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAxMC4gQ29udHJpYnV0b3JzICAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzk8L3RkPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+
PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMTAuMS4gIEF1dGhvcnMgIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAzOTwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPiAgICAgMTAuMS4gIEF1dGhvcnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAzOTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+
PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+
ICAgICAxMC4yLiAgQWNrbm93bGVkZ2VtZW50cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gIDQwPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAxMC4y
LiAgQWNrbm93bGVkZ2VtZW50cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gIDQwPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAxMS4gUmVmZXJlbmNlcyAgLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNDA8L3RkPjx0
ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAxMS4gUmVmZXJlbmNlcyAgLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNDA8L3RkPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg
Y2xhc3M9ImxlZnQiPiAgICAgMTEuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAu
IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0MDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln
aHQiPiAgICAgMTEuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuICA0MDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg
ICAgPHRyIGlkPSJkaWZmMDAwNyI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgIDExLjIuICBJbmZvcm1hdGl2ZSBS
ZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9
ImRlbGV0ZSI+NDI8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAg
MTEuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu
IC4gLiAuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij40MTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh
c3M9ImxibG9jayI+ICAgQXV0aG9ycycgQWRkcmVzc2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJkZWxldGUiPjQ0PC9zcGFuPjwv
dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBBdXRob3JzJyBBZGRyZXNzZXMgIC4g
LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9
Imluc2VydCI+NDM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg
ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g
PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+
CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjEuICBJ
bnRyb2R1Y3Rpb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xLiAgSW50cm9kdWN0
aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9
InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgZG9jdW1lbnQgZGVz
Y3JpYmVzIEJHUHNlYywgYSBtZWNoYW5pc20gZm9yIHByb3ZpZGluZyBwYXRoPC90ZD48dGQ+IDwv
dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgQkdQc2VjLCBh
IG1lY2hhbmlzbSBmb3IgcHJvdmlkaW5nIHBhdGg8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi
PiAgIHNlY3VyaXR5IGZvciBCb3JkZXIgR2F0ZXdheSBQcm90b2NvbCAoQkdQKSBbUkZDNDI3MV0g
cm91dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBzZWN1cml0eSBmb3IgQm9y
ZGVyIEdhdGV3YXkgUHJvdG9jb2wgKEJHUCkgW1JGQzQyNzFdIHJvdXRlPC90ZD48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk
IGNsYXNzPSJsZWZ0Ij4gICBhZHZlcnRpc2VtZW50cy4gIFRoYXQgaXMsIGEgQkdQIHNwZWFrZXIg
d2hvIHJlY2VpdmVzIGEgdmFsaWQgQkdQc2VjPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo
dCI+ICAgYWR2ZXJ0aXNlbWVudHMuICBUaGF0IGlzLCBhIEJHUCBzcGVha2VyIHdobyByZWNlaXZl
cyBhIHZhbGlkIEJHUHNlYzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg
PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdXBkYXRlIGhh
cyBjcnlwdG9ncmFwaGljIGFzc3VyYW5jZSB0aGF0IHRoZSBhZHZlcnRpc2VkIHJvdXRlIGhhcyB0
aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB1cGRhdGUgaGFzIGNyeXB0b2dy
YXBoaWMgYXNzdXJhbmNlIHRoYXQgdGhlIGFkdmVydGlzZWQgcm91dGUgaGFzIHRoZTwvdGQ+PHRk
IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48
L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZm9sbG93aW5nIHByb3BlcnR5OiBFdmVyeSBBUyBvbiB0
aGUgcGF0aCBvZiBBU2VzIGxpc3RlZCBpbiB0aGUgdXBkYXRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs
YXNzPSJyaWdodCI+ICAgZm9sbG93aW5nIHByb3BlcnR5OiBFdmVyeSBBUyBvbiB0aGUgcGF0aCBv
ZiBBU2VzIGxpc3RlZCBpbiB0aGUgdXBkYXRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g
ICBtZXNzYWdlIGhhcyBleHBsaWNpdGx5IGF1dGhvcml6ZWQgdGhlIGFkdmVydGlzZW1lbnQgb2Yg
dGhlIHJvdXRlIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWVzc2FnZSBo
YXMgZXhwbGljaXRseSBhdXRob3JpemVkIHRoZSBhZHZlcnRpc2VtZW50IG9mIHRoZSByb3V0ZSB0
bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIHN1YnNlcXVlbnQgQVMgaW4gdGhl
IHBhdGguPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIHN1YnNlcXVlbnQg
QVMgaW4gdGhlIHBhdGguPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8
dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90
ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg
ICAgIDx0ciBpZD0icGFydC00IiBjbGFzcz0iY2hhbmdlIj48dGQ+PC90ZD48dGg+PHNtYWxsPnNr
aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9y
Zy90b29scy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTQiPjxlbT4gcGFnZSA1LCBsaW5lIDUw
PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+
PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly90b29s
cy5pZXRmLm9yZy90b29scy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTQiPjxlbT4gcGFnZSA2
LCBsaW5lIDU8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwv
dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm
dCI+ICAgY2FzZSB0aGF0IHN1cHBvcnQgZm9yIG11bHRpcGxlIHZlcnNpb25zIGlzIG5lZ290aWF0
ZWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY2FzZSB0aGF0IHN1cHBvcnQg
Zm9yIG11bHRpcGxlIHZlcnNpb25zIGlzIG5lZ290aWF0ZWQuPC90ZD48dGQgY2xhc3M9ImxpbmVu
byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz
PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg
Y2xhc3M9ImxlZnQiPiAgIEJHUHNlYyBjYW5ub3QgcHJvdmlkZSBtZWFuaW5nZnVsIHNlY3VyaXR5
IGd1YXJhbnRlZXMgd2l0aG91dCBzdXBwb3J0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo
dCI+ICAgQkdQc2VjIGNhbm5vdCBwcm92aWRlIG1lYW5pbmdmdWwgc2VjdXJpdHkgZ3VhcmFudGVl
cyB3aXRob3V0IHN1cHBvcnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg
IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGZvciBmb3Vy
LWJ5dGUgQVMgbnVtYmVycy4gIFRoZXJlZm9yZSwgYW55IEJHUCBzcGVha2VyIHRoYXQgYW5ub3Vu
Y2VzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZm9yIGZvdXItYnl0ZSBBUyBu
dW1iZXJzLiAgVGhlcmVmb3JlLCBhbnkgQkdQIHNwZWFrZXIgdGhhdCBhbm5vdW5jZXM8L3RkPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+
PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZSBCR1BzZWMgY2FwYWJpbGl0eSwgTVVTVCBhbHNv
IGFubm91bmNlIHRoZSBjYXBhYmlsaXR5IGZvciBmb3VyLTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz
cz0icmlnaHQiPiAgIHRoZSBCR1BzZWMgY2FwYWJpbGl0eSwgTVVTVCBhbHNvIGFubm91bmNlIHRo
ZSBjYXBhYmlsaXR5IGZvciBmb3VyLTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K
ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYnl0
ZSBBUyBzdXBwb3J0IFtSRkM2NzkzXS4gIElmIGEgQkdQIHNwZWFrZXIgc2VuZHMgdGhlIEJHUHNl
YzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGJ5dGUgQVMgc3VwcG9ydCBbUkZD
Njc5M10uICBJZiBhIEJHUCBzcGVha2VyIHNlbmRzIHRoZSBCR1BzZWM8L3RkPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg
Y2xhc3M9ImxlZnQiPiAgIGNhcGFiaWxpdHkgYnV0IG5vdCB0aGUgZm91ci1ieXRlIEFTIHN1cHBv
cnQgY2FwYWJpbGl0eSB0aGVuIEJHUHNlYzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi
PiAgIGNhcGFiaWxpdHkgYnV0IG5vdCB0aGUgZm91ci1ieXRlIEFTIHN1cHBvcnQgY2FwYWJpbGl0
eSB0aGVuIEJHUHNlYzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaGFzIG5vdCBiZWVu
IHN1Y2Nlc3NmdWxseSBuZWdvdGlhdGVkLCBhbmQgdXBkYXRlIG1lc3NhZ2VzIGNvbnRhaW5pbmc8
L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBoYXMgbm90IGJlZW4gc3VjY2Vzc2Z1
bGx5IG5lZ290aWF0ZWQsIGFuZCB1cGRhdGUgbWVzc2FnZXMgY29udGFpbmluZzwvdGQ+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIEJHUHNlY19QYXRoIGF0dHJpYnV0ZSBNVVNUIE5PVCBi
ZSBzZW50IHdpdGhpbiBzdWNoIGEgc2Vzc2lvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp
Z2h0Ij4gICB0aGUgQkdQc2VjX1BhdGggYXR0cmlidXRlIE1VU1QgTk9UIGJlIHNlbnQgd2l0aGlu
IHN1Y2ggYSBzZXNzaW9uLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg
PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv
dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog
ICAgICA8dHIgaWQ9ImRpZmYwMDA4Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUi
Pk5vdGUgdGhhdCBCR1BzZWMgdXBkYXRlIG1lc3NhZ2VzIGNhbiBiZSBxdWl0ZSBsYXJnZSwgdGhl
cmVmb3JlIGFueTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48
dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i
PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIEJHUHNlYyBz
cGVha2VyIGFubm91bmNpbmcgdGhlIGNhcGFiaWxpdHkgdG8gcmVjZWl2ZSBCR1BzZWMgbWVzc2Fn
ZXM8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0
ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBTSE9VTEQgYWxzbyBhbm5v
dW5jZSBzdXBwb3J0IGZvciB0aGUgY2FwYWJpbGl0eSB0byByZWNlaXZlIEJHUDwvc3Bhbj48L3Rk
Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxv
Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGV4dGVuZGVkIG1lc3NhZ2VzIFtJLUQuaWV0Zi1p
ZHItYmdwLWV4dGVuZGVkLW1lc3NhZ2VzXS4gIFBsZWFzZSBzZWU8L3NwYW4+PC90ZD48dGQ+IDwv
dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K
ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3Bh
biBjbGFzcz0iZGVsZXRlIj4gICByZWxhdGVkIG9wZXJhdGlvbmFsIGd1aWRhbmNlIGluIFNlY3Rp
b24gNy48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQ+IDwvdGQ+PHRkIGNs
YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+My4gIFRoZSBCR1BzZWNf
UGF0aCBBdHRyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4zLiAgVGhlIEJH
UHNlY19QYXRoIEF0dHJpYnV0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg
ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+
IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry
PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBU
aGUgQkdQc2VjX1BhdGggYXR0cmlidXRlIGlzIGFuIG9wdGlvbmFsIG5vbi10cmFuc2l0aXZlIEJH
UCBwYXRoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlIEJHUHNlY19QYXRo
IGF0dHJpYnV0ZSBpcyBhbiBvcHRpb25hbCBub24tdHJhbnNpdGl2ZSBCR1AgcGF0aDwvdGQ+PHRk
IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48
L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYXR0cmlidXRlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz
cz0icmlnaHQiPiAgIGF0dHJpYnV0ZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+
CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+
PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+
PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+
ICAgVGhpcyBkb2N1bWVudCByZWdpc3RlcnMgYW4gYXR0cmlidXRlIHR5cGUgY29kZSBmb3IgdGhp
cyBhdHRyaWJ1dGU6PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhpcyBkb2N1
bWVudCByZWdpc3RlcnMgYW4gYXR0cmlidXRlIHR5cGUgY29kZSBmb3IgdGhpcyBhdHRyaWJ1dGU6
PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs
aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBCR1BzZWNfUGF0aCAoc2VlIFNlY3Rpb24g
OSkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQkdQc2VjX1BhdGggKHNlZSBT
ZWN0aW9uIDkpLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk
IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8
dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgQkdQc2Vj
X1BhdGggYXR0cmlidXRlIGNhcnJpZXMgdGhlIHNlY3VyZWQgaW5mb3JtYXRpb24gcmVnYXJkaW5n
PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlIEJHUHNlY19QYXRoIGF0dHJp
YnV0ZSBjYXJyaWVzIHRoZSBzZWN1cmVkIGluZm9ybWF0aW9uIHJlZ2FyZGluZzwvdGQ+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIHBhdGggb2YgQVNlcyB0aHJvdWdoIHdoaWNoIGFuIHVw
ZGF0ZSBtZXNzYWdlIHBhc3Nlcy4gIFRoaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0
Ij4gICB0aGUgcGF0aCBvZiBBU2VzIHRocm91Z2ggd2hpY2ggYW4gdXBkYXRlIG1lc3NhZ2UgcGFz
c2VzLiAgVGhpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk
IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8
dHIgaWQ9InBhcnQtNSIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lwcGlu
ZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvdG9v
bHMvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC01Ij48ZW0+IHBhZ2UgMTMsIGxpbmUgNDU8c3Bh
biBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48c21h
bGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSJodHRwczovL3Rvb2xzLmll
dGYub3JnL3Rvb2xzL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtNSI+PGVtPiBwYWdlIDEzLCBs
aW5lIDQ1PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48L3Rk
PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi
PiAgIGF0dHJpYnV0ZSBTSE9VTEQgTk9UIGJlIHJlbW92ZWQsIHVubGVzcyB0aGUgcGVlciBkb2Vz
bid0IHN1cHBvcnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhdHRyaWJ1dGUg
U0hPVUxEIE5PVCBiZSByZW1vdmVkLCB1bmxlc3MgdGhlIHBlZXIgZG9lc24ndCBzdXBwb3J0PC90
ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l
bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBCR1BzZWMuICBJbiB0aGUgY2FzZSB3aGVuIGFu
IGlCR1AgcGVlciBkb2Vzbid0IHN1cHBvcnQgQkdQc2VjLCB0aGVuIGE8L3RkPjx0ZD4gPC90ZD48
dGQgY2xhc3M9InJpZ2h0Ij4gICBCR1BzZWMuICBJbiB0aGUgY2FzZSB3aGVuIGFuIGlCR1AgcGVl
ciBkb2Vzbid0IHN1cHBvcnQgQkdQc2VjLCB0aGVuIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48
L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl
ZnQiPiAgIEJHUCB1cGRhdGUgd2l0aCBBU19QQVRIIGlzIHJlY29uc3RydWN0ZWQgZnJvbSB0aGUg
QkdQc2VjIHVwZGF0ZSBhbmQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBCR1Ag
dXBkYXRlIHdpdGggQVNfUEFUSCBpcyByZWNvbnN0cnVjdGVkIGZyb20gdGhlIEJHUHNlYyB1cGRh
dGUgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGVuIGZvcndhcmRlZCAoc2Vl
IFNlY3Rpb24gNC40KS4gIEluIHBhcnRpY3VsYXIsIHdoZW4gZm9yd2FyZGluZyB0bzwvdGQ+PHRk
PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZW4gZm9yd2FyZGVkIChzZWUgU2VjdGlvbiA0
LjQpLiAgSW4gcGFydGljdWxhciwgd2hlbiBmb3J3YXJkaW5nIHRvPC90ZD48dGQgY2xhc3M9Imxp
bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs
YXNzPSJsZWZ0Ij4gICBhIEJHUHNlYy1jYXBhYmxlIGlCR1AgKG9yIGVCR1ApIHBlZXIsIHRoZSBC
R1BzZWNfUGF0aCBhdHRyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBh
IEJHUHNlYy1jYXBhYmxlIGlCR1AgKG9yIGVCR1ApIHBlZXIsIHRoZSBCR1BzZWNfUGF0aCBhdHRy
aWJ1dGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh
c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFNIT1VMRCBOT1QgYmUgcmVtb3Zl
ZCBldmVuIGluIHRoZSBjYXNlIHdoZXJlIHRoZSBCR1BzZWMgdXBkYXRlPC90ZD48dGQ+IDwvdGQ+
PHRkIGNsYXNzPSJyaWdodCI+ICAgU0hPVUxEIE5PVCBiZSByZW1vdmVkIGV2ZW4gaW4gdGhlIGNh
c2Ugd2hlcmUgdGhlIEJHUHNlYyB1cGRhdGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv
dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg
IG1lc3NhZ2UgaGFzIG5vdCBiZWVuIHN1Y2Nlc3NmdWxseSB2YWxpZGF0ZWQuICAoU2VlIFNlY3Rp
b24gNSBmb3IgbW9yZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1lc3NhZ2Ug
aGFzIG5vdCBiZWVuIHN1Y2Nlc3NmdWxseSB2YWxpZGF0ZWQuICAoU2VlIFNlY3Rpb24gNSBmb3Ig
bW9yZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaW5mb3JtYXRpb24gb24gdmFsaWRh
dGlvbiwgYW5kIFNlY3Rpb24gOCBmb3IgdGhlIHNlY3VyaXR5PC90ZD48dGQ+IDwvdGQ+PHRkIGNs
YXNzPSJyaWdodCI+ICAgaW5mb3JtYXRpb24gb24gdmFsaWRhdGlvbiwgYW5kIFNlY3Rpb24gOCBm
b3IgdGhlIHNlY3VyaXR5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8
dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICByYW1pZmljYXRp
b25zIG9mIHJlbW92aW5nIEJHUHNlYyBzaWduYXR1cmVzLik8L3RkPjx0ZD4gPC90ZD48dGQgY2xh
c3M9InJpZ2h0Ij4gICByYW1pZmljYXRpb25zIG9mIHJlbW92aW5nIEJHUHNlYyBzaWduYXR1cmVz
Lik8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i
cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJk
aWZmMDAwOSI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg
PHNwYW4gY2xhc3M9Imluc2VydCI+QWxsIEJHUHNlYyB1cGRhdGUgbWVzc2FnZXMgTVVTVCBjb25m
b3JtIHRvIEJHUCdzIG1heGltdW0gbWVzc2FnZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v
Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9
ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp
bnNlcnQiPiAgIHNpemUuICBJZiB0aGUgcmVzdWx0aW5nIG1lc3NhZ2UgZXhjZWVkcyB0aGUgbWF4
aW11bSBtZXNzYWdlIHNpemUsPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90
cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48
L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg
dGhlbiB0aGUgZ3VpZGVsaW5lcyBpbiBTZWN0aW9uIDkuMiBvZiBSRkMgNDI3MSBbUkZDNDI3MV0g
TVVTVCBiZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0
cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv
dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGZvbGxvd2VkLjwv
c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh
c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs
YXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi
PjQuMi4gIENvbnN0cnVjdGluZyB0aGUgQkdQc2VjX1BhdGggQXR0cmlidXRlPC90ZD48dGQ+IDwv
dGQ+PHRkIGNsYXNzPSJyaWdodCI+NC4yLiAgQ29uc3RydWN0aW5nIHRoZSBCR1BzZWNfUGF0aCBB
dHRyaWJ1dGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgV2hlbiBhIEJHUHNl
YyBzcGVha2VyIHJlY2VpdmVzIGEgQkdQc2VjIHVwZGF0ZSBtZXNzYWdlIGNvbnRhaW5pbmcgYTwv
dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFdoZW4gYSBCR1BzZWMgc3BlYWtlciBy
ZWNlaXZlcyBhIEJHUHNlYyB1cGRhdGUgbWVzc2FnZSBjb250YWluaW5nIGE8L3RkPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
dGQgY2xhc3M9ImxlZnQiPiAgIEJHUHNlY19QYXRoIGF0dHJpYnV0ZSAod2l0aCBvbmUgb3IgbW9y
ZSBzaWduYXR1cmVzKSBmcm9tIGFuIChpbnRlcm5hbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i
cmlnaHQiPiAgIEJHUHNlY19QYXRoIGF0dHJpYnV0ZSAod2l0aCBvbmUgb3IgbW9yZSBzaWduYXR1
cmVzKSBmcm9tIGFuIChpbnRlcm5hbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K
ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgb3Ig
ZXh0ZXJuYWwpIHBlZXIsIGl0IG1heSBjaG9vc2UgdG8gcHJvcGFnYXRlIHRoZSByb3V0ZSBhZHZl
cnRpc2VtZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb3IgZXh0ZXJuYWwp
IHBlZXIsIGl0IG1heSBjaG9vc2UgdG8gcHJvcGFnYXRlIHRoZSByb3V0ZSBhZHZlcnRpc2VtZW50
PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs
aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBieSBzZW5kaW5nIGl0IHRvIGl0cyBvdGhl
ciAoaW50ZXJuYWwgb3IgZXh0ZXJuYWwpIHBlZXJzLiAgV2hlbjwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPiAgIGJ5IHNlbmRpbmcgaXQgdG8gaXRzIG90aGVyIChpbnRlcm5hbCBvciBl
eHRlcm5hbCkgcGVlcnMuICBXaGVuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog
ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzZW5k
aW5nIHRoZSByb3V0ZSBhZHZlcnRpc2VtZW50IHRvIGFuIGludGVybmFsIEJHUHNlYy1zcGVha2lu
ZyBwZWVyLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHNlbmRpbmcgdGhlIHJv
dXRlIGFkdmVydGlzZW1lbnQgdG8gYW4gaW50ZXJuYWwgQkdQc2VjLXNwZWFraW5nIHBlZXIsPC90
ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l
bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgQkdQc2VjX1BhdGggYXR0cmlidXRlIFNI
QUxMIE5PVCBiZSBtb2RpZmllZC4gIFdoZW4gc2VuZGluZyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQg
Y2xhc3M9InJpZ2h0Ij4gICB0aGUgQkdQc2VjX1BhdGggYXR0cmlidXRlIFNIQUxMIE5PVCBiZSBt
b2RpZmllZC4gIFdoZW4gc2VuZGluZyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv
dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg
IHJvdXRlIGFkdmVydGlzZW1lbnQgdG8gYW4gZXh0ZXJuYWwgQkdQc2VjLXNwZWFraW5nIHBlZXIs
IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJvdXRlIGFkdmVydGlzZW1l
bnQgdG8gYW4gZXh0ZXJuYWwgQkdQc2VjLXNwZWFraW5nIHBlZXIsIHRoZTwvdGQ+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0
ZCBjbGFzcz0ibGVmdCI+ICAgZm9sbG93aW5nIHByb2NlZHVyZXMgYXJlIHVzZWQgdG8gZm9ybSBv
ciB1cGRhdGUgdGhlIEJHUHNlY19QYXRoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+
ICAgZm9sbG93aW5nIHByb2NlZHVyZXMgYXJlIHVzZWQgdG8gZm9ybSBvciB1cGRhdGUgdGhlIEJH
UHNlY19QYXRoPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk
IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg
Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0
ciBpZD0icGFydC02IiBjbGFzcz0iY2hhbmdlIj48dGQ+PC90ZD48dGg+PHNtYWxsPnNraXBwaW5n
IHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy90b29s
cy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTYiPjxlbT4gcGFnZSAzMCwgbGluZSAzNjxzcGFu
IGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFs
bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0
Zi5vcmcvdG9vbHMvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC02Ij48ZW0+IHBhZ2UgMzAsIGxp
bmUgMzY8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+
PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+
ICAgYW5kIGxhdGVyIHJlY2VpdmVzIGEgc2Vjb25kIEJHUHNlYyB1cGRhdGUgbWVzc2FnZSBmcm9t
IHRoZSBzYW1lIHBlZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbmQgbGF0
ZXIgcmVjZWl2ZXMgYSBzZWNvbmQgQkdQc2VjIHVwZGF0ZSBtZXNzYWdlIGZyb20gdGhlIHNhbWUg
cGVlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZm9yIHRoZSBzYW1lIHByZWZpeCB3
aXRoIHRoZSBzYW1lIFNlY3VyZV9QYXRoIGFuZCBTS0lzLCB0aGUgc2Vjb25kPC90ZD48dGQ+IDwv
dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZm9yIHRoZSBzYW1lIHByZWZpeCB3aXRoIHRoZSBzYW1l
IFNlY3VyZV9QYXRoIGFuZCBTS0lzLCB0aGUgc2Vjb25kPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+
PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs
ZWZ0Ij4gICB1cGRhdGUgTUFZIGRpZmZlciBmcm9tIHRoZSBmaXJzdCB1cGRhdGUgaW4gdGhlIHNp
Z25hdHVyZSBmaWVsZHMgKGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHVw
ZGF0ZSBNQVkgZGlmZmVyIGZyb20gdGhlIGZpcnN0IHVwZGF0ZSBpbiB0aGUgc2lnbmF0dXJlIGZp
ZWxkcyAoZm9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk
IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhIG5vbi1kZXRlcm1pbmlz
dGljIHNpZ25hdHVyZSBhbGdvcml0aG0pLiAgSG93ZXZlciwgdGhlIHR3byBzZXRzIG9mPC90ZD48
dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYSBub24tZGV0ZXJtaW5pc3RpYyBzaWduYXR1
cmUgYWxnb3JpdGhtKS4gIEhvd2V2ZXIsIHRoZSB0d28gc2V0cyBvZjwvdGQ+PHRkIGNsYXNzPSJs
aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj
bGFzcz0ibGVmdCI+ICAgc2lnbmF0dXJlIGZpZWxkcyB3aWxsIG5vdCBkaWZmZXIgaWYgdGhlIHNl
bmRlciBjYWNoZXMgYW5kIHJldXNlcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0
Ij4gICBzaWduYXR1cmUgZmllbGRzIHdpbGwgbm90IGRpZmZlciBpZiB0aGUgc2VuZGVyIGNhY2hl
cyBhbmQgcmV1c2VzIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg
PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcHJldmlvdXMg
c2lnbmF0dXJlLiAgRm9yIGEgZGV0ZXJtaW5pc3RpYyBzaWduYXR1cmUgYWxnb3JpdGhtLCB0aGU8
L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwcmV2aW91cyBzaWduYXR1cmUuICBG
b3IgYSBkZXRlcm1pbmlzdGljIHNpZ25hdHVyZSBhbGdvcml0aG0sIHRoZTwvdGQ+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0
ZCBjbGFzcz0ibGVmdCI+ICAgc2lnbmF0dXJlIGZpZWxkcyBNVVNUIGJlIGlkZW50aWNhbCBiZXR3
ZWVuIHRoZSB0d28gdXBkYXRlcy4gIE9uIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln
aHQiPiAgIHNpZ25hdHVyZSBmaWVsZHMgTVVTVCBiZSBpZGVudGljYWwgYmV0d2VlbiB0aGUgdHdv
IHVwZGF0ZXMuICBPbiB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg
IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJhc2lzIG9m
IHRoZXNlIG9ic2VydmF0aW9ucywgYW4gaW1wbGVtZW50YXRpb24gTUFZIGluY29ycG9yYXRlPC90
ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYmFzaXMgb2YgdGhlc2Ugb2JzZXJ2YXRp
b25zLCBhbiBpbXBsZW1lbnRhdGlvbiBNQVkgaW5jb3Jwb3JhdGU8L3RkPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh
c3M9ImxlZnQiPiAgIG9wdGltaXphdGlvbnMgaW4gdXBkYXRlIHZhbGlkYXRpb24gcHJvY2Vzc2lu
Zy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvcHRpbWl6YXRpb25zIGluIHVw
ZGF0ZSB2YWxpZGF0aW9uIHByb2Nlc3NpbmcuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48
L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48
L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTAiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0
cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xh
c3M9ImRlbGV0ZSI+SW4gU2VjdGlvbiAyLjIsIGlzIHdhcyBzdGF0ZWQgdGhhdCBhIEJHUHNlYyBz
cGVha2VyIFNIT1VMRCBhbm5vdW5jZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi
bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUi
PiAgIHN1cHBvcnQgZm9yIHRoZSBjYXBhYmlsaXR5IHRvIHJlY2VpdmUgQkdQIGV4dGVuZGVkIG1l
c3NhZ2VzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBj
bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgW0ktRC5pZXRmLWlk
ci1iZ3AtZXh0ZW5kZWQtbWVzc2FnZXNdLiAgTGFjayBvZiBuZWdvdGlhdGlvbiBvZiB0aGlzPC9z
cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh
c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgY2FwYWJpbGl0eSBpcyBub3QgZXhw
ZWN0ZWQgdG8gcG9zZSBhIHByb2JsZW0gaW4gdGhlIGVhcmx5IHllYXJzIG9mPC9zcGFuPjwvdGQ+
PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9j
ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgQkdQc2VjIGRlcGxveW1lbnQuICBIb3dldmVyLCBh
cyBCR1BzZWMgaXMgZGVwbG95ZWQgbW9yZSBhbmQgbW9yZSwgdGhlPC9zcGFuPjwvdGQ+PHRkPiA8
L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+
CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw
YW4gY2xhc3M9ImRlbGV0ZSI+ICAgQkdQc2VjIHVwZGF0ZSBtZXNzYWdlcyB3b3VsZCBncm93IGlu
IHNpemUgYW5kIHNvbWUgbWVzc2FnZXMgbWF5IGJlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0
cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9
ImRlbGV0ZSI+ICAgZHJvcHBlZCBkdWUgdG8gdGhlaXIgc2l6ZSBleGNlZWRpbmcgdGhlIGN1cnJl
bnQgNEsgYnl0ZXMgbGltaXQuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr
Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg
VGhlcmVmb3JlLCBpdCBpcyBzdHJvbmdseSBSRUNPTU1FTkRFRCB0aGF0IGFsbCBCR1BzZWMgc3Bl
YWtlcnM8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBuZWdvdGlhdGUgdGhl
IGV4dGVuZGVkIG1lc3NhZ2UgY2FwYWJpbGl0eSB3aXRoaW4gYSByZWFzb25hYmxlIHBlcmlvZDwv
c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9Imxp
bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs
YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIG9mIHRpbWUgYWZ0ZXIgaW5pdGlh
bCBkZXBsb3ltZW50IG9mIEJHUHNlYy48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy
YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj
bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90
ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm
dCI+ICAgSXQgaXMgcG9zc2libGUgdGhhdCBhIHN0dWIgY3VzdG9tZXIgb2YgYW4gSVNQIGVtcGxv
eXMgYSBwcml2YXRlIEFTPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSXQgaXMg
cG9zc2libGUgdGhhdCBhIHN0dWIgY3VzdG9tZXIgb2YgYW4gSVNQIGVtcGxveXMgYSBwcml2YXRl
IEFTPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBudW1iZXIuICBTdWNoIGEgc3R1YiBj
dXN0b21lciBjYW5ub3QgcHVibGlzaCBhIFJPQSBpbiB0aGUgZ2xvYmFsIFJQS0k8L3RkPjx0ZD4g
PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBudW1iZXIuICBTdWNoIGEgc3R1YiBjdXN0b21lciBj
YW5ub3QgcHVibGlzaCBhIFJPQSBpbiB0aGUgZ2xvYmFsIFJQS0k8L3RkPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh
c3M9ImxlZnQiPiAgIGZvciB0aGUgcHJpdmF0ZSBBUyBudW1iZXIgYW5kIHRoZSBwcmVmaXhlcyB0
aGF0IHRoZXkgdXNlLiAgQWxzbywgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+
ICAgZm9yIHRoZSBwcml2YXRlIEFTIG51bWJlciBhbmQgdGhlIHByZWZpeGVzIHRoYXQgdGhleSB1
c2UuICBBbHNvLCB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0
cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGdsb2JhbCBSUEtJ
IGNhbm5vdCBzdXBwb3J0IHByaXZhdGUgQVMgbnVtYmVycyAoaS5lLiAgQkdQc2VjIHNwZWFrZXJz
PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZ2xvYmFsIFJQS0kgY2Fubm90IHN1
cHBvcnQgcHJpdmF0ZSBBUyBudW1iZXJzIChpLmUuICBCR1BzZWMgc3BlYWtlcnM8L3RkPjx0ZCBj
bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGluIHByaXZhdGUgQVNlcyBjYW5ub3QgYmUgaXNzdWVkIHJv
dXRlciBjZXJ0aWZpY2F0ZXMgaW4gdGhlIGdsb2JhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i
cmlnaHQiPiAgIGluIHByaXZhdGUgQVNlcyBjYW5ub3QgYmUgaXNzdWVkIHJvdXRlciBjZXJ0aWZp
Y2F0ZXMgaW4gdGhlIGdsb2JhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg
ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUlBLSSku
ICBGb3IgaW50ZXJhY3Rpb25zIGJldHdlZW4gdGhlIHN0dWIgY3VzdG9tZXIgYW5kIHRoZSBJU1As
IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFJQS0kpLiAgRm9yIGludGVy
YWN0aW9ucyBiZXR3ZWVuIHRoZSBzdHViIGN1c3RvbWVyIGFuZCB0aGUgSVNQLCB0aGU8L3RkPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+
PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGZvbGxvd2luZyB0d28gc2NlbmFyaW9zIGFyZSBwb3Nz
aWJsZTo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBmb2xsb3dpbmcgdHdvIHNj
ZW5hcmlvcyBhcmUgcG9zc2libGU6PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog
ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0
ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv
dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg
IDEuICBUaGUgc3R1YiBjdXN0b21lciBzZW5kcyBhbiB1bnNpZ25lZCBCR1AgdXBkYXRlIGZvciBh
IHByZWZpeCB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDEuICBUaGUgc3R1
YiBjdXN0b21lciBzZW5kcyBhbiB1bnNpZ25lZCBCR1AgdXBkYXRlIGZvciBhIHByZWZpeCB0bzwv
dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHRoZSBJU1AncyBBUy4gIEFuIGVkZ2Ug
QkdQc2VjIHNwZWFrZXIgaW4gdGhlIElTUCdzIEFTIG1heSBjaG9vc2U8L3RkPjx0ZD4gPC90ZD48
dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgdGhlIElTUCdzIEFTLiAgQW4gZWRnZSBCR1BzZWMgc3Bl
YWtlciBpbiB0aGUgSVNQJ3MgQVMgbWF5IGNob29zZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm
dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu
byI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9InBhcnQtNyIgY2xhc3M9ImNoYW5nZSI+PHRkPjwv
dGQ+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBz
Oi8vdG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC03Ij48ZW0+
IHBhZ2UgMzgsIGxpbmUgOTxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90
aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhy
ZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFy
dC03Ij48ZW0+IHBhZ2UgMzgsIGxpbmUgOTxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9l
bT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwcm90b2NvbCkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz
PSJyaWdodCI+ICAgcHJvdG9jb2wpLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K
ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48
dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g
ICBJQU5BIGlzIHJlcXVlc3RlZCB0byBkZWZpbmUgdGhlICJCR1BzZWMgQ2FwYWJpbGl0eSIgcmVn
aXN0cnkgaW4gdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSUFOQSBpcyBy
ZXF1ZXN0ZWQgdG8gZGVmaW5lIHRoZSAiQkdQc2VjIENhcGFiaWxpdHkiIHJlZ2lzdHJ5IGluIHRo
ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUmVzb3VyY2UgUHVibGljIEtleSBJbmZy
YXN0cnVjdHVyZSAoUlBLSSkgZ3JvdXAuICBUaGUgcmVnaXN0cnkgaXMgYXM8L3RkPjx0ZD4gPC90
ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBSZXNvdXJjZSBQdWJsaWMgS2V5IEluZnJhc3RydWN0dXJl
IChSUEtJKSBncm91cC4gIFRoZSByZWdpc3RyeSBpcyBhczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i
PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i
bGVmdCI+ICAgc2hvd24gaW4gRmlndXJlIDEwIHdpdGggdmFsdWVzIGFzc2lnbmVkIGZyb20gU2Vj
dGlvbiAyLjE6PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc2hvd24gaW4gRmln
dXJlIDEwIHdpdGggdmFsdWVzIGFzc2lnbmVkIGZyb20gU2VjdGlvbiAyLjE6PC90ZD48dGQgY2xh
c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+
PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+
PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgKy0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tKzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i
cmlnaHQiPiAgICAgICAgKy0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0rLS0tLS0tLS0tLS0tKzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg
PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICB8IEJp
dHMgfCBGaWVsZCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgUmVmZXJlbmNlICB8PC90
ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICB8IEJpdHMgfCBGaWVsZCAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgIHwgUmVmZXJlbmNlICB8PC90ZD48dGQgY2xhc3M9Imxp
bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs
YXNzPSJsZWZ0Ij4gICAgICAgICstLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tKy0tLS0tLS0tLS0tLSs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg
ICAgICstLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0t
LS0tLSs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh
c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgfCAwLTMgIHwgVmVyc2lv
biAgICAgICAgICAgICAgICAgICAgICAgICAgICB8IFtUaGlzIFJGQ10gfDwvdGQ+PHRkPiA8L3Rk
Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgfCAwLTMgIHwgVmVyc2lvbiAgICAgICAgICAgICAg
ICAgICAgICAgICAgICB8IFtUaGlzIFJGQ10gfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+
PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAxMSI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgIHwgICAgICA8
c3BhbiBjbGFzcz0iZGVsZXRlIj4rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
Ky0tLS0tLS0tLS0tLSs8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg
ICAgICAgfCAgICAgIHwgVmFsdWUgPSAweDAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAg
ICAgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj
bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl
Ij4gICAgICAgIHw8L3NwYW4+ICAgICAgfCBWYWx1ZSA9IDB4MCAgICAgICAgICAgICAgICAgICAg
ICAgIHwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+W1RoaXMgUkZDXTwvc3Bhbj4gfDwvdGQ+PHRkPiA8
L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+
CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg
ICAgKy0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0t
LS0tKzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgKy0tLS0tLSstLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tKzwvdGQ+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICB8IDQgICAgfCBEaXJlY3Rpb24gICAgICAgICAgICAg
ICAgICAgICAgICAgIHwgW1RoaXMgUkZDXSB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo
dCI+ICAgICAgICB8IDQgICAgfCBEaXJlY3Rpb24gICAgICAgICAgICAgICAgICAgICAgICAgIHwg
W1RoaXMgUkZDXSB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIg
aWQ9ImRpZmYwMDEyIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i
PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgfCAgICAgIDxzcGFuIGNsYXNzPSJkZWxl
dGUiPistLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tKzwv
c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICB8ICAgICAgfChC
b3RoIHBvc3NpYmxlIHZhbHVlcyAwIGFuZCAxIGFyZSAgIHwgICAgICAgICAgICB8PC90ZD48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgfDwvc3Bh
bj4gICAgICB8KEJvdGggcG9zc2libGUgdmFsdWVzIDAgYW5kIDEgYXJlICAgfCA8c3BhbiBjbGFz
cz0iZGVsZXRlIj5bVGhpcyBSRkNdPC9zcGFuPiB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy
YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj
bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICB8ICAgICAgfCBmdWxs
eSBzcGVjaWZpZWQgYnkgdGhpcyBSRkMpICAgICAgIHwgICAgICAgICAgICB8PC90ZD48dGQ+IDwv
dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICB8ICAgICAgfCBmdWxseSBzcGVjaWZpZWQgYnkg
dGhpcyBSRkMpICAgICAgIHwgICAgICAgICAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0
Ij4gICAgICAgICstLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0t
LS0tLS0tLS0tLSs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICstLS0t
LS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLSs8L3Rk
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu
byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgfCA1LTcgIHwgVW5hc3NpZ25lZCAgICAg
ICAgICAgICAgICAgICAgICAgICB8IFtUaGlzIFJGQ10gfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz
cz0icmlnaHQiPiAgICAgICAgfCA1LTcgIHwgVW5hc3NpZ25lZCAgICAgICAgICAgICAgICAgICAg
ICAgICB8IFtUaGlzIFJGQ10gfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg
ICAgPHRyIGlkPSJkaWZmMDAxMyI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgIHwgICAgICA8c3BhbiBjbGFz
cz0iZGVsZXRlIj4rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0t
LS0tLSs8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgfCAg
ICAgIHwgVmFsdWUgPSAwMDAgKGluIGJpbmFyeSkgICAgICAgICAgICB8ICAgICAgICAgICAgfDwv
dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAg
IHw8L3NwYW4+ICAgICAgfCBWYWx1ZSA9IDAwMCAoaW4gYmluYXJ5KSAgICAgICAgICAgIHwgPHNw
YW4gY2xhc3M9ImRlbGV0ZSI+W1RoaXMgUkZDXTwvc3Bhbj4gfDwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0
cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgKy0tLS0t
LSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tKzwvdGQ+
PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgKy0tLS0tLSstLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tKzwvdGQ+PHRkIGNsYXNzPSJsaW5l
bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz
cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk
IGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIEZpZ3VyZSAxMDogSUFOQSByZWdpc3RyeSBmb3Ig
QkdQc2VjIENhcGFiaWxpdHkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg
ICAgICAgICBGaWd1cmUgMTA6IElBTkEgcmVnaXN0cnkgZm9yIEJHUHNlYyBDYXBhYmlsaXR5Ljwv
dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo
dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgRGlyZWN0aW9uIGJpdCAoNHRo
IGJpdCkgaGFzIHZhbHVlIGVpdGhlciAwIG9yIDEsIGFuZCBib3RoIHZhbHVlczwvdGQ+PHRkPiA8
L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBEaXJlY3Rpb24gYml0ICg0dGggYml0KSBoYXMg
dmFsdWUgZWl0aGVyIDAgb3IgMSwgYW5kIGJvdGggdmFsdWVzPC90ZD48dGQgY2xhc3M9ImxpbmVu
byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz
PSJsZWZ0Ij4gICBhcmUgZnVsbHkgc3BlY2lmaWVkIGJ5IHRoaXMgZG9jdW1lbnQgKGkuZS4gdGhl
IFJGQyB0aGF0IHJlcGxhY2VzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYXJl
IGZ1bGx5IHNwZWNpZmllZCBieSB0aGlzIGRvY3VtZW50IChpLmUuIHRoZSBSRkMgdGhhdCByZXBs
YWNlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZHJhZnQtaWV0Zi1zaWRyLWJncHNl
Yy1wcm90b2NvbCkuICBGdXR1cmUgVmVyc2lvbiB2YWx1ZXMgYW5kIGZ1dHVyZTwvdGQ+PHRkPiA8
L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRyYWZ0LWlldGYtc2lkci1iZ3BzZWMtcHJvdG9jb2wp
LiAgRnV0dXJlIFZlcnNpb24gdmFsdWVzIGFuZCBmdXR1cmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v
Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9
ImxlZnQiPiAgIHZhbHVlcyBvZiB0aGUgVW5hc3NpZ25lZCBiaXRzIGFyZSBhc3NpZ25lZCB1c2lu
ZyB0aGUgIlN0YW5kYXJkczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHZhbHVl
cyBvZiB0aGUgVW5hc3NpZ25lZCBiaXRzIGFyZSBhc3NpZ25lZCB1c2luZyB0aGUgIlN0YW5kYXJk
czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQWN0aW9uIiByZWdpc3RyYXRpb24gcHJv
Y2VkdXJlcyBkZWZpbmVkIGluIFJGQyA1MjI2IFtSRkM1MjI2XS48L3RkPjx0ZD4gPC90ZD48dGQg
Y2xhc3M9InJpZ2h0Ij4gICBBY3Rpb24iIHJlZ2lzdHJhdGlvbiBwcm9jZWR1cmVzIGRlZmluZWQg
aW4gUkZDIDUyMjYgW1JGQzUyMjZdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K
ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48
dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g
ICBJQU5BIGlzIHJlcXVlc3RlZCB0byBkZWZpbmUgdGhlICJCR1BzZWNfUGF0aCBGbGFncyIgcmVn
aXN0cnkgaW4gdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSUFOQSBpcyBy
ZXF1ZXN0ZWQgdG8gZGVmaW5lIHRoZSAiQkdQc2VjX1BhdGggRmxhZ3MiIHJlZ2lzdHJ5IGluIHRo
ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUlBLSSBncm91cC4gIFRoZSByZWdpc3Ry
eSBpcyBhcyBzaG93biBpbiBGaWd1cmUgMTEgd2l0aCBvbmUgdmFsdWU8L3RkPjx0ZD4gPC90ZD48
dGQgY2xhc3M9InJpZ2h0Ij4gICBSUEtJIGdyb3VwLiAgVGhlIHJlZ2lzdHJ5IGlzIGFzIHNob3du
IGluIEZpZ3VyZSAxMSB3aXRoIG9uZSB2YWx1ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+
PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+
ICAgYXNzaWduZWQgZnJvbSBTZWN0aW9uIDMuMTo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp
Z2h0Ij4gICBhc3NpZ25lZCBmcm9tIFNlY3Rpb24gMy4xOjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i
PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i
bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp
bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs
YXNzPSJsZWZ0Ij4gICAgICstLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLSstLS0tLS0tLS0tLS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+
ICAgICArLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0r
LS0tLS0tLS0tLS0tKzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICB8IEZsYWcgfCBE
ZXNjcmlwdGlvbiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8IFJlZmVyZW5jZSAgfDwv
dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgfCBGbGFnIHwgRGVzY3JpcHRpb24g
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCBSZWZlcmVuY2UgIHw8L3RkPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
dGQgY2xhc3M9ImxlZnQiPiAgICAgKy0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLSs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp
Z2h0Ij4gICAgICstLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLSstLS0tLS0tLS0tLS0rPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg
ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIHwgMCAg
ICB8IENvbmZlZF9TZWdtZW50ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgW1RoaXMgUkZD
XSB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICB8IDAgICAgfCBDb25mZWRf
U2VnbWVudCAgICAgICAgICAgICAgICAgICAgICAgICAgICB8IFtUaGlzIFJGQ10gfDwvdGQ+PHRk
IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAxNCI+PHRkPjwv
dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJs
b2NrIj4gICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPistLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0rPC9zcGFuPjwvdGQ+PHRkPiA8
L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgIHwgICAgICB8IEJpdCB2YWx1ZSA9IDEgbWVhbnMg
RmxhZyBzZXQgICAgICAgICAgICAgIHwgICAgICAgICAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVu
byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz
PSJsYmxvY2siPiAgICAgfCAgICAgIHwgQml0IHZhbHVlID0gMSBtZWFucyBGbGFnIHNldCAgICAg
ICAgICAgICAgfCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5bVGhpcyBSRkNdPC9zcGFuPiB8PC90ZD48
dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+
PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+
ICAgICB8ICAgICAgfCAgICAgICAgICAgICAgICAoaW5kaWNhdGVzIENvbmZlZF9TZWdtZW50KSB8
ICAgICAgICAgICAgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgfCAgICAg
IHwgICAgICAgICAgICAgICAgKGluZGljYXRlcyBDb25mZWRfU2VnbWVudCkgfCAgICAgICAgICAg
IHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgfCAgICAgIHwgQml0IHZhbHVlID0g
MCBpcyBkZWZhdWx0ICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgIHw8L3RkPjx0ZD4gPC90
ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIHwgICAgICB8IEJpdCB2YWx1ZSA9IDAgaXMgZGVmYXVs
dCAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+
PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs
ZWZ0Ij4gICAgICstLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLSstLS0tLS0tLS0tLS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAr
LS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0t
LS0tLS0tKzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj
bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICB8IDEtNyAgfCBVbmFzc2ln
bmVkICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8IFtUaGlzIFJGQ10gfDwvdGQ+PHRk
PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgfCAxLTcgIHwgVW5hc3NpZ25lZCAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgfCBbVGhpcyBSRkNdIHw8L3RkPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTUiPjx0ZD48L3RkPjwvdHI+CiAg
ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICB8
ICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Ky0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tKzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh
c3M9InJibG9jayI+ICAgICB8ICAgICAgfCBWYWx1ZTogQWxsIDcgYml0cyBzZXQgdG8gemVybyAg
ICAgICAgICAgICB8ICAgICAgICAgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90
cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48
c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgIHw8L3NwYW4+ICAgICAgfCBWYWx1ZTogQWxsIDcgYml0
cyBzZXQgdG8gemVybyAgICAgICAgICAgICB8IDxzcGFuIGNsYXNzPSJkZWxldGUiPltUaGlzIFJG
Q108L3NwYW4+IHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xh
c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+
PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICstLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy
aWdodCI+ICAgICArLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0rLS0tLS0tLS0tLS0tKzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg
ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+
IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry
PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg
ICAgICAgIEZpZ3VyZSAxMTogSUFOQSByZWdpc3RyeSBmb3IgQkdQc2VjX1BhdGggRmxhZ3MgZmll
bGQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICBGaWd1cmUgMTE6
IElBTkEgcmVnaXN0cnkgZm9yIEJHUHNlY19QYXRoIEZsYWdzIGZpZWxkLjwvdGQ+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0
ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBGdXR1cmUgdmFsdWVzIG9mIHRoZSBVbmFzc2lnbmVkIGJp
dHMgYXJlIGFzc2lnbmVkIHVzaW5nIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi
PiAgIEZ1dHVyZSB2YWx1ZXMgb2YgdGhlIFVuYXNzaWduZWQgYml0cyBhcmUgYXNzaWduZWQgdXNp
bmcgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAiU3RhbmRhcmRzIEFjdGlvbiIg
cmVnaXN0cmF0aW9uIHByb2NlZHVyZXMgZGVmaW5lZCBpbiBSRkMgNTIyNjwvdGQ+PHRkPiA8L3Rk
Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICJTdGFuZGFyZHMgQWN0aW9uIiByZWdpc3RyYXRpb24gcHJv
Y2VkdXJlcyBkZWZpbmVkIGluIFJGQyA1MjI2PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g
ICBbUkZDNTIyNl0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzUyMjZd
LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy
aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4xMC4gIENvbnRyaWJ1dG9yczwvdGQ+
PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjEwLiAgQ29udHJpYnV0b3JzPC90ZD48dGQgY2xh
c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+
PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+
PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv
dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTgiIGNs
YXNzPSJjaGFuZ2UiPjx0ZD48L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9z
bWFsbD48YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvcmZjZGlm
Zi5weWh0I3BhcnQtOCI+PGVtPiBwYWdlIDQwLCBsaW5lIDIyPHNwYW4gY2xhc3M9ImhpZGUiPiDC
tjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNo
YW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy90b29scy9yZmNk
aWZmL3JmY2RpZmYucHlodCNwYXJ0LTgiPjxlbT4gcGFnZSA0MCwgbGluZSAyMjxzcGFuIGNsYXNz
PSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+
PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBNYXJrIFJleW5vbGRz
LCBIZWF0aGVyIFNjaGlsbGVyLCBKYXNvbiBTY2hpbGxlciwgUnVlZGlnZXIgVm9saywgYW5kPC90
ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTWFyayBSZXlub2xkcywgSGVhdGhlciBT
Y2hpbGxlciwgSmFzb24gU2NoaWxsZXIsIFJ1ZWRpZ2VyIFZvbGssIGFuZDwvdGQ+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0
ZCBjbGFzcz0ibGVmdCI+ICAgRGF2aWQgV2FyZCBmb3IgdGhlaXIgcmV2aWV3LCBjb21tZW50cywg
YW5kIHN1Z2dlc3Rpb25zIGR1cmluZyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0
Ij4gICBEYXZpZCBXYXJkIGZvciB0aGVpciByZXZpZXcsIGNvbW1lbnRzLCBhbmQgc3VnZ2VzdGlv
bnMgZHVyaW5nIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY291cnNlIG9mIHRo
aXMgd29yay4gIFRoYW5rcyBhcmUgYWxzbyBkdWUgdG8gbWFueSBJRVNHIHJldmlld2VyczwvdGQ+
PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNvdXJzZSBvZiB0aGlzIHdvcmsuICBUaGFu
a3MgYXJlIGFsc28gZHVlIHRvIG1hbnkgSUVTRyByZXZpZXdlcnM8L3RkPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh
c3M9ImxlZnQiPiAgIHdob3NlIGNvbW1lbnRzIGdyZWF0bHkgaGVscGVkIGltcHJvdmUgdGhlIGNs
YXJpdHksIGFjY3VyYWN5LCBhbmQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3
aG9zZSBjb21tZW50cyBncmVhdGx5IGhlbHBlZCBpbXByb3ZlIHRoZSBjbGFyaXR5LCBhY2N1cmFj
eSwgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwcmVzZW50YXRpb24gaW4gdGhl
IGRvY3VtZW50LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHByZXNlbnRhdGlv
biBpbiB0aGUgZG9jdW1lbnQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg
ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g
PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+
CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjExLiAg
UmVmZXJlbmNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjExLiAgUmVmZXJlbmNl
czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy
aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4xMS4xLiAgTm9ybWF0aXZlIFJlZmVy
ZW5jZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xMS4xLiAgTm9ybWF0aXZlIFJl
ZmVyZW5jZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
IGlkPSJkaWZmMDAxNiI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v
Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5bSS1ELmll
dGYtaWRyLWJncC1leHRlbmRlZC1tZXNzYWdlc108L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs
YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i
ZGVsZXRlIj4gICAgICAgICAgICAgIEJ1c2gsIFIuLCBQYXRlbCwgSy4sIGFuZCBELiBXYXJkLCAi
RXh0ZW5kZWQgTWVzc2FnZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+
PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs
aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAg
ICAgICAgICAgc3VwcG9ydCBmb3IgQkdQIiwgZHJhZnQtaWV0Zi1pZHItYmdwLWV4dGVuZGVkLW1l
c3NhZ2VzLTE0PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+
PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAg
ICAod29yayBpbiBwcm9ncmVzcyksIERlY2VtYmVyIDIwMTYuPC9zcGFuPjwvdGQ+PHRkPiA8L3Rk
Pjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg
ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgIDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
dGQgY2xhc3M9ImxlZnQiPiAgIFtJLUQuaWV0Zi1zaWRyLWJncHNlYy1hbGdzXTwvdGQ+PHRkPiA8
L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtJLUQuaWV0Zi1zaWRyLWJncHNlYy1hbGdzXTwvdGQ+
PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAxNyI+PHRk
PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i
bGJsb2NrIj4gICAgICAgICAgICAgIFR1cm5lciwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Uy4sPC9z
cGFuPiAiQkdQc2VjIEFsZ29yaXRobXMsIEtleSBGb3JtYXRzLCAmYW1wOyBTaWduYXR1cmU8L3Rk
Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICBUdXJuZXIsIDxzcGFu
IGNsYXNzPSJpbnNlcnQiPlMuIGFuZCBPLiBCb3JjaGVydCw8L3NwYW4+ICJCR1BzZWMgQWxnb3Jp
dGhtcywgS2V5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk
IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgRm9y
bWF0cyIsIDxzcGFuIGNsYXNzPSJkZWxldGUiPmRyYWZ0LWlldGYtc2lkci1iZ3BzZWMtYWxncy0x
Njwvc3Bhbj4gKHdvcmsgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAg
ICAgICAgICBGb3JtYXRzLCAmYW1wOyBTaWduYXR1cmUgRm9ybWF0cyIsIDxzcGFuIGNsYXNzPSJp
bnNlcnQiPmRyYWZ0LWlldGYtc2lkci1iZ3BzZWMtPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l
bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz
cz0ibGJsb2NrIj4gICAgICAgICAgICAgIHByb2dyZXNzKSwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+
Tm92ZW1iZXIgMjAxNi48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz
cGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgYWxncy0xODwvc3Bhbj4gKHdvcmsgaW4g
cHJvZ3Jlc3MpLCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BcHJpbCAyMDE3Ljwvc3Bhbj48L3RkPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+
PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv
dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu
ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW0ktRC5pZXRmLXNpZHItYmdwc2VjLXBraS1w
cm9maWxlc108L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbSS1ELmlldGYtc2lk
ci1iZ3BzZWMtcGtpLXByb2ZpbGVzXTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K
ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg
ICAgICAgICBSZXlub2xkcywgTS4sIFR1cm5lciwgUy4sIGFuZCBTLiBLZW50LCAiQSBQcm9maWxl
IGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgUmV5bm9s
ZHMsIE0uLCBUdXJuZXIsIFMuLCBhbmQgUy4gS2VudCwgIkEgUHJvZmlsZSBmb3I8L3RkPjx0ZCBj
bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgQkdQc2VjIFJvdXRlciBDZXJ0aWZpY2F0
ZXMsIENlcnRpZmljYXRlIFJldm9jYXRpb24gTGlzdHMsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz
PSJyaWdodCI+ICAgICAgICAgICAgICBCR1BzZWMgUm91dGVyIENlcnRpZmljYXRlcywgQ2VydGlm
aWNhdGUgUmV2b2NhdGlvbiBMaXN0cyw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+
CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg
ICAgICAgICAgYW5kIENlcnRpZmljYXRpb24gUmVxdWVzdHMiLCBkcmFmdC1pZXRmLXNpZHItYmdw
c2VjLXBraS08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIGFu
ZCBDZXJ0aWZpY2F0aW9uIFJlcXVlc3RzIiwgZHJhZnQtaWV0Zi1zaWRyLWJncHNlYy1wa2ktPC90
ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l
bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIHByb2ZpbGVzLTIxICh3b3Jr
IGluIHByb2dyZXNzKSwgSmFudWFyeSAyMDE3LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln
aHQiPiAgICAgICAgICAgICAgcHJvZmlsZXMtMjEgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKYW51YXJ5
IDIwMTcuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh
c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48
dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtJQU5BLUFGXSAgIkFk
ZHJlc3MgRmFtaWx5IE51bWJlcnMiLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg
IFtJQU5BLUFGXSAgIkFkZHJlc3MgRmFtaWx5IE51bWJlcnMiLDwvdGQ+PHRkIGNsYXNzPSJsaW5l
bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz
cz0ibGVmdCI+ICAgICAgICAgICAgICAmbHQ7aHR0cDovL3d3dy5pYW5hLm9yZy9hc3NpZ25tZW50
cy9hZGRyZXNzLWZhbWlseS1udW1iZXJzLzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi
PiAgICAgICAgICAgICAgJmx0O2h0dHA6Ly93d3cuaWFuYS5vcmcvYXNzaWdubWVudHMvYWRkcmVz
cy1mYW1pbHktbnVtYmVycy88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg
IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAg
ICAgYWRkcmVzcy1mYW1pbHktbnVtYmVycy54aHRtbCZndDsuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs
YXNzPSJyaWdodCI+ICAgICAgICAgICAgICBhZGRyZXNzLWZhbWlseS1udW1iZXJzLnhodG1sJmd0
Oy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i
cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJw
YXJ0LTkiIGNsYXNzPSJjaGFuZ2UiPjx0ZD48L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hh
bmdlIGF0PC9zbWFsbD48YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2Rp
ZmYvcmZjZGlmZi5weWh0I3BhcnQtOSI+PGVtPiBwYWdlIDQyLCBsaW5lIDM2PHNwYW4gY2xhc3M9
ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBw
aW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy90
b29scy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTkiPjxlbT4gcGFnZSA0MiwgbGluZSAyNzxz
cGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgog
ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg
ICAgICAgIEJ1c2gsIFIuLCAiQkdQc2VjIE9wZXJhdGlvbmFsIENvbnNpZGVyYXRpb25zIiwgZHJh
ZnQtaWV0Zi08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIEJ1
c2gsIFIuLCAiQkdQc2VjIE9wZXJhdGlvbmFsIENvbnNpZGVyYXRpb25zIiwgZHJhZnQtaWV0Zi08
L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp
bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgc2lkci1iZ3BzZWMtb3Bz
LTE2ICh3b3JrIGluIHByb2dyZXNzKSwgSmFudWFyeSAyMDE3LjwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgc2lkci1iZ3BzZWMtb3BzLTE2ICh3b3JrIGluIHBy
b2dyZXNzKSwgSmFudWFyeSAyMDE3LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K
ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48
dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g
ICBbSS1ELmlldGYtc2lkci1iZ3BzZWMtcm9sbG92ZXJdPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz
PSJyaWdodCI+ICAgW0ktRC5pZXRmLXNpZHItYmdwc2VjLXJvbGxvdmVyXTwvdGQ+PHRkIGNsYXNz
PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0
ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBHYWdsaWFubywgUi4sIFdlaXMsIEIuLCBhbmQg
Sy4gUGF0ZWwsICJCR1BzZWMgUm91dGVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+
ICAgICAgICAgICAgICBHYWdsaWFubywgUi4sIFdlaXMsIEIuLCBhbmQgSy4gUGF0ZWwsICJCR1Bz
ZWMgUm91dGVyPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk
IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIENlcnRp
ZmljYXRlIFJvbGxvdmVyIiwgZHJhZnQtaWV0Zi1zaWRyLWJncHNlYy1yb2xsb3Zlci0wNjwvdGQ+
PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgQ2VydGlmaWNhdGUgUm9s
bG92ZXIiLCBkcmFmdC1pZXRmLXNpZHItYmdwc2VjLXJvbGxvdmVyLTA2PC90ZD48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk
IGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICh3b3JrIGluIHByb2dyZXNzKSwgT2N0b2JlciAy
MDE2LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgKHdvcmsg
aW4gcHJvZ3Jlc3MpLCBPY3RvYmVyIDIwMTYuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48
L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48
L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl
ZnQiPiAgIFtJLUQuaWV0Zi1zaWRyLWRlbHRhLXByb3RvY29sXTwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPiAgIFtJLUQuaWV0Zi1zaWRyLWRlbHRhLXByb3RvY29sXTwvdGQ+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBCcnVpam56ZWVscywgVC4sIE11cmF2c2tp
eSwgTy4sIFdlYmVyLCBCLiwgYW5kIFIuIEF1c3RlaW4sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz
PSJyaWdodCI+ICAgICAgICAgICAgICBCcnVpam56ZWVscywgVC4sIE11cmF2c2tpeSwgTy4sIFdl
YmVyLCBCLiwgYW5kIFIuIEF1c3RlaW4sPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry
PgogICAgICA8dHIgaWQ9ImRpZmYwMDE4Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs
YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgIlJQS0kg
UmVwb3NpdG9yeSBEZWx0YSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5Qcm90b2NvbCIsIGRyYWZ0LWll
dGYtc2lkci1kZWx0YS08L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg
ICAgICAgICAgICAgIlJQS0kgUmVwb3NpdG9yeSBEZWx0YSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5Q
cm90b2NvbCAoUlJEUCkiLCBkcmFmdC1pZXRmLXNpZHItPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs
aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj
bGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgICAgICAgIHByb3RvY29s
LTA1PC9zcGFuPiAod29yayBpbiBwcm9ncmVzcyksIDxzcGFuIGNsYXNzPSJkZWxldGUiPkphbnVh
cnk8L3NwYW4+IDIwMTcuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs
YXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgZGVsdGEtcHJvdG9jb2wtMDg8L3NwYW4+ICh3b3Jr
IGluIHByb2dyZXNzKSwgPHNwYW4gY2xhc3M9Imluc2VydCI+TWFyY2g8L3NwYW4+IDIwMTcuPC90
ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l
bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0
Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtJLUQuaWV0Zi1zaWRyLXB1YmxpY2F0
aW9uXTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtJLUQuaWV0Zi1zaWRyLXB1
YmxpY2F0aW9uXTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBXZWls
ZXIsIFMuLCBTb25hbGtlciwgQS4sIGFuZCBSLiBBdXN0ZWluLCAiQSBQdWJsaWNhdGlvbjwvdGQ+
PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgV2VpbGVyLCBTLiwgU29u
YWxrZXIsIEEuLCBhbmQgUi4gQXVzdGVpbiwgIkEgUHVibGljYXRpb248L3RkPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg
Y2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgUHJvdG9jb2wgZm9yIHRoZSBSZXNvdXJjZSBQdWJs
aWMgS2V5IEluZnJhc3RydWN0dXJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg
ICAgICAgICAgICBQcm90b2NvbCBmb3IgdGhlIFJlc291cmNlIFB1YmxpYyBLZXkgSW5mcmFzdHJ1
Y3R1cmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlm
ZjAwMTkiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAoUlBLSSkiLCA8c3BhbiBjbGFzcz0iZGVs
ZXRlIj5kcmFmdC1pZXRmLXNpZHItcHVibGljYXRpb24tMTA8L3NwYW4+ICh3b3JrIGluPC90ZD48
dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgKFJQS0kpIiwgPHNwYW4g
Y2xhc3M9Imluc2VydCI+ZHJhZnQtaWV0Zi1zaWRyLXB1YmxpY2F0aW9uLTEyPC9zcGFuPiAod29y
ayBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgIHByb2dyZXNz
KSwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SmFudWFyeTwvc3Bhbj4gMjAxNy48L3RkPjx0ZD4gPC90
ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICBwcm9ncmVzcyksIDxzcGFuIGNsYXNz
PSJpbnNlcnQiPk1hcmNoPC9zcGFuPiAyMDE3LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+
PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+
PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+
PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs
ZWZ0Ij4gICBbSS1ELmlldGYtc2lkci1ycGtpLXJ0ci1yZmM2ODEwLWJpc108L3RkPjx0ZD4gPC90
ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbSS1ELmlldGYtc2lkci1ycGtpLXJ0ci1yZmM2ODEwLWJp
c108L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9
ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgQnVzaCwgUi4gYW5k
IFIuIEF1c3RlaW4sICJUaGUgUmVzb3VyY2UgUHVibGljIEtleTwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgQnVzaCwgUi4gYW5kIFIuIEF1c3RlaW4sICJUaGUg
UmVzb3VyY2UgUHVibGljIEtleTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg
ICAgPHRyIGlkPSJkaWZmMDAyMCI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i
bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgIEluZnJhc3RydWN0
dXJlIChSUEtJKSB0byBSb3V0ZXIgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+UHJvdG9jb2wiLCBkcmFm
dC1pZXRmLTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAg
ICAgICBJbmZyYXN0cnVjdHVyZSAoUlBLSSkgdG8gUm91dGVyIDxzcGFuIGNsYXNzPSJpbnNlcnQi
PlByb3RvY29sLCBWZXJzaW9uIDEiLDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk
PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9j
ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICBzaWRyLXJwa2ktcnRyLXJmYzY4
MTAtYmlzLTA4PC9zcGFuPiAod29yayBpbiBwcm9ncmVzcyksIDxzcGFuIGNsYXNzPSJkZWxldGUi
PkphbnVhcnk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs
YXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1zaWRyLXJwa2ktcnRyLXJmYzY4
MTAtYmlzLTA5PC9zcGFuPiAod29yayBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90
cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g
ICAgICAgICAgICAgIDIwMTcuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAg
ICAgICAgICAgcHJvZ3Jlc3MpLCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5GZWJydWFyeTwvc3Bhbj4g
MjAxNy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh
c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz
cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0
ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW0ktRC5pZXRmLXNpZHIt
c2x1cm1dPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW0ktRC5pZXRmLXNpZHIt
c2x1cm1dPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRp
ZmYwMDIxIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+
PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgTWFuZGVsYmVyZywgPHNwYW4gY2xhc3M9
ImRlbGV0ZSI+RC4gYW5kIEQuPC9zcGFuPiBNYSwgIlNpbXBsaWZpZWQgTG9jYWwgaW50ZXJuZXQ8
L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICBNYW5kZWxiZXJn
LCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5ELiw8L3NwYW4+IE1hLCA8c3BhbiBjbGFzcz0iaW5zZXJ0
Ij5ELiwgYW5kIFQuIEJydWlqbnplZWxzLDwvc3Bhbj4gIlNpbXBsaWZpZWQ8L3RkPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICBuVW1iZXIgUmVzb3VyY2UgTWFuYWdlbWVu
dCB3aXRoIHRoZSBSUEtJIiwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ZHJhZnQtaWV0Zi08L3NwYW4+
PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgTG9jYWwgaW50
ZXJuZXQgblVtYmVyIFJlc291cmNlIE1hbmFnZW1lbnQgd2l0aCB0aGUgUlBLSSIsPC90ZD48dGQg
Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv
dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgICAgICAg
c2lkci1zbHVybS0wMjwvc3Bhbj4gKHdvcmsgaW4gcHJvZ3Jlc3MpLCA8c3BhbiBjbGFzcz0iZGVs
ZXRlIj5BdWd1c3QgMjAxNi48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si
PiAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+ZHJhZnQtaWV0Zi1zaWRyLXNsdXJt
LTA0PC9zcGFuPiAod29yayBpbiBwcm9ncmVzcyksIDxzcGFuIGNsYXNzPSJpbnNlcnQiPk1hcmNo
IDIwMTcuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+
PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg
ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbUkZDNjQ3
Ml0gIEt1bWFyaSwgVy4gYW5kIEsuIFNyaXJhbSwgIlJlY29tbWVuZGF0aW9uIGZvciBOb3QgVXNp
bmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNjQ3Ml0gIEt1bWFyaSwg
Vy4gYW5kIEsuIFNyaXJhbSwgIlJlY29tbWVuZGF0aW9uIGZvciBOb3QgVXNpbmc8L3RkPjx0ZCBj
bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90
ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgQVNfU0VUIGFuZCBBU19DT05GRURfU0VU
IGluIEJHUCIsIEJDUCAxNzIsIFJGQyA2NDcyLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln
aHQiPiAgICAgICAgICAgICAgQVNfU0VUIGFuZCBBU19DT05GRURfU0VUIGluIEJHUCIsIEJDUCAx
NzIsIFJGQyA2NDcyLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBE
T0kgMTAuMTc0ODcvUkZDNjQ3MiwgRGVjZW1iZXIgMjAxMSw8L3RkPjx0ZD4gPC90ZD48dGQgY2xh
c3M9InJpZ2h0Ij4gICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM2NDcyLCBEZWNlbWJlciAy
MDExLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz
cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAmbHQ7aHR0cDov
L3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzY0NzImZ3Q7LjwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgJmx0O2h0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcv
aW5mby9yZmM2NDcyJmd0Oy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg
IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8
L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K
ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JG
QzY0ODBdICBMZXBpbnNraSwgTS4gYW5kIFMuIEtlbnQsICJBbiBJbmZyYXN0cnVjdHVyZSB0byBT
dXBwb3J0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzY0ODBdICBMZXBp
bnNraSwgTS4gYW5kIFMuIEtlbnQsICJBbiBJbmZyYXN0cnVjdHVyZSB0byBTdXBwb3J0PC90ZD48
dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i
PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIFNlY3VyZSBJbnRlcm5ldCBSb3V0
aW5nIiwgUkZDIDY0ODAsIERPSSAxMC4xNzQ4Ny9SRkM2NDgwLDwvdGQ+PHRkPiA8L3RkPjx0ZCBj
bGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgU2VjdXJlIEludGVybmV0IFJvdXRpbmciLCBSRkMg
NjQ4MCwgRE9JIDEwLjE3NDg3L1JGQzY0ODAsPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48
L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g
ICAgICAgICAgICAgIEZlYnJ1YXJ5IDIwMTIsICZsdDtodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3Jn
L2luZm8vcmZjNjQ4MCZndDsuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg
ICAgICAgICBGZWJydWFyeSAyMDEyLCAmbHQ7aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZv
L3JmYzY0ODAmZ3Q7LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy
Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+
PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgoKICAg
ICA8dHI+PHRkPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9
InJpZ2h0Ij48L3RkPjx0ZD48L3RkPjwvdHI+CiAgICAgPHRyIGlkPSJlbmQiIGJnY29sb3I9Imdy
YXkiPjx0aCBjb2xzcGFuPSI1IiBhbGlnbj0iY2VudGVyIj4mbmJzcDtFbmQgb2YgY2hhbmdlcy4g
MjEgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8L3RoPjwvdHI+CiAgICAgPHRyIGNsYXNzPSJzdGF0cyI+
PHRkPjwvdGQ+PHRoPjxpPjU0IGxpbmVzIGNoYW5nZWQgb3IgZGVsZXRlZDwvaT48L3RoPjx0aD48
aT4gPC9pPjwvdGg+PHRoPjxpPjMyIGxpbmVzIGNoYW5nZWQgb3IgYWRkZWQ8L2k+PC90aD48dGQ+
PC90ZD48L3RyPgogICAgIDx0cj48dGQgY29sc3Bhbj0iNSIgYWxpZ249ImNlbnRlciIgY2xhc3M9
InNtYWxsIj48YnI+VGhpcyBodG1sIGRpZmYgd2FzIHByb2R1Y2VkIGJ5IHJmY2RpZmYgMS40NS4g
VGhlIGxhdGVzdCB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBmcm9tIDxhIGhyZWY9Imh0dHA6Ly93d3cu
dG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi8iPmh0dHA6Ly90b29scy5pZXRmLm9yZy90b29s
cy9yZmNkaWZmLzwvYT4gPC90ZD48L3RyPgogICA8L3Rib2R5PjwvdGFibGU+CiAgIAogICAKPC9i
b2R5PjwvaHRtbD4=

--_004_6567777043DB4CE08E81B35B9A82DF6Fciscocom_--


From nobody Tue Apr  4 09:44:55 2017
Return-Path: <mlepinski@ncf.edu>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC38C1296E0 for <idr@ietfa.amsl.com>; Tue,  4 Apr 2017 09:44:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ncf.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AMB6ASwAarxh for <idr@ietfa.amsl.com>; Tue,  4 Apr 2017 09:44:51 -0700 (PDT)
Received: from mail-wr0-x236.google.com (mail-wr0-x236.google.com [IPv6:2a00:1450:400c:c0c::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D701112422F for <idr@ietf.org>; Tue,  4 Apr 2017 09:44:45 -0700 (PDT)
Received: by mail-wr0-x236.google.com with SMTP id w11so217612153wrc.3 for <idr@ietf.org>; Tue, 04 Apr 2017 09:44:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ncf.edu; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=aafK78B/HKXRqkHHXeWJgW8IWQqGYYjuRzznytyWMW0=; b=XBioahYQy8CSbLe/zUvoN08Sm8iO32GQTGxiX3hsxnZ3z/09WwW40ZQWFwGqg/P4La 3F8CU+RuaVXFy8wQzrbmVEIvRuFsbgWV68sIKzR0JWiV0ia/WmcAiRrIujSzwjxq2X4B GZOUiVhpNijjdW0q11zO9jSTaRimfl9M5onsP6hAiYKfNE9sQJT+omWmHd1SMGHPE+Nz qFR1YUeeUvMliAE5ZtqRNOuhKy/k9D3XI2NZea3uvJzf5piEDTe24lhL2FUaJxx/GFmh vLErLQyMwGkc+2os6zgCFUoGr08gYGmH1bQgjbZHURY4DTTDjftkkWVe7H+G7kDczqWz peJQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=aafK78B/HKXRqkHHXeWJgW8IWQqGYYjuRzznytyWMW0=; b=l1EJg+6ptsz0nQUqcJHqhHLDCM5n33iYIxnUObouLQBpTmwjMMHOW8ZzhmAiBWPAm5 FLRfFu6TGcSgZfcXS4AD6jM6GkYT1eMQ708RR70nljeFW0cWcF8xVhULouH9+RL5v7SK 5snk9ye7ZsWRn4guBMee8aB7Lc2EmXJ+lKBHcH+4cad/bcNZ3TiMOpjn8DkoTgjRAw7c 2IpYz9RipoM98MyxCtC8orNXOIvsrjuq8J+kh4ZivATvDuLWUPU54yamxTHoVi7Jcnat 5ocQj/0mECzNE/XA2hYRjEwKkWdTS+CImaDk2BNpiGbDOvvJ1Q+862IQ3f1qy7TYvNUw J3JQ==
X-Gm-Message-State: AFeK/H3F4VJ9sJc9t7U/nn8KgrqPrYxCMvGpqgT8JhV32n2x+u3y3AdJidT7GL6bM0P80qBFQUUBRM3uIQsH02PW
X-Received: by 10.223.173.53 with SMTP id p50mr23163286wrc.116.1491324284248;  Tue, 04 Apr 2017 09:44:44 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.80.173.232 with HTTP; Tue, 4 Apr 2017 09:44:43 -0700 (PDT)
In-Reply-To: <65677770-43DB-4CE0-8E81-B35B9A82DF6F@cisco.com>
References: <65677770-43DB-4CE0-8E81-B35B9A82DF6F@cisco.com>
From: Matthew Lepinski <mlepinski@ncf.edu>
Date: Tue, 4 Apr 2017 12:44:43 -0400
Message-ID: <CA++NScEB1=TswjnszJm8_kghE2n8MX9gyDPePRsqqNALKyA6=g@mail.gmail.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
Cc: "sidr@ietf.org" <sidr@ietf.org>, "sidr-chairs@ietf.org" <sidr-chairs@ietf.org>,  "draft-ietf-sidr-bgpsec-protocol@ietf.org" <draft-ietf-sidr-bgpsec-protocol@ietf.org>,  "sidrops@ietf.org" <sidrops@ietf.org>, "idr@ietf.org" <idr@ietf.org>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/VPFGd77DN_e7TG5bOauE5WFtdAo>
Subject: Re: [Idr] BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Apr 2017 16:44:53 -0000

Alvaro,

The proposed changes seem reasonable, but I want to make sure that I
understand the path forward clearly.

My understanding is that if we were to reach a future where
draft-ietf-idr-bgp-extended-messages is widely deployed, then the BGP
speaker's maximum message size will just be larger (than it is today)
and as a result we avoid reaching the point where Section 9.2 (of
4271) guidance is needed.

Is my understanding correct? (I want to make sure that future
implementers will find our text clear and we won't need to revise this
spec to add clarity if extended messages ends up in widespread use.)

- Matt Lepinski

On Tue, Apr 4, 2017 at 12:15 PM, Alvaro Retana (aretana)
<aretana@cisco.com> wrote:
> Dear sidr WG:
>
>
>
> As has been discussed in the mailing list and at the sidrops meeting last
> week in Chicago, there is interest to not have the BGPsec document
> (draft-ietf-sidr-bgpsec-protocol) depend normatively on the Extended
> Messages work (draft-ietf-idr-bgp-extended-messages).  Based on that
> discussion, Sriram and I have come up with proposed diffs =E2=80=93 pleas=
e see the
> attachment (-23 has not been posted yet).
>
>
>
> To summarize, the changes are: (1) remove mention/references of/to
> draft-ietf-idr-bgp-extended-messages, and (2) add the following text in
> Section 4.1. (General Guidance):
>
>
>
>     All BGPsec update messages MUST conform to BGP's maximum message
>
>     size.  If the resulting message exceeds the maximum message size,
>
>     then the guidelines in Section 9.2 of RFC 4271 [RFC4271] MUST be
>
>     followed.
>
>
>
> [For easier reference, I put the relevant text from 9.2 below.]
>
>
>
> The result is then that draft-ietf-sidr-bgpsec-protocol doesn=E2=80=99t d=
epend on
> draft-ietf-idr-bgp-extended-messages.  Instead, when referring to the siz=
e
> of the messages, it depends on rfc4271.
>
>
>
> Please let me know if you have any concerns.  I will wait a week before
> proceeding.
>
>
>
> Given that this document has already been approved by the IESG, the proce=
ss
> going forward is:
>
>
>
> - consult the WG (this thread)
>
> - inform the IESG of the intent
>
> - inform the IETF (ietf@ietf.org) of the changes
>
> - publish an updated draft
>
> - continue the publication process
>
>
>
> Each step may, obviously, require additional discussion and could result =
in
> changes to the current plan.
>
>
>
> Thanks!!
>
>
>
> Alvaro.
>
>
>
>
>
>
>
>
>
> https://tools.ietf.org/html/rfc4271#section-9.2
>
>
>
> 9.2.  Update-Send Process
>
>
>
> =E2=80=A6
>
>    If, due to the limits on the maximum size of an UPDATE message (see
>
>    Section 4), a single route doesn't fit into the message, the BGP
>
>    speaker MUST not advertise the route to its peers and MAY choose to
>
>    log an error locally.
>
>


From nobody Tue Apr  4 10:08:17 2017
Return-Path: <kotikalapudi.sriram@nist.gov>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7837127A97; Tue,  4 Apr 2017 10:08:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8kAp96Vfn6fq; Tue,  4 Apr 2017 10:08:13 -0700 (PDT)
Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0117.outbound.protection.outlook.com [23.103.201.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A24F127337; Tue,  4 Apr 2017 10:08:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=pgF7fxGgihYw0ul/sHtj7R9nKqryrdD/uYeyK5TmSjc=; b=DaAKagzsYSM1/fETqVFOiQn0E38iSPdd0e+wvcadwr2mhm0IjGRelx4dNF6pZgEyb1tfdzZEsBkTDoUIEbuw9B5G35FuQRxPozTwWIpA9Q8tYAO/MpfsBdhBfSlX/Zf1Lwhwm0S+rYy/Owneh6hVEgfjFc87wrc/ovzsT0ax/go=
Received: from DM2PR09MB0446.namprd09.prod.outlook.com (10.161.252.145) by DM2PR09MB0448.namprd09.prod.outlook.com (10.161.252.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1005.10; Tue, 4 Apr 2017 17:08:10 +0000
Received: from DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) by DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) with mapi id 15.01.1005.019; Tue, 4 Apr 2017 17:08:10 +0000
From: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>
To: Matthew Lepinski <mlepinski@ncf.edu>, "Alvaro Retana (aretana)" <aretana@cisco.com>
CC: "sidr@ietf.org" <sidr@ietf.org>, "sidr-chairs@ietf.org" <sidr-chairs@ietf.org>, "draft-ietf-sidr-bgpsec-protocol@ietf.org" <draft-ietf-sidr-bgpsec-protocol@ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
Thread-Index: AQHSrV6hkKLo0jlbPUCXfQgnSjWfzKG1aseAgAABWpA=
Date: Tue, 4 Apr 2017 17:08:10 +0000
Message-ID: <DM2PR09MB0446F7E3A334A58C1C85D461840B0@DM2PR09MB0446.namprd09.prod.outlook.com>
References: <65677770-43DB-4CE0-8E81-B35B9A82DF6F@cisco.com> <CA++NScEB1=TswjnszJm8_kghE2n8MX9gyDPePRsqqNALKyA6=g@mail.gmail.com>
In-Reply-To: <CA++NScEB1=TswjnszJm8_kghE2n8MX9gyDPePRsqqNALKyA6=g@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ncf.edu; dkim=none (message not signed) header.d=none;ncf.edu; dmarc=none action=none header.from=nist.gov;
x-originating-ip: [129.6.140.122]
x-microsoft-exchange-diagnostics: 1; DM2PR09MB0448; 7:YjGr3BHPoS9ss2OcbCUS7BDHRA0ZX6745R9HQQ8Eyfs3t9ZXPQ7f4EvjeXDc9hv7xmEpeUvZ5u0MggtqjZEiSV2S818zO1Vi82CgYRmZfTGjdAfb1WHmgUOmCK9o06Fe1aUWCsoGaA1R3jEbUvNCw9m1/MGkVPxsZoZscfyBX0aqT9jGWSVpvk2ULBy7jQkLcPqU8cblI8lUEqJEWouzSAhLeYuhkp0lPTHlW2KUd9pjXR7iTife2G2ZVcWM8V5ZNpZhL0cxaP1QZAjtmvzC4MIXXroKMSxsG0JWZp5xgX7r2I7m6sVDmJ704Dl4sn9Cy9tuMtltlAxQWl6RtnAT2g==
x-ms-office365-filtering-correlation-id: e00ef82b-251d-4f87-0c37-08d47b7d2bf3
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081);  SRVR:DM2PR09MB0448; 
x-microsoft-antispam-prvs: <DM2PR09MB0448A16D84D5D615DA01E0FB840B0@DM2PR09MB0448.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(95692535739014);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041248)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(20161123555025)(20161123564025)(20161123562025)(6072148); SRVR:DM2PR09MB0448; BCL:0; PCL:0; RULEID:; SRVR:DM2PR09MB0448; 
x-forefront-prvs: 0267E514F9
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39840400002)(39860400002)(39400400002)(39410400002)(39450400003)(39850400002)(24454002)(13464003)(377454003)(25786009)(53546009)(99286003)(55016002)(2906002)(122556002)(5890100001)(230783001)(2171002)(8936002)(189998001)(5660300001)(81166006)(8676002)(9686003)(6306002)(54906002)(2950100002)(6246003)(53936002)(7696004)(54356999)(76176999)(50986999)(3660700001)(33656002)(6436002)(6506006)(77096006)(66066001)(305945005)(102836003)(6116002)(4326008)(2900100001)(86362001)(15650500001)(38730400002)(7736002)(3280700002)(74316002)(3846002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR09MB0448; H:DM2PR09MB0446.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Apr 2017 17:08:10.2047 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR09MB0448
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/3jHWkBd9dXZuiRoFGVFKjdBKx7g>
Subject: Re: [Idr] BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Apr 2017 17:08:16 -0000

SGkgTWF0dCwNCg0KSSB0aGluayBzbGlkZSA0IG9mIHRoaXMgcHJlc2VudGF0aW9uIChTSURST1BT
LCBJRVRGIDk4KSBhZGRyZXNzZXMgeW91ciBxdWVzdGlvbnMvY29uY2VybnM6IA0KaHR0cHM6Ly93
d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvOTgvc2xpZGVzL3NsaWRlcy05OC1zaWRyb3BzLWRlY291
cGxpbmctYmdwc2VjLWRvY3VtZW50cy1hbmQtZXh0ZW5kZWQtbWVzc2FnZXMtZHJhZnQtMDAucGRm
IA0KDQpQbGVhc2UgdGFrZSBhIGxvb2sgYXQgc2xpZGUgMyBhbHNvIChCR1AgJiBCR1BzZWMgdXBk
YXRlIHNpemVzKS4gDQoNCkFsc28sIEFsdmFybydzIHBvc3QgZnJvbSBNYXJjaCAxNSBzaG91bGQg
YmUgaGVscGZ1bDogIA0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9zaWRy
L2N1cnJlbnQvbXNnMDg1MDYuaHRtbCANCg0KU3JpcmFtDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2Fn
ZS0tLS0tDQpGcm9tOiBNYXR0aGV3IExlcGluc2tpIFttYWlsdG86bWxlcGluc2tpQG5jZi5lZHVd
IA0KU2VudDogVHVlc2RheSwgQXByaWwgMDQsIDIwMTcgMTI6NDUgUE0NClRvOiBBbHZhcm8gUmV0
YW5hIChhcmV0YW5hKSA8YXJldGFuYUBjaXNjby5jb20+DQpDYzogc2lkckBpZXRmLm9yZzsgc2lk
ci1jaGFpcnNAaWV0Zi5vcmc7IGRyYWZ0LWlldGYtc2lkci1iZ3BzZWMtcHJvdG9jb2xAaWV0Zi5v
cmc7IHNpZHJvcHNAaWV0Zi5vcmc7IGlkckBpZXRmLm9yZw0KU3ViamVjdDogUmU6IEJHUHNlYyB3
aXRob3V0IEV4dGVuZGVkIE1lc3NhZ2VzIChkcmFmdC1pZXRmLXNpZHItYmdwc2VjLXByb3RvY29s
KQ0KDQpBbHZhcm8sDQoNClRoZSBwcm9wb3NlZCBjaGFuZ2VzIHNlZW0gcmVhc29uYWJsZSwgYnV0
IEkgd2FudCB0byBtYWtlIHN1cmUgdGhhdCBJIHVuZGVyc3RhbmQgdGhlIHBhdGggZm9yd2FyZCBj
bGVhcmx5Lg0KDQpNeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgaWYgd2Ugd2VyZSB0byByZWFjaCBh
IGZ1dHVyZSB3aGVyZSBkcmFmdC1pZXRmLWlkci1iZ3AtZXh0ZW5kZWQtbWVzc2FnZXMgaXMgd2lk
ZWx5IGRlcGxveWVkLCB0aGVuIHRoZSBCR1Agc3BlYWtlcidzIG1heGltdW0gbWVzc2FnZSBzaXpl
IHdpbGwganVzdCBiZSBsYXJnZXIgKHRoYW4gaXQgaXMgdG9kYXkpIGFuZCBhcyBhIHJlc3VsdCB3
ZSBhdm9pZCByZWFjaGluZyB0aGUgcG9pbnQgd2hlcmUgU2VjdGlvbiA5LjIgKG9mDQo0MjcxKSBn
dWlkYW5jZSBpcyBuZWVkZWQuDQoNCklzIG15IHVuZGVyc3RhbmRpbmcgY29ycmVjdD8gKEkgd2Fu
dCB0byBtYWtlIHN1cmUgdGhhdCBmdXR1cmUgaW1wbGVtZW50ZXJzIHdpbGwgZmluZCBvdXIgdGV4
dCBjbGVhciBhbmQgd2Ugd29uJ3QgbmVlZCB0byByZXZpc2UgdGhpcyBzcGVjIHRvIGFkZCBjbGFy
aXR5IGlmIGV4dGVuZGVkIG1lc3NhZ2VzIGVuZHMgdXAgaW4gd2lkZXNwcmVhZCB1c2UuKQ0KDQot
IE1hdHQgTGVwaW5za2kNCg0KT24gVHVlLCBBcHIgNCwgMjAxNyBhdCAxMjoxNSBQTSwgQWx2YXJv
IFJldGFuYSAoYXJldGFuYSkgPGFyZXRhbmFAY2lzY28uY29tPiB3cm90ZToNCj4gRGVhciBzaWRy
IFdHOg0KPg0KPg0KPg0KPiBBcyBoYXMgYmVlbiBkaXNjdXNzZWQgaW4gdGhlIG1haWxpbmcgbGlz
dCBhbmQgYXQgdGhlIHNpZHJvcHMgbWVldGluZyANCj4gbGFzdCB3ZWVrIGluIENoaWNhZ28sIHRo
ZXJlIGlzIGludGVyZXN0IHRvIG5vdCBoYXZlIHRoZSBCR1BzZWMgDQo+IGRvY3VtZW50DQo+IChk
cmFmdC1pZXRmLXNpZHItYmdwc2VjLXByb3RvY29sKSBkZXBlbmQgbm9ybWF0aXZlbHkgb24gdGhl
IEV4dGVuZGVkIA0KPiBNZXNzYWdlcyB3b3JrIChkcmFmdC1pZXRmLWlkci1iZ3AtZXh0ZW5kZWQt
bWVzc2FnZXMpLiAgQmFzZWQgb24gdGhhdCANCj4gZGlzY3Vzc2lvbiwgU3JpcmFtIGFuZCBJIGhh
dmUgY29tZSB1cCB3aXRoIHByb3Bvc2VkIGRpZmZzIOKAkyBwbGVhc2Ugc2VlIA0KPiB0aGUgYXR0
YWNobWVudCAoLTIzIGhhcyBub3QgYmVlbiBwb3N0ZWQgeWV0KS4NCj4NCj4NCj4NCj4gVG8gc3Vt
bWFyaXplLCB0aGUgY2hhbmdlcyBhcmU6ICgxKSByZW1vdmUgbWVudGlvbi9yZWZlcmVuY2VzIG9m
L3RvIA0KPiBkcmFmdC1pZXRmLWlkci1iZ3AtZXh0ZW5kZWQtbWVzc2FnZXMsIGFuZCAoMikgYWRk
IHRoZSBmb2xsb3dpbmcgdGV4dCANCj4gaW4gU2VjdGlvbiA0LjEuIChHZW5lcmFsIEd1aWRhbmNl
KToNCj4NCj4NCj4NCj4gICAgIEFsbCBCR1BzZWMgdXBkYXRlIG1lc3NhZ2VzIE1VU1QgY29uZm9y
bSB0byBCR1AncyBtYXhpbXVtIG1lc3NhZ2UNCj4NCj4gICAgIHNpemUuICBJZiB0aGUgcmVzdWx0
aW5nIG1lc3NhZ2UgZXhjZWVkcyB0aGUgbWF4aW11bSBtZXNzYWdlIHNpemUsDQo+DQo+ICAgICB0
aGVuIHRoZSBndWlkZWxpbmVzIGluIFNlY3Rpb24gOS4yIG9mIFJGQyA0MjcxIFtSRkM0MjcxXSBN
VVNUIGJlDQo+DQo+ICAgICBmb2xsb3dlZC4NCj4NCj4NCj4NCj4gW0ZvciBlYXNpZXIgcmVmZXJl
bmNlLCBJIHB1dCB0aGUgcmVsZXZhbnQgdGV4dCBmcm9tIDkuMiBiZWxvdy5dDQo+DQo+DQo+DQo+
IFRoZSByZXN1bHQgaXMgdGhlbiB0aGF0IGRyYWZ0LWlldGYtc2lkci1iZ3BzZWMtcHJvdG9jb2wg
ZG9lc27igJl0IGRlcGVuZCANCj4gb24gZHJhZnQtaWV0Zi1pZHItYmdwLWV4dGVuZGVkLW1lc3Nh
Z2VzLiAgSW5zdGVhZCwgd2hlbiByZWZlcnJpbmcgdG8gDQo+IHRoZSBzaXplIG9mIHRoZSBtZXNz
YWdlcywgaXQgZGVwZW5kcyBvbiByZmM0MjcxLg0KPg0KPg0KPg0KPiBQbGVhc2UgbGV0IG1lIGtu
b3cgaWYgeW91IGhhdmUgYW55IGNvbmNlcm5zLiAgSSB3aWxsIHdhaXQgYSB3ZWVrIA0KPiBiZWZv
cmUgcHJvY2VlZGluZy4NCj4NCj4NCj4NCj4gR2l2ZW4gdGhhdCB0aGlzIGRvY3VtZW50IGhhcyBh
bHJlYWR5IGJlZW4gYXBwcm92ZWQgYnkgdGhlIElFU0csIHRoZSANCj4gcHJvY2VzcyBnb2luZyBm
b3J3YXJkIGlzOg0KPg0KPg0KPg0KPiAtIGNvbnN1bHQgdGhlIFdHICh0aGlzIHRocmVhZCkNCj4N
Cj4gLSBpbmZvcm0gdGhlIElFU0cgb2YgdGhlIGludGVudA0KPg0KPiAtIGluZm9ybSB0aGUgSUVU
RiAoaWV0ZkBpZXRmLm9yZykgb2YgdGhlIGNoYW5nZXMNCj4NCj4gLSBwdWJsaXNoIGFuIHVwZGF0
ZWQgZHJhZnQNCj4NCj4gLSBjb250aW51ZSB0aGUgcHVibGljYXRpb24gcHJvY2Vzcw0KPg0KPg0K
Pg0KPiBFYWNoIHN0ZXAgbWF5LCBvYnZpb3VzbHksIHJlcXVpcmUgYWRkaXRpb25hbCBkaXNjdXNz
aW9uIGFuZCBjb3VsZCANCj4gcmVzdWx0IGluIGNoYW5nZXMgdG8gdGhlIGN1cnJlbnQgcGxhbi4N
Cj4NCj4NCj4NCj4gVGhhbmtzISENCj4NCj4NCj4NCj4gQWx2YXJvLg0KPg0KPg0KPg0KPg0KPg0K
Pg0KPg0KPg0KPg0KPiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNDI3MSNzZWN0aW9u
LTkuMg0KPg0KPg0KPg0KPiA5LjIuICBVcGRhdGUtU2VuZCBQcm9jZXNzDQo+DQo+DQo+DQo+IOKA
pg0KPg0KPiAgICBJZiwgZHVlIHRvIHRoZSBsaW1pdHMgb24gdGhlIG1heGltdW0gc2l6ZSBvZiBh
biBVUERBVEUgbWVzc2FnZSAoc2VlDQo+DQo+ICAgIFNlY3Rpb24gNCksIGEgc2luZ2xlIHJvdXRl
IGRvZXNuJ3QgZml0IGludG8gdGhlIG1lc3NhZ2UsIHRoZSBCR1ANCj4NCj4gICAgc3BlYWtlciBN
VVNUIG5vdCBhZHZlcnRpc2UgdGhlIHJvdXRlIHRvIGl0cyBwZWVycyBhbmQgTUFZIGNob29zZSB0
bw0KPg0KPiAgICBsb2cgYW4gZXJyb3IgbG9jYWxseS4NCj4NCj4NCg==


From nobody Tue Apr  4 10:18:50 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEFAD120326; Tue,  4 Apr 2017 10:18:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6zwdlFm16Mjt; Tue,  4 Apr 2017 10:18:47 -0700 (PDT)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E95CA127A97; Tue,  4 Apr 2017 10:18:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2046; q=dns/txt; s=iport; t=1491326326; x=1492535926; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=Tb8HSrjOairsO9UtzqvoxXCmK4QO28GGDIdI6Stamqk=; b=iF3jo7j7rTszwGHl3VQb69xy1a4FI4DcFrsFIPHxGRRUtQ73SDFo29pz g3evYvOfrFRDdxBJuiNJXSeJqUpCJRP1s1yIYiAZ25lDt893XgXux2EXP B3lsZDLXTh3jQyhGWHZjoABqmD1//zbx5OQlD71mNdGoEoSeTQyb6pqdw k=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AJAgCX1ONY/5xdJa1cDgwBAQEBAgEBA?= =?us-ascii?q?QEIAQEBAYNUgWwHg1yKEpFblVOCDoYiAhqDKD8YAQIBAQEBAQEBayiFFgEEASM?= =?us-ascii?q?RRQULAgEIDgwCJgICAjAVEAIEDgWKBgitaYImimgBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAR6BC4VDggWCaoQxI4MGLoIxAQSWGoZTAZJPgX2PP4hcixgBHziBBVsVUgG?= =?us-ascii?q?GCj11hl+BL4ENAQEB?=
X-IronPort-AV: E=Sophos;i="5.36,275,1486425600"; d="scan'208";a="218360369"
Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 04 Apr 2017 17:18:46 +0000
Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by rcdn-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id v34HIkWm012391 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 4 Apr 2017 17:18:46 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 4 Apr 2017 12:18:45 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Tue, 4 Apr 2017 12:18:45 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: Matthew Lepinski <mlepinski@ncf.edu>
CC: "sidr@ietf.org" <sidr@ietf.org>, "sidr-chairs@ietf.org" <sidr-chairs@ietf.org>, "draft-ietf-sidr-bgpsec-protocol@ietf.org" <draft-ietf-sidr-bgpsec-protocol@ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
Thread-Index: AQHSrV6hkKLo0jlbPUCXfQgnSjWfzKG1vpmA///GcwA=
Date: Tue, 4 Apr 2017 17:18:45 +0000
Message-ID: <36894BDC-01FC-41A5-B7B8-BC91204AE1D2@cisco.com>
References: <65677770-43DB-4CE0-8E81-B35B9A82DF6F@cisco.com> <CA++NScEB1=TswjnszJm8_kghE2n8MX9gyDPePRsqqNALKyA6=g@mail.gmail.com>
In-Reply-To: <CA++NScEB1=TswjnszJm8_kghE2n8MX9gyDPePRsqqNALKyA6=g@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: text/plain; charset="utf-8"
Content-ID: <E4C917595EB1F0489CD928DFB26083E5@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/oSoMhypfa0RP2K55ySd9Dq92TmE>
Subject: Re: [Idr] BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Apr 2017 17:18:49 -0000
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From nobody Tue Apr  4 12:15:58 2017
Return-Path: <mlepinski@ncf.edu>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C1EA128DF3 for <idr@ietfa.amsl.com>; Tue,  4 Apr 2017 12:15:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ncf.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IZIhWja6mqJf for <idr@ietfa.amsl.com>; Tue,  4 Apr 2017 12:15:51 -0700 (PDT)
Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7F751294BE for <idr@ietf.org>; Tue,  4 Apr 2017 12:15:44 -0700 (PDT)
Received: by mail-wm0-x232.google.com with SMTP id x124so36703899wmf.0 for <idr@ietf.org>; Tue, 04 Apr 2017 12:15:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ncf.edu; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=tcSBmI1r0k/WN1ATuI8C1RkP3v+DAVq/sxrxdcSFVcg=; b=Kevno6kMOpBDRd03P3h1yZkxF/Uu0lrn1E2+HBnUyBMpts3du6gC04rTa/rqnnN0ND 55xriUi2PUcrzZYIUc/HGKsCcqpWJCyPrOYPe6E8w8yZF4EGtcU67f3i2nTnQXPGw8+X Ak4qB6TNkFHf7w3o4tf/PdfPjF874F6Zqd4EbcYL0X24ZapNKZdYiknqWjiGdlW5AKdN 5ExrqnECqaw9UD1OUdFTEHI4hKxnNQGd1VXDLfh7/7zvhXCz8SK9+D+BR+6aQf8/13v4 VNnV3eAQ5Ku9IiXUR19PAS/qvwIRkA30h0maqmvKm/p9Ok/DZHBTrIIYcBv3/T/MimAa zMcw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=tcSBmI1r0k/WN1ATuI8C1RkP3v+DAVq/sxrxdcSFVcg=; b=EBPwAzAXpE8TZ/WcXoGPSYf0F6sB/5m0Z+5HhYOoHouFCmPWt6Td+CALZduJxynQp0 Vk58lf9CnQSzipn0osz7Wv9EmEDbOVBTRop6hGbT2dpTE3+7YfS3FPVmxKx8G8aI3fkO Q+4SY3nbsxQG5CQrzWWPKVXK41fu721pRLMN2b/zhHokx8nwRwfK5pr0qUILUveplSgH c5RqXD7plgTr1F42/+Tfgzs51hOXkCWBNYCCFXy32PhkN3kyvUy+StckiWXrSfaX89Vm +UOcFrnVaIrP2WKh5WqjIekabY8PkT5fot0cjItAQd/V1Inqx6mxYl7PyCX2CMKeGHRR 5d/w==
X-Gm-Message-State: AFeK/H0pF3vFVCesKpTJ3PuUfWymyWHfZlk2Mm5OuPvxY/2Q6Trw851j CrrulqLNghO7aiQ+Qp+JWx0d5EtbDiwk
X-Received: by 10.28.66.77 with SMTP id p74mr16286641wma.107.1491333343299; Tue, 04 Apr 2017 12:15:43 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.80.173.232 with HTTP; Tue, 4 Apr 2017 12:15:42 -0700 (PDT)
Received: by 10.80.173.232 with HTTP; Tue, 4 Apr 2017 12:15:42 -0700 (PDT)
In-Reply-To: <36894BDC-01FC-41A5-B7B8-BC91204AE1D2@cisco.com>
References: <65677770-43DB-4CE0-8E81-B35B9A82DF6F@cisco.com> <CA++NScEB1=TswjnszJm8_kghE2n8MX9gyDPePRsqqNALKyA6=g@mail.gmail.com> <36894BDC-01FC-41A5-B7B8-BC91204AE1D2@cisco.com>
From: Matthew Lepinski <mlepinski@ncf.edu>
Date: Tue, 4 Apr 2017 15:15:42 -0400
Message-ID: <CA++NScGi8J0=9QKs1m3MNqJXCo3XReirAy7i64aKUrE24VULqQ@mail.gmail.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
Cc: "sidr@ietf.org" <sidr@ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>,  "draft-ietf-sidr-bgpsec-protocol@ietf.org" <draft-ietf-sidr-bgpsec-protocol@ietf.org>, "idr@ietf.org" <idr@ietf.org>,  "sidr-chairs@ietf.org" <sidr-chairs@ietf.org>
Content-Type: multipart/alternative; boundary=94eb2c0742ec2b7675054c5c1a5e
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/eCaz2yvrdz0nMxrC4c7DpwEXKt8>
Subject: Re: [Idr] BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Apr 2017 19:15:53 -0000

--94eb2c0742ec2b7675054c5c1a5e
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Alvaro,

Thanks a lot. That makes perfect sense.

I support this change.

- Matt Lepinski

On Apr 4, 2017 1:18 PM, "Alvaro Retana (aretana)" <aretana@cisco.com> wrote=
:

> On 4/4/17, 12:44 PM, "Matthew Lepinski" <mlepinski@ncf.edu> wrote:
>
> Matt:
>
> Hi!
>
> > The proposed changes seem reasonable, but I want to make sure that I
> > understand the path forward clearly.
> >
> > My understanding is that if we were to reach a future where
> > draft-ietf-idr-bgp-extended-messages is widely deployed, then the BGP
> > speaker's maximum message size will just be larger (than it is today)
> > and as a result we avoid reaching the point where Section 9.2 (of
> > 4271) guidance is needed.
> >
> > Is my understanding correct?
>
> Not exactly.
>
> The text in 9.2/rfc4271 is generic, it doesn=E2=80=99t apply to a specifi=
c message
> size; the maximum size is defined elsewhere.  The current text of
> draft-ietf-idr-bgp-extended-messages changes the size of the messages in
> Section 4 (of rfc4271), which is the same place where 9.2 points to.  IOW=
,
> the text in 9.2 would not change and still be applicable, the limit would
> just be reached later.
>
> > (I want to make sure that future
> > implementers will find our text clear and we won't need to revise this
> > spec to add clarity if extended messages ends up in widespread use.)
>
> To me, the main purpose of changing the BGPsec spec is to depend on
> whatever BGP does, and not on a future extension that may or may not be i=
n
> the form it is today.  However, if we keep the reference to the known
> standard (rfc4271), then we should not have to update this document becau=
se
> we would just inherit whatever BGP does.
>
> Thanks!
>
> Alvaro.
>
>

--94eb2c0742ec2b7675054c5c1a5e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Alvaro,<div dir=3D"auto"><br></div><div dir=3D"auto">Than=
ks a lot. That makes perfect sense.<div dir=3D"auto"><br></div><div dir=3D"=
auto">I support this change.</div><div dir=3D"auto"><br></div><div dir=3D"a=
uto">- Matt Lepinski</div></div></div><div class=3D"gmail_extra"><br><div c=
lass=3D"gmail_quote">On Apr 4, 2017 1:18 PM, &quot;Alvaro Retana (aretana)&=
quot; &lt;<a href=3D"mailto:aretana@cisco.com">aretana@cisco.com</a>&gt; wr=
ote:<br type=3D"attribution"><blockquote class=3D"gmail_quote" style=3D"mar=
gin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 4/4/17, 12:4=
4 PM, &quot;Matthew Lepinski&quot; &lt;<a href=3D"mailto:mlepinski@ncf.edu"=
>mlepinski@ncf.edu</a>&gt; wrote:<br>
<br>
Matt:<br>
<br>
Hi!<br>
<br>
&gt; The proposed changes seem reasonable, but I want to make sure that I<b=
r>
&gt; understand the path forward clearly.<br>
&gt;<br>
&gt; My understanding is that if we were to reach a future where<br>
&gt; draft-ietf-idr-bgp-extended-<wbr>messages is widely deployed, then the=
 BGP<br>
&gt; speaker&#39;s maximum message size will just be larger (than it is tod=
ay)<br>
&gt; and as a result we avoid reaching the point where Section 9.2 (of<br>
&gt; 4271) guidance is needed.<br>
&gt;<br>
&gt; Is my understanding correct?<br>
<br>
Not exactly.<br>
<br>
The text in 9.2/rfc4271 is generic, it doesn=E2=80=99t apply to a specific =
message size; the maximum size is defined elsewhere.=C2=A0 The current text=
 of draft-ietf-idr-bgp-extended-<wbr>messages changes the size of the messa=
ges in Section 4 (of rfc4271), which is the same place where 9.2 points to.=
=C2=A0 IOW, the text in 9.2 would not change and still be applicable, the l=
imit would just be reached later.<br>
<br>
&gt; (I want to make sure that future<br>
&gt; implementers will find our text clear and we won&#39;t need to revise =
this<br>
&gt; spec to add clarity if extended messages ends up in widespread use.)<b=
r>
<br>
To me, the main purpose of changing the BGPsec spec is to depend on whateve=
r BGP does, and not on a future extension that may or may not be in the for=
m it is today.=C2=A0 However, if we keep the reference to the known standar=
d (rfc4271), then we should not have to update this document because we wou=
ld just inherit whatever BGP does.<br>
<br>
Thanks!<br>
<br>
Alvaro.<br>
<br>
</blockquote></div></div>

--94eb2c0742ec2b7675054c5c1a5e--


From nobody Wed Apr  5 04:07:32 2017
Return-Path: <internet-drafts@ietf.org>
X-Original-To: idr@ietf.org
Delivered-To: idr@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 43E85129458; Wed,  5 Apr 2017 04:07:26 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: idr@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.49.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <149139044615.1084.15716221894287955371@ietfa.amsl.com>
Date: Wed, 05 Apr 2017 04:07:26 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/HGaWeJ0c8yO3JwRJEWOUHM4ihNg>
Subject: [Idr] I-D Action: draft-ietf-idr-bgp-bestpath-selection-criteria-07.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Apr 2017 11:07:26 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Inter-Domain Routing of the IETF.

        Title           : BGP Bestpath Selection Criteria Enhancement
        Author          : Rajiv Asati
	Filename        : draft-ietf-idr-bgp-bestpath-selection-criteria-07.txt
	Pages           : 8
	Date            : 2017-04-05

Abstract:
   BGP specification (RFC4271) prescribes 'BGP next-hop reachability'
   as one of the key 'Route Resolvability Condition' that must be
   satisfied before the BGP bestpath candidate selection. This
   condition, however, may not be sufficient (as explained in the
   Appendix section) and desire further granularity.

   This document defines enhances the "Route Resolvability Condition"
   to facilitate the next-hop to be resolved in the chosen data plane.




The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-idr-bgp-bestpath-selection-criteria/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-idr-bgp-bestpath-selection-criteria-07
https://datatracker.ietf.org/doc/html/draft-ietf-idr-bgp-bestpath-selection-criteria-07

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-idr-bgp-bestpath-selection-criteria-07


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Wed Apr  5 07:49:18 2017
Return-Path: <sean@sn3rd.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04166126DC2 for <idr@ietfa.amsl.com>; Wed,  5 Apr 2017 07:49:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level: 
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cCHJhDCKDvIm for <idr@ietfa.amsl.com>; Wed,  5 Apr 2017 07:49:15 -0700 (PDT)
Received: from mail-qk0-x233.google.com (mail-qk0-x233.google.com [IPv6:2607:f8b0:400d:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC29812945C for <idr@ietf.org>; Wed,  5 Apr 2017 07:49:09 -0700 (PDT)
Received: by mail-qk0-x233.google.com with SMTP id p22so12844153qka.3 for <idr@ietf.org>; Wed, 05 Apr 2017 07:49:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=QqwgyG9yaxQ51xzCOtVVoVu5CgRq7B8xdY/tohlfSck=; b=WQp9+XVCGznWOhnIg+XSHzlJVkQuYfw75JkkKoJn7f5wsb3hqwRDZyseOZz7vC1Qkd hJTgorAA0B0XuJqQRZfAlyTGLT5+xwh6CzKO9uBlTqei93K4Zlljn4mavl7aDkkLK7hH GrvFzc/exXapQK0BS7rT7XK0Foi0I0iWHMASo=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=QqwgyG9yaxQ51xzCOtVVoVu5CgRq7B8xdY/tohlfSck=; b=uUfZVzFC+zwHiu2yotWZlHVCM4ZetpPpVwHsEkLH9gw64tu8CPCihLgqYHbduxJIlU X2aHRoxkH6N0sqxFEsWU96rmyJRupHDPfRqEC8pBRDOdrf+rUdRm4HhuprUhWzFLkNWs AVqIbxJJy98mJmi42gFqpakdQovAJBFlWxljf9lfiJ8XQwUeLBkSoicCqZ23XCPihfRr hy4Gr4rgg1zCKeW8FLVvv0Ty2l6dfA0RUXAUr1bgALjoyxOZFOGDw5VE2z/+4jiBmko9 DI/rjRVerfuMNL6AO5OwbfE5qKmxR0e/oQzoKMp559LycW6qWZpfEuLD/ciYMHhQB3aT JbEQ==
X-Gm-Message-State: AFeK/H2XexsYSfIK800QmYG394kYO7jt8yRJ7Ka2wQrySGbo9rESRO3ZINxaayjQ7LG44A==
X-Received: by 10.55.25.81 with SMTP id k78mr17291251qkh.224.1491403749032; Wed, 05 Apr 2017 07:49:09 -0700 (PDT)
Received: from [172.16.0.18] ([96.231.222.158]) by smtp.gmail.com with ESMTPSA id q66sm14102993qkd.69.2017.04.05.07.49.07 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 05 Apr 2017 07:49:08 -0700 (PDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Sean Turner <sean@sn3rd.com>
In-Reply-To: <36894BDC-01FC-41A5-B7B8-BC91204AE1D2@cisco.com>
Date: Wed, 5 Apr 2017 10:49:06 -0400
Cc: Matthew Lepinski <mlepinski@ncf.edu>, "draft-ietf-sidr-bgpsec-protocol@ietf.org" <draft-ietf-sidr-bgpsec-protocol@ietf.org>, "idr@ietf.org" <idr@ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, "sidr-chairs@ietf.org" <sidr-chairs@ietf.org>, "sidr@ietf.org" <sidr@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <EE8D4558-4EF4-43B3-AA65-B22FFCAF72E3@sn3rd.com>
References: <65677770-43DB-4CE0-8E81-B35B9A82DF6F@cisco.com> <CA++NScEB1=TswjnszJm8_kghE2n8MX9gyDPePRsqqNALKyA6=g@mail.gmail.com> <36894BDC-01FC-41A5-B7B8-BC91204AE1D2@cisco.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/HzcrrRBmsx9imoz5SLyIWt1aF6o>
Subject: Re: [Idr] [sidr] BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Apr 2017 14:49:17 -0000

> On Apr 4, 2017, at 13:18, Alvaro Retana (aretana) <aretana@cisco.com> =
wrote:
>=20
> To me, the main purpose of changing the BGPsec spec is to depend on =
whatever BGP does, and not on a future extension that may or may not be =
in the form it is today.  However, if we keep the reference to the known =
standard (rfc4271), then we should not have to update this document =
because we would just inherit whatever BGP does.

This sound reasonable to me.

spt=


From nobody Wed Apr  5 08:06:39 2017
Return-Path: <shares@ndzh.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16CC1129447; Wed,  5 Apr 2017 08:06:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.945
X-Spam-Level: 
X-Spam-Status: No, score=0.945 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xh6uOxs6D4_s; Wed,  5 Apr 2017 08:06:25 -0700 (PDT)
Received: from hickoryhill-consulting.com (50-245-122-97-static.hfc.comcastbusiness.net [50.245.122.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD881129400; Wed,  5 Apr 2017 08:06:24 -0700 (PDT)
X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=50.36.81.153; 
From: "Susan Hares" <shares@ndzh.com>
To: "'Sean Turner'" <sean@sn3rd.com>, "'Alvaro Retana \(aretana\)'" <aretana@cisco.com>
Cc: <idr@ietf.org>, <draft-ietf-sidr-bgpsec-protocol@ietf.org>, <sidrops@ietf.org>, "'Matthew Lepinski'" <mlepinski@ncf.edu>, <sidr-chairs@ietf.org>, <sidr@ietf.org>
References: <65677770-43DB-4CE0-8E81-B35B9A82DF6F@cisco.com> <CA++NScEB1=TswjnszJm8_kghE2n8MX9gyDPePRsqqNALKyA6=g@mail.gmail.com> <36894BDC-01FC-41A5-B7B8-BC91204AE1D2@cisco.com> <EE8D4558-4EF4-43B3-AA65-B22FFCAF72E3@sn3rd.com>
In-Reply-To: <EE8D4558-4EF4-43B3-AA65-B22FFCAF72E3@sn3rd.com>
Date: Wed, 5 Apr 2017 11:01:18 -0400
Message-ID: <010301d2ae1d$7da5ace0$78f106a0$@ndzh.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQLdsGeZpjPoefLB4jQRysFxTsKF4wJc5AG5Anj93pIBwuVnDp9sE14w
Content-Language: en-us
X-Authenticated-User: skh@ndzh.com 
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/x-u9RvO_wvz2ojUQ5zt36NoMr4c>
Subject: Re: [Idr] [sidr] BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Apr 2017 15:06:27 -0000

<individual contributor, RFC4271 co-author> 
Seems reasonable to me. 

Sue Hares 

-----Original Message-----
From: sidr [mailto:sidr-bounces@ietf.org] On Behalf Of Sean Turner
Sent: Wednesday, April 5, 2017 10:49 AM
To: Alvaro Retana (aretana)
Cc: idr@ietf.org; draft-ietf-sidr-bgpsec-protocol@ietf.org;
sidrops@ietf.org; Matthew Lepinski; sidr-chairs@ietf.org; sidr@ietf.org
Subject: Re: [sidr] BGPsec without Extended Messages
(draft-ietf-sidr-bgpsec-protocol)


> On Apr 4, 2017, at 13:18, Alvaro Retana (aretana) <aretana@cisco.com>
wrote:
> 
> To me, the main purpose of changing the BGPsec spec is to depend on
whatever BGP does, and not on a future extension that may or may not be in
the form it is today.  However, if we keep the reference to the known
standard (rfc4271), then we should not have to update this document because
we would just inherit whatever BGP does.

This sound reasonable to me.

spt
_______________________________________________
sidr mailing list
sidr@ietf.org
https://www.ietf.org/mailman/listinfo/sidr


From nobody Thu Apr  6 19:44:58 2017
Return-Path: <chen.ran@zte.com.cn>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B783E1289B0 for <idr@ietfa.amsl.com>; Thu,  6 Apr 2017 19:44:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zXWU1PiHZnnB for <idr@ietfa.amsl.com>; Thu,  6 Apr 2017 19:44:47 -0700 (PDT)
Received: from mxhk.zte.com.cn (mxhk.zte.com.cn [63.217.80.70]) by ietfa.amsl.com (Postfix) with ESMTP id 74DA91286B1 for <idr@ietf.org>; Thu,  6 Apr 2017 19:44:45 -0700 (PDT)
X-scanvirus: By SEG_CYREN AntiVirus Engine
X-scanresult: CLEAN
X-MAILFROM: <chen.ran@zte.com.cn>
X-RCPTTO: <idr@ietf.org>
X-FROMIP: 192.168.168.120
X-SEG-Scaned: 1
X-Received: unknown,192.168.168.120,20170407103651
Received: from unknown (HELO out1.zte.com.cn) (192.168.168.120) by localhost with SMTP; 7 Apr 2017 02:36:51 -0000
X-scanvirus: By SEG_CYREN AntiVirus Engine
X-scanresult: CLEAN
X-MAILFROM: <chen.ran@zte.com.cn>
X-RCPTTO: <idr@ietf.org>
X-FROMIP: 10.30.3.20
X-SEG-Scaned: 1
X-Received: unknown,10.30.3.20,20170407103756
Received: from unknown (HELO mse01.zte.com.cn) (10.30.3.20) by localhost with (AES256-SHA encrypted) SMTP; 7 Apr 2017 02:37:56 -0000
Received: from notes_smtp.zte.com.cn ([10.30.1.239]) by mse01.zte.com.cn with ESMTP id v372iRrH079237; Fri, 7 Apr 2017 10:44:27 +0800 (GMT-8) (envelope-from chen.ran@zte.com.cn)
Received: from njxapp03.zte.com.cn ([10.41.132.202]) by njhub02.zte.com.cn (IBM Domino Release 9.0.1FP5) with SMTP id 2017040710442496-252913 ; Fri, 7 Apr 2017 10:44:24 +0800 
Received: from mapi (njxapp05[null]) by mapi (Zmail) with MAPI id mid203; Fri, 7 Apr 2017 10:44:27 +0800 (CST)
Date: Fri, 7 Apr 2017 10:44:27 +0800 (CST)
X-Zmail-TransId: 2afd58e6fd0b2d2-7a681
X-Mailer: Zmail v1.0
Message-ID: <201704071044279565138@zte.com.cn>
Mime-Version: 1.0
From: <chen.ran@zte.com.cn>
To: <bier@ietf.org>, <idr@ietf.org>
X-MIMETrack: Itemize by SMTP Server on NJHUB02/server/zte_ltd(Release 9.0.1FP5|November 22, 2015) at 2017/04/07 10:44:24, Serialize by Router on notes_smtp/zte_ltd(Release 8.5.3FP6|November 21, 2013) at 2017-04-07 10:44:27, Serialize complete at 2017-04-07 10:44:27
X-TNEFEvaluated: 1
Content-Type: multipart/mixed; boundary="=====_001_next====="
X-MAIL: mse01.zte.com.cn v372iRrH079237
X-HQIP: 127.0.0.1
X-HQIP: 127.0.0.1
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/T8OZJUpy-X8srupQst9VLez7Itk>
Subject: Re: [Idr]  =?utf-8?q?=5BBier=5D_I-D_Action=3A_draft-ietf-bier-bgp-ls-?= =?utf-8?q?bier-ext-00=2Etxt?=
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Apr 2017 02:44:51 -0000

--=====_001_next=====
Content-Type: multipart/related;
	boundary="=====_002_next====="


--=====_002_next=====
Content-Type: multipart/alternative;
	boundary="=====_003_next====="


--=====_003_next=====
Content-Transfer-Encoding: base64 
Content-Type: text/plain;
	charset="UTF-8"
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--=====_003_next=====
Content-Transfer-Encoding: base64
Content-Type: text/html ;
	charset="UTF-8"
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--=====_003_next=====--

--=====_002_next=====--

--=====_001_next=====--




From nobody Sun Apr  9 11:20:51 2017
Return-Path: <szhong@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10337127599 for <idr@ietfa.amsl.com>; Sun,  9 Apr 2017 11:20:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.921
X-Spam-Level: 
X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sZFgrLDfrLqp for <idr@ietfa.amsl.com>; Sun,  9 Apr 2017 11:20:47 -0700 (PDT)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0103.outbound.protection.outlook.com [104.47.37.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 768061243F6 for <idr@ietf.org>; Sun,  9 Apr 2017 11:20:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=FIbMy3vothtuvlnj4IQbYyj/IiGp7TpCQJAA1Vcp2S4=; b=UTiwOqJwr85EOiea2Xu0k4Iuzm+Z3l89PM6UtB03hNC4kO5OmseRO5buFZTMu9TsK8udCLQ/JTpL68O8XNP9sjz4+BvP3O/ARGLZhx2Izb9dzBIOmclxF3876q3XGgNw02vf0XrrDAMKam1H5bu7jWcSN4SnYmkOPqeKhZj+MnM=
Received: from CY4PR05MB2886.namprd05.prod.outlook.com (10.169.183.20) by CY4PR05MB2887.namprd05.prod.outlook.com (10.169.183.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.5; Sun, 9 Apr 2017 18:20:46 +0000
Received: from CY4PR05MB2886.namprd05.prod.outlook.com ([10.169.183.20]) by CY4PR05MB2886.namprd05.prod.outlook.com ([10.169.183.20]) with mapi id 15.01.1034.007; Sun, 9 Apr 2017 18:20:46 +0000
From: Simon Zhong <szhong@juniper.net>
To: "idr@ietf.org" <idr@ietf.org>
Thread-Topic: SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-routing-ext-01
Thread-Index: AdKxXgD4Cpf4ePb3QmGGH9sXHoVJLw==
Date: Sun, 9 Apr 2017 18:20:46 +0000
Message-ID: <CY4PR05MB28860927E141274AFB83BB7ED30E0@CY4PR05MB2886.namprd05.prod.outlook.com>
Accept-Language: en-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net;
x-originating-ip: [66.129.241.11]
x-microsoft-exchange-diagnostics: 1; CY4PR05MB2887; 7:P/CmJaXokB/wqRqb1fMQkOhqE44WfCPUDipC+gdSeCgxupemjhN1Rj8dJKQI4mHoO7yeA6a4OAOtCSaLGI0V1Nu1dNKN/RfKukqjufpfzqySlR5gUog04Nj7Dm5w3wL3u4OsyrR7tbwD1Y8hZ7573T9CtBmVrVF2unaA+Tokmo01oiaGmaFX88dFjsd8anCjFWIdo4xqJB2f0EwWx9YoBzRs3lG6MhPZlp4zsvfZ8p9ervOMe28NyAV6b71vTkPBy/H3KIgizNh9/afKZrD2r7nbCVP3AaASvc0yj2M0Irx1KXjlFKyRfB2yOlM0tTEaoMa0NxIk/cERUEqaQ8yFPg==
x-ms-office365-filtering-correlation-id: ad39ea5f-201a-46e0-84d9-08d47f752434
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081)(201702281549075); SRVR:CY4PR05MB2887; 
x-microsoft-antispam-prvs: <CY4PR05MB28878E50C6F8CE74FAE5C326D30E0@CY4PR05MB2887.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(6055026)(6041248)(20161123564025)(20161123560025)(20161123555025)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(6072148); SRVR:CY4PR05MB2887; BCL:0; PCL:0; RULEID:; SRVR:CY4PR05MB2887; 
x-forefront-prvs: 02723F29C4
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39410400002)(39400400002)(39450400003)(39840400002)(39850400002)(39860400002)(5640700003)(74316002)(102836003)(6116002)(3280700002)(3846002)(3660700001)(2501003)(38730400002)(305945005)(110136004)(230783001)(7736002)(6436002)(8676002)(25786009)(2906002)(33656002)(86362001)(1730700003)(81166006)(77096006)(6506006)(66066001)(6306002)(8936002)(9686003)(966004)(53936002)(2351001)(99286003)(122556002)(7696004)(54356999)(189998001)(2900100001)(55016002)(6916009)(5660300001)(50986999); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR05MB2887; H:CY4PR05MB2886.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY4PR05MB28860927E141274AFB83BB7ED30E0CY4PR05MB2886namp_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2017 18:20:46.0784 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR05MB2887
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/FKtWFjKd8PQ3y5z3y8L6Tjqe5ZE>
Subject: [Idr] SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-routing-ext-01
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 09 Apr 2017 18:20:49 -0000

--_000_CY4PR05MB28860927E141274AFB83BB7ED30E0CY4PR05MB2886namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi,

I'm working on Wireshark bgp dissector and following description confuses m=
e.

2.1.1.  SR-Capabilities TLV

   The SR Capabilities sub-TLV has following format:
......
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                  Range Size                   |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   //                SID/Label Sub-TLV (variable)                 //
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

This implies that there's one "Range Size" and one or more "SID/Lable Sub-T=
LV), however later in this section, it says:

     One or more entries, each of which have the following format:

         Range Size: 3 octet value indicating the number of labels in
         the range.

         SID/Label sub-TLV (as defined in Section 2.3.7.2).

Which sounds like one or more "Range Size" + "SID/Lable sub-TLV" combo are =
allowed.

The same applies to SR Local Block TLV as well.

So what's the intended behaviour? Thanks.

/Simon


--_000_CY4PR05MB28860927E141274AFB83BB7ED30E0CY4PR05MB2886namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left:=
 #800000 2px solid; } --></style>
</head>
<body>
<font face=3D"DengXian" size=3D"2"><span style=3D"font-size:10pt;">
<div>Hi,</div>
<div>&nbsp;</div>
<div>I&#8217;m working on Wireshark bgp dissector and following description=
 confuses me.</div>
<div><font face=3D"Times New Roman" size=3D"2"><span style=3D"font-size:11p=
t;">&nbsp;</span></font></div>
<div><font face=3D"Courier New">2.1.1.&nbsp; SR-Capabilities TLV</font></di=
v>
<div><font face=3D"Courier New">&nbsp;</font></div>
<div><font face=3D"Courier New">&nbsp;&nbsp; The SR Capabilities sub-TLV ha=
s following format:</font></div>
<div><font face=3D"Calibri" size=3D"2"><span style=3D"font-size:11pt;">&#82=
30;&#8230;</span></font></div>
<div><font face=3D"Courier New">&nbsp;&nbsp; &#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;</font></div>
<div><font face=3D"Courier New">&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; R=
ange Size&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |</font></div>
<div><font face=3D"Courier New">&nbsp;&nbsp; &#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;</font></div>
<div><font face=3D"Courier New">&nbsp;&nbsp; //&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SID/Label Su=
b-TLV (variable)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; //</font></div>
<div><font face=3D"Courier New">&nbsp;&nbsp; &#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;</font></div>
<div><font face=3D"Times New Roman" size=3D"2"><span style=3D"font-size:11p=
t;">&nbsp;</span></font></div>
<div><font face=3D"Calibri" size=3D"2"><span style=3D"font-size:11pt;">This=
 implies that there&#8217;s one &#8220;Range Size&#8221; and one or more &#=
8220;SID/Lable Sub-TLV), however later in this section, it says:</span></fo=
nt></div>
<div><font face=3D"Times New Roman" size=3D"2"><span style=3D"font-size:11p=
t;">&nbsp;</span></font></div>
<div><font face=3D"Courier New">&nbsp;&nbsp;&nbsp;&nbsp; One or more entrie=
s, each of which have the following format:</font></div>
<div><font face=3D"Courier New">&nbsp;</font></div>
<div><font face=3D"Courier New">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp; Range Size: 3 octet value indicating the number of labels in</font></=
div>
<div><font face=3D"Courier New">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp; the range.</font></div>
<div><font face=3D"Courier New">&nbsp;</font></div>
<div><font face=3D"Courier New">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp; SID/Label sub-TLV (as defined in Section 2.3.7.2).</font></div>
<div><font face=3D"Times New Roman" size=3D"2"><span style=3D"font-size:11p=
t;">&nbsp;</span></font></div>
<div><font face=3D"Calibri" size=3D"2"><span style=3D"font-size:11pt;">Whic=
h sounds like one or more &#8220;Range Size&#8221; &#43; &#8220;SID/Lable s=
ub-TLV&#8221; combo are allowed.</span></font></div>
<div><font face=3D"Times New Roman" size=3D"2"><span style=3D"font-size:11p=
t;">&nbsp;</span></font></div>
<div><font face=3D"Calibri" size=3D"2"><span style=3D"font-size:11pt;">The =
same applies to SR Local Block TLV as well.</span></font></div>
<div><font face=3D"Times New Roman" size=3D"2"><span style=3D"font-size:11p=
t;">&nbsp;</span></font></div>
<div><font face=3D"Calibri" size=3D"2"><span style=3D"font-size:11pt;">So w=
hat&#8217;s the intended behaviour? Thanks.</span></font></div>
<div><font face=3D"Calibri" size=3D"2"><span style=3D"font-size:11pt;">&nbs=
p;</span></font></div>
<div><font face=3D"Calibri" size=3D"2"><span style=3D"font-size:11pt;">/Sim=
on</span></font></div>
<div><font face=3D"Times New Roman" size=3D"2"><span style=3D"font-size:11p=
t;">&nbsp;</span></font></div>
</span></font>
</body>
</html>

--_000_CY4PR05MB28860927E141274AFB83BB7ED30E0CY4PR05MB2886namp_--


From nobody Mon Apr 10 08:25:51 2017
Return-Path: <ketant@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0350F129537 for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 08:25:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XvLO3-k5HETy for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 08:25:47 -0700 (PDT)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F48D129501 for <idr@ietf.org>; Mon, 10 Apr 2017 08:25:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=13538; q=dns/txt; s=iport; t=1491837946; x=1493047546; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=N1Q0ve+mvod555gCl4bcQP1UmooBTkJBaQ/gI9osVsM=; b=Sq/ua4tXbOHNRs4kZPvBhxi4xS/iLdnHZNfmtazCte1PPOxn5Lt56NsX +o8DFlsYfkg4TmHoe2iWgaYd5HCLg7ZgTIJmjfKUxlP3nRLyPPGr5pbXj jd4O+IUMMrc9gNvUCW7h/yoh6oPMKmOFXSgbsW4yVmgYZHY8nXFsOSbKu s=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BDAQAAo+tY/40NJK1dGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBgm5lYYELB41ykUeQI4U0gg+GJAKDYD8YAQIBAQEBAQEBayiFFQEBAQE?= =?us-ascii?q?DLVwCAQgOAwQBASgHMhQJCAEBBAESCIoHqyuKYwEBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAR2GUIRwhQyFLwWcewGST5FKk38BHzg+R1sVhRwcgWN1iFKBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,182,1488844800";  d="scan'208,217";a="409124611"
Received: from alln-core-8.cisco.com ([173.36.13.141]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 10 Apr 2017 15:25:46 +0000
Received: from XCH-ALN-009.cisco.com (xch-aln-009.cisco.com [173.36.7.19]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v3AFPkYt013495 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 10 Apr 2017 15:25:46 GMT
Received: from xch-aln-008.cisco.com (173.36.7.18) by XCH-ALN-009.cisco.com (173.36.7.19) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 10 Apr 2017 10:25:45 -0500
Received: from xch-aln-008.cisco.com ([173.36.7.18]) by XCH-ALN-008.cisco.com ([173.36.7.18]) with mapi id 15.00.1210.000; Mon, 10 Apr 2017 10:25:45 -0500
From: "Ketan Talaulikar Talaulikar (ketant)" <ketant@cisco.com>
To: Simon Zhong <szhong@juniper.net>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-routing-ext-01
Thread-Index: AdKxXgD4Cpf4ePb3QmGGH9sXHoVJLwAsG3Pw
Date: Mon, 10 Apr 2017 15:25:45 +0000
Message-ID: <33d6b2c1e8164ae6abd36010fce175bb@XCH-ALN-008.cisco.com>
References: <CY4PR05MB28860927E141274AFB83BB7ED30E0@CY4PR05MB2886.namprd05.prod.outlook.com>
In-Reply-To: <CY4PR05MB28860927E141274AFB83BB7ED30E0@CY4PR05MB2886.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.154.160.39]
Content-Type: multipart/alternative; boundary="_000_33d6b2c1e8164ae6abd36010fce175bbXCHALN008ciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/jdsqQWlyL0RltF0HPo0M4nPU_FA>
Subject: Re: [Idr] SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-routing-ext-01
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Apr 2017 15:25:49 -0000

--_000_33d6b2c1e8164ae6abd36010fce175bbXCHALN008ciscocom_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi Simon,

The pair "Range Size + SID/Label sub-TLV" would be repeated if there are mo=
re than one SRGB/SRLB ranges advertised by a node.

Thanks,
Ketan

From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Simon Zhong
Sent: 09 April 2017 11:21
To: idr@ietf.org
Subject: [Idr] SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-routing=
-ext-01

Hi,

I'm working on Wireshark bgp dissector and following description confuses m=
e.

2.1.1.  SR-Capabilities TLV

   The SR Capabilities sub-TLV has following format:
......
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                  Range Size                   |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   //                SID/Label Sub-TLV (variable)                 //
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

This implies that there's one "Range Size" and one or more "SID/Lable Sub-T=
LV), however later in this section, it says:

     One or more entries, each of which have the following format:

         Range Size: 3 octet value indicating the number of labels in
         the range.

         SID/Label sub-TLV (as defined in Section 2.3.7.2).

Which sounds like one or more "Range Size" + "SID/Lable sub-TLV" combo are =
allowed.

The same applies to SR Local Block TLV as well.

So what's the intended behaviour? Thanks.

/Simon


--_000_33d6b2c1e8164ae6abd36010fce175bbXCHALN008ciscocom_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:DengXian;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
p.emailquote, li.emailquote, div.emailquote
	{mso-style-name:emailquote;
	mso-margin-top-alt:auto;
	margin-right:0cm;
	mso-margin-bottom-alt:auto;
	margin-left:1.0pt;
	border:none;
	padding:0cm;
	font-size:12.0pt;
	font-family:"Times New Roman",serif;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-IN" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN-US">Hi Simon,<=
o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p>&nbsp=
;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN-US">The pair &=
#8220;Range Size &#43; SID/Label sub-TLV&#8221; would be repeated if there =
are more than one SRGB/SRLB ranges advertised by a node.<o:p></o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p>&nbsp=
;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN-US">Thanks,<o:=
p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN-US">Ketan<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p>&nbsp=
;</o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm =
0cm 0cm">
<p class=3D"MsoNormal"><b><span lang=3D"EN-US" style=3D"font-size:11.0pt;fo=
nt-family:&quot;Calibri&quot;,sans-serif">From:</span></b><span lang=3D"EN-=
US" style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,sans-serif"> =
Idr [mailto:idr-bounces@ietf.org]
<b>On Behalf Of </b>Simon Zhong<br>
<b>Sent:</b> 09 April 2017 11:21<br>
<b>To:</b> idr@ietf.org<br>
<b>Subject:</b> [Idr] SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-=
routing-ext-01<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:DengXian=
">Hi,<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:DengXian=
">&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:DengXian=
">I&#8217;m working on Wireshark bgp dissector and following description co=
nfuses me.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">&nbsp;</span><span =
style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">2.1.1.&nbsp; SR-Capabilities TLV</span><span style=3D"font=
-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;</span><span style=3D"font-size:10.0pt;font-family:D=
engXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;&nbsp; The SR Capabilities sub-TLV has following for=
mat:</span><span style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p=
></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">&#8230;&#8230;</span><span style=3D"font-size:10.0p=
t;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;&nbsp; &#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;-&#43;-&#43;</span><span style=3D"font-size:10.0pt;font-fa=
mily:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Range Size&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp; |</span><span style=3D"font-size:10.0pt;font-fa=
mily:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;&nbsp; &#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;</span><span style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p><=
/span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;&nbsp; //&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SID/Label Sub-TLV (variable=
)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp; //</span><span style=3D"font-size:10.0pt;font-family=
:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;&nbsp; &#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;</span><span style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p><=
/span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">&nbsp;</span><span =
style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">This implies that there&#8217;s one &#8220;Range Si=
ze&#8221; and one or more &#8220;SID/Lable Sub-TLV), however later in this =
section, it says:</span><span style=3D"font-size:10.0pt;font-family:DengXia=
n"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">&nbsp;</span><span =
style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;&nbsp;&nbsp;&nbsp; One or more entries, each of whic=
h have the following format:</span><span style=3D"font-size:10.0pt;font-fam=
ily:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;</span><span style=3D"font-size:10.0pt;font-family:D=
engXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Range Siz=
e: 3 octet value indicating the number of labels in</span><span style=3D"fo=
nt-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; the range=
.</span><span style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></=
span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;</span><span style=3D"font-size:10.0pt;font-family:D=
engXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SID/Label=
 sub-TLV (as defined in Section 2.3.7.2).</span><span style=3D"font-size:10=
.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">&nbsp;</span><span =
style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">Which sounds like one or more &#8220;Range Size&#82=
21; &#43; &#8220;SID/Lable sub-TLV&#8221; combo are allowed.</span><span st=
yle=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">&nbsp;</span><span =
style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">The same applies to SR Local Block TLV as well.</sp=
an><span style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span>=
</p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">&nbsp;</span><span =
style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">So what&#8217;s the intended behaviour? Thanks.</sp=
an><span style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span>=
</p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">&nbsp;</span><span style=3D"font-size:10.0pt;font-f=
amily:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">/Simon</span><span style=3D"font-size:10.0pt;font-f=
amily:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">&nbsp;</span><span =
style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
</div>
</body>
</html>

--_000_33d6b2c1e8164ae6abd36010fce175bbXCHALN008ciscocom_--


From nobody Mon Apr 10 08:30:41 2017
Return-Path: <ketant@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D7FD127B5A for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 08:30:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QT3DTgAivRuu for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 08:30:37 -0700 (PDT)
Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7639612953D for <idr@ietf.org>; Mon, 10 Apr 2017 08:30:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=25142; q=dns/txt; s=iport; t=1491838237; x=1493047837; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=ceKtNsNV0Wj03D5kTPCxyQKJ7pybFojxsxSX+1n15t4=; b=CjLUAnFMIgjfYBtV0Xat+rn3EDats5oXHyEsMFzfO5rGA2b+L52xxn5/ +IEIFSt9JG09bCSFZmog8+vbYGJcmGYxr+e65tZk41HdC+Q3FHvgxJ1Hz 5cvj816IEhvxXbsN6TRTP0IBWU6T6TWmRB/4ix7P6IbXyvtXgmscjSXaL 8=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DIAQAYpOtY/4cNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm5lYYELB4NfihORR4gajT2CDyEBDIV2AhqDRj8YAQIBAQEBAQE?= =?us-ascii?q?BayiFFQEBAQEDAQEhCkEJAhACAQgRBAEBKAMCAgIfBgsUCQgCBAENBQiJbwMVD?= =?us-ascii?q?qh5giaHKQ2DLQEBAQEBAQEBAQEBAQEBAQEBAQEBAR2GUIRwglFGgVYfCIJIgl8?= =?us-ascii?q?Fj2qGNoYgOwGGf4cchDSCCFWEWYoUiwCIfwEPEDiBBVsVGCmEWxwZgUp1AYhRg?= =?us-ascii?q?Q0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,182,1488844800";  d="scan'208,217";a="229337139"
Received: from alln-core-2.cisco.com ([173.36.13.135]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 10 Apr 2017 15:30:36 +0000
Received: from XCH-RCD-006.cisco.com (xch-rcd-006.cisco.com [173.37.102.16]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v3AFUaEP028627 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 10 Apr 2017 15:30:36 GMT
Received: from xch-aln-008.cisco.com (173.36.7.18) by XCH-RCD-006.cisco.com (173.37.102.16) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 10 Apr 2017 10:30:35 -0500
Received: from xch-aln-008.cisco.com ([173.36.7.18]) by XCH-ALN-008.cisco.com ([173.36.7.18]) with mapi id 15.00.1210.000; Mon, 10 Apr 2017 10:30:35 -0500
From: "Ketan Talaulikar Talaulikar (ketant)" <ketant@cisco.com>
To: Jeff Tantsura <jefftant.ietf@gmail.com>, Robert Raszuk <robert@raszuk.net>
CC: idr wg <idr@ietf.org>, "Van De Velde, Gunter (Nokia - BE)" <gunter.van_de_velde@nokia.com>
Thread-Topic: [Idr] FW: New Version Notification for draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt
Thread-Index: AQHSlC44kCQCnRFeakuCItibeIgUn6GEn0gAgAAjBoCAAF/gAIAAptWAgDks9QA=
Date: Mon, 10 Apr 2017 15:30:35 +0000
Message-ID: <de730d8327314fa6bfa375c76c8fd116@XCH-ALN-008.cisco.com>
References: <148854728632.10105.590253116263033290.idtracker@ietfa.amsl.com> <4BF12F22-F605-406F-9CD8-ACE350B981D0@alcatel-lucent.com> <CA+b+ERkNLHPN23TTC2=Cb-GKDOkFysHca9N3iwopipHPFhLjyA@mail.gmail.com> <CAFAzdPW-KiGdt-Ndtpf4v6TVDPPA2eTaVjKEPkq_s4SPan5oTg@mail.gmail.com> <CA+b+ERmyFNOv0HpoW98ecvbKg0T05pYL6uFZ7Me4nW5n0V+S6g@mail.gmail.com> <19BCC3A8-48A7-4838-A999-5B304C0C7EED@gmail.com>
In-Reply-To: <19BCC3A8-48A7-4838-A999-5B304C0C7EED@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.154.160.39]
Content-Type: multipart/alternative; boundary="_000_de730d8327314fa6bfa375c76c8fd116XCHALN008ciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/ExKY7jjnXmU1ABKYOrNzmrKDsYg>
Subject: Re: [Idr] FW: New Version Notification for draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Apr 2017 15:30:40 -0000

--_000_de730d8327314fa6bfa375c76c8fd116XCHALN008ciscocom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

SGkgSmVmZi9BdXRob3JzLA0KDQpDb3VsZCB3ZSBnZXQgdGhpcyBNU0QgQkdQLUxTIGRyYWZ0IHBv
bGxlZCBmb3IgSURSIFdHIGFkb3B0aW9uPyBUaGUgY29ycmVzcG9uZGluZyBJR1AgZHJhZnRzIGFy
ZSBhbHJlYWR5IHJlc3BlY3RpdmUgV0cgZG9jdW1lbnRzLg0KDQpUaGFua3MsDQpLZXRhbg0KDQpG
cm9tOiBJZHIgW21haWx0bzppZHItYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEplZmYg
VGFudHN1cmENClNlbnQ6IDA0IE1hcmNoIDIwMTcgMTY6MjENClRvOiBSb2JlcnQgUmFzenVrIDxy
b2JlcnRAcmFzenVrLm5ldD4NCkNjOiBpZHIgd2cgPGlkckBpZXRmLm9yZz47IFZhbiBEZSBWZWxk
ZSwgR3VudGVyIChOb2tpYSAtIEJFKSA8Z3VudGVyLnZhbl9kZV92ZWxkZUBub2tpYS5jb20+DQpT
dWJqZWN0OiBSZTogW0lkcl0gRlc6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQt
dmFuZGV2ZWxkZS1pZHItYmdwLWxzLXNlZ21lbnQtcm91dGluZy1ybGQtMDEudHh0DQoNClJvYmVy
dCwNCg0KUGxlYXNlIHRha2UgYSBsb29rIGF0IDAyIGlzaXMgZHJhZnQgcHVibGlzaGVkIHllc3Rl
cmRheSwgd2UgaGF2ZSBhZGRlZCB0eXBlIGZsYWcgdGhhdCBkZWZpbmVzIHRoZSB0eXBlIG9mIGEg
U0lEIGFuZCBjb3VsZCBiZSB1c2VkIHdpdGggdjYgZGF0YXBsYW5lLg0KVGhlIGxpbWl0YXRpb25z
IHdydCBsYWJlbCBvcGVyYXRpb25zIGFyZSB3ZWxsIHVuZGVyc3Rvb2QgYWNyb3NzIGJvdGggY3Vz
dG9tIGFuZCBtZXJjaGFudCAgc2lsaWNvbiBhbmQgZnJvbSB1c2UgY2FzZSBwcm9zcGVjdGl2ZSBo
YWQgdG8gYmUgYWRkcmVzc2VkIGZpcnN0Lg0KVjYgZGF0YXBsYW5lIHdpbGwgYmUgYWRkZWQuDQoN
ClBsZWFzZSBsZXQgbWUga25vdyBpZiB0aGlzIGFuc3dlcnMgeW91ciBxdWVzdGlvbnMgYW5kIGFk
ZHJlc3NlcyBjb25jZXJucy4NCg0KUmVnYXJkcywNCkplZmYNCg0KT24gTWFyIDQsIDIwMTcsIGF0
IDA2OjI0LCBSb2JlcnQgUmFzenVrIDxyb2JlcnRAcmFzenVrLm5ldDxtYWlsdG86cm9iZXJ0QHJh
c3p1ay5uZXQ+PiB3cm90ZToNCkplZmYsDQoNCk1TRCBkcmFmdHMgKHlvdXJzIGludmx1ZGVkKSB0
YWxrcyBhYm91dCBsYWJlbHMgd2hpbGUgTVNEIGFzIHN1Y2ggc2VlbXMgdG8gYmUgZGVmaW5lZCBh
cyBtYXhpbXVtIFNJRCBkZXB0aC4NCg0KSW4gU1J2NiBTSUQgaXMgKk5PVCogYSBsYWJlbC4gU28g
d2h5IG5vdCB0byBkZWZpbmUgTVNEIHByb3Blcmx5IGFjcm9zcyBhbGwgU1Igc2NlbmFyaW9zPw0K
DQpBcmUgd2UgZ29pbmcgdG8gaGF2ZSBub3cgbmV3IHpvbyBvZiBkcmFmdHMgbm93IGRlZmluaW5n
IE1TRCBmb3IgU1J2NiB2cyBjdXJyZW50IGRvY3MganVzdCBkZWZpbmluZyBNU0QgZm9yIFNSLU1Q
TFMgPw0KDQpDaGVlcnMsDQpSLg0KDQoNCg0KT24gTWFyIDQsIDIwMTcgOTo0MSBBTSwgIkplZmYg
VGFudHN1cmEiIDxqZWZmdGFudC5pZXRmQGdtYWlsLmNvbTxtYWlsdG86amVmZnRhbnQuaWV0ZkBn
bWFpbC5jb20+PiB3cm90ZToNClJvYmVydCwNCg0KVGhhdCdzIGRvbmUgaW4gTVNEIGRyYWZ0cy4N
CkluIHRoZSByZWNlbnRseSBwdWJsaXNoZWQgaXNpcyBkcmFmdCB3ZSBoYXZlIGFsc28gaW50cm9k
dWNlZCBNU0QgdHlwZSBmbGFnIHRoYXQgd291bGQgYmUgdXNlZCB0byBzaWduYWwgZGlmZmVyZW50
IHR5cGVzIG9mIFNJRCdzOiByZWNpcmN1bGF0ZWQgbGFiZWxzLCBFTCdzLCBldGMNCg0KQ2hlZXJz
LA0KSmVmZg0KDQpPbiBGcmksIE1hciAzLCAyMDE3IGF0IDIyOjM1IFJvYmVydCBSYXN6dWsgPHJv
YmVydEByYXN6dWsubmV0PG1haWx0bzpyb2JlcnRAcmFzenVrLm5ldD4+IHdyb3RlOg0KSGV5IEd1
bnRlciwNCg0KR29vZCBwcm9wb3NhbCBob3dldmVyIHdoeSBkbyB5b3Ugb25seSB0aGluayBhYm91
dCBsYWJlbHMgPw0KDQpTZXJpb3VzbHkgaWYgdGhpcyBpcyB0byBtb3ZlIGZ3ZCBsZXQncyBhZGQg
YWJpbGl0eSB0byBzaWduYWwgYWxzbyBmb2xsb3dpbmcgZWxlbWVudHM6DQoNCiogYWJpbGl0eSB0
byBwdW50IFNSLU1QTFMgdG8gbG9jYWwgQ1BVIChzbG93IHBhdGgpIHdoZW4gbm90IGhhbmRsZWQg
aW4gaGFyZHdhcmUgKHBlciBub2RlIGJhc2lzKQ0KDQoqIGFkZCBzaWduYWxsaW5nIGZvciBudW1i
ZXIgb2YgU1J2NiBTUkhzIHN1cHBvcnRlZCBwZXIgbm9kZS9wZXIgTEMNCg0KKiBhZGQgc2lnbmFs
bGluZyBmb3IgZGVwdGggcGVyIFNSSCBhbmQgdG90YWwgb2YgU0lEcyBzdXBwb3J0ZWQgcGVyIG5v
ZGUvcGVyIExDDQoNCiogc2lnbmFsIGFiaWxpdHkgdG8gcHVudCB0byBzbG93IHBhdGggb3Igbm90
IGZvciBsb25nZXIgdGhlbiBzdXBwb3J0IFNSSCBzdGFjayBvciBudW1iZXIgb2YgU0lEcyBpbiBl
YWNoIFNSSCBzdHJ1Y3R1cmUuDQoNCkNoZWVycywNClJvYmVydC4NCg0KDQpPbiBGcmksIE1hciAz
LCAyMDE3IGF0IDM6NTUgUE0sIFZhbiBEZSBWZWxkZSwgR3VudGVyIChOb2tpYSAtIEJFKSA8Z3Vu
dGVyLnZhbl9kZV92ZWxkZUBub2tpYS5jb208bWFpbHRvOmd1bnRlci52YW5fZGVfdmVsZGVAbm9r
aWEuY29tPj4gd3JvdGU6DQpIZWFkcy11cOKApiBIYXBweSB0byBsZWFybiBmZWVkYmFjayBhbmQg
Y29tbWVudHMuDQoNClRoaXMgZHJhZnQgaXMgc2hvcnQgYW5kIGRlZmluZXMgdGhlIGF0dHJpYnV0
ZSB0byB1c2UgZm9yIEJHUC1MUyB0byBleHBvc2UgYQ0Kbm9kZSBSTEQgIlJlYWRhYmxlIExhYmVs
IERlcHRoIiB0byBhIGNlbnRyYWxpc2VkIGNvbnRyb2xsZXIgKFBDRS9TRE4pLg0KDQpHLw0KDQpP
biAwMy8wMy8yMDE3LCAxNDoyMSwgImludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86aW50
ZXJuZXQtZHJhZnRzQGlldGYub3JnPiIgPGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86
aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPj4gd3JvdGU6DQoNCg0KICAgIEEgbmV3IHZlcnNpb24g
b2YgSS1ELCBkcmFmdC12YW5kZXZlbGRlLWlkci1iZ3AtbHMtc2VnbWVudC1yb3V0aW5nLXJsZC0w
MS50eHQNCiAgICBoYXMgYmVlbiBzdWNjZXNzZnVsbHkgc3VibWl0dGVkIGJ5IEd1bnRlciBWYW4g
ZGUgVmVsZGUgYW5kIHBvc3RlZCB0byB0aGUNCiAgICBJRVRGIHJlcG9zaXRvcnkuDQoNCiAgICBO
YW1lOiAgICAgICAgICAgICAgIGRyYWZ0LXZhbmRldmVsZGUtaWRyLWJncC1scy1zZWdtZW50LXJv
dXRpbmctcmxkDQogICAgUmV2aXNpb246ICAgMDENCiAgICBUaXRsZTogICAgICAgICAgICAgIFNp
Z25hbGxpbmcgUkxEIHVzaW5nIEJHUC1MUw0KICAgIERvY3VtZW50IGRhdGU6ICAgICAgMjAxNy0w
My0wMw0KICAgIEdyb3VwOiAgICAgICAgICAgICAgSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQogICAg
UGFnZXM6ICAgICAgICAgICAgICA1DQogICAgVVJMOiAgICAgICAgICAgIGh0dHBzOi8vd3d3Lmll
dGYub3JnL2ludGVybmV0LWRyYWZ0cy9kcmFmdC12YW5kZXZlbGRlLWlkci1iZ3AtbHMtc2VnbWVu
dC1yb3V0aW5nLXJsZC0wMS50eHQNCiAgICBTdGF0dXM6ICAgICAgICAgaHR0cHM6Ly9kYXRhdHJh
Y2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtdmFuZGV2ZWxkZS1pZHItYmdwLWxzLXNlZ21lbnQtcm91
dGluZy1ybGQvDQogICAgSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt
bC9kcmFmdC12YW5kZXZlbGRlLWlkci1iZ3AtbHMtc2VnbWVudC1yb3V0aW5nLXJsZC0wMQ0KICAg
IERpZmY6ICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQt
dmFuZGV2ZWxkZS1pZHItYmdwLWxzLXNlZ21lbnQtcm91dGluZy1ybGQtMDENCg0KICAgIEFic3Ry
YWN0Og0KICAgICAgIFRoaXMgZG9jdW1lbnQgZGVmaW5lcyB0aGUgYXR0cmlidXRlIHRvIHVzZSBm
b3IgQkdQLUxTIHRvIGV4cG9zZSBhDQogICAgICAgbm9kZSBSTEQgIlJlYWRhYmxlIExhYmVsIERl
cHRoIiB0byBhIGNlbnRyYWxpc2VkIGNvbnRyb2xsZXIgKFBDRS8NCiAgICAgICBTRE4pLg0KDQoN
Cg0KDQoNCiAgICBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0
ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQogICAgdW50aWwgdGhlIGh0bWxpemVkIHZl
cnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZzxodHRwOi8vdG9v
bHMuaWV0Zi5vcmc+Lg0KDQogICAgVGhlIElFVEYgU2VjcmV0YXJpYXQNCg0KDQoNCl9fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpJZHIgbWFpbGluZyBsaXN0
DQpJZHJAaWV0Zi5vcmc8bWFpbHRvOklkckBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3Jn
L21haWxtYW4vbGlzdGluZm8vaWRyDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fDQpJZHIgbWFpbGluZyBsaXN0DQpJZHJAaWV0Zi5vcmc8bWFpbHRvOklk
ckBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaWRyDQo=

--_000_de730d8327314fa6bfa375c76c8fd116XCHALN008ciscocom_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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=

--_000_de730d8327314fa6bfa375c76c8fd116XCHALN008ciscocom_--


From nobody Mon Apr 10 09:10:30 2017
Return-Path: <jefftant.ietf@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5A031296C6 for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 09:10:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zT3VOs7xsLrr for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 09:10:25 -0700 (PDT)
Received: from mail-pf0-x243.google.com (mail-pf0-x243.google.com [IPv6:2607:f8b0:400e:c00::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E47D3128C81 for <idr@ietf.org>; Mon, 10 Apr 2017 09:10:23 -0700 (PDT)
Received: by mail-pf0-x243.google.com with SMTP id a188so1385904pfa.2 for <idr@ietf.org>; Mon, 10 Apr 2017 09:10:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=imloXI8B+N/ih08fSjZSR7Wug7Krd0hFzOlNQZivIsc=; b=Lgqu5kdpT3DwdTdjMX7wnAhzC6XmqwSMvJuCGL9raOLsa27flsl9+IQ6FW7EFXtbds /zgrpDeUgFx+Usfn1e3wM10HfXxky1vmG+LBILFM7hfeHCSmFPiQCggQtMQ9CczEmZvz jTum3iNY/RaND83Kz1T18sRhb2CWY7d/kaAHL5bWfaP5ERDyMlGJfQT3B4NInBGpm00U BCCYoJGYifB9N4DaNmVhB9sa5knXn6XqTggRz86kiGmgaO5Hc4wbt9nJBIvHj2Vbp9lk W84M7qobYiwVNOJ8i4+s/r0XOH5jFWmVjgBtKOH1Kgy8RFXeUgoLqRO/yXQlTbKOST50 5EYw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=imloXI8B+N/ih08fSjZSR7Wug7Krd0hFzOlNQZivIsc=; b=HOfTxHq5Lqhtn8VLyBtZUNDieZmwuXpu57FOj5Gi9UIvp4uStIntorjlfLh415ek5i 6ZAK94rjPGLrU16yQPVfGHb0ZBK9PRM6qIxc7Rg5t4KPlQfVWoPLY0qBYJzEkrsWy90k lqAdInZKmqshwm3Z5VD7AzQbcYsijBKA0jRvrzPpIFdDD7AuWxDDgFcm9H6sMy6ZMbUZ K1QPFUjHFo77JAayoUZ/jlz9IN7Tu2k39Zq6+KjRHBSmSqgz+4RMG0Mr8wBCMd8GIXna Uu9hliFujnCpCmUe58LkZgdF3olaUkY2PUhJsomKYf5BErfWFwESk0ta/pd8yzryutmw q9Qg==
X-Gm-Message-State: AFeK/H3IxFynOQck9dRl96p/emAFmHJYrxDOMXXVvtDLCmhwLBxLAbAgkzG+ypYewBG46g==
X-Received: by 10.98.11.218 with SMTP id 87mr54124530pfl.214.1491840623419; Mon, 10 Apr 2017 09:10:23 -0700 (PDT)
Received: from [192.168.255.106] (107-1-141-74-ip-static.hfc.comcastbusiness.net. [107.1.141.74]) by smtp.gmail.com with ESMTPSA id q7sm20694659pfj.24.2017.04.10.09.10.21 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 10 Apr 2017 09:10:22 -0700 (PDT)
User-Agent: Microsoft-MacOutlook/f.20.0.170309
Date: Mon, 10 Apr 2017 09:10:37 -0700
From: Jeff Tantsura <jefftant.ietf@gmail.com>
To: "Ketan Talaulikar Talaulikar (ketant)" <ketant@cisco.com>, Robert Raszuk <robert@raszuk.net>
CC: idr wg <idr@ietf.org>, "Van De Velde, Gunter (Nokia - BE)" <gunter.van_de_velde@nokia.com>
Message-ID: <92EB3AA9-005F-4502-B5BD-CF05A40A7867@gmail.com>
Thread-Topic: [Idr] FW: New Version Notification for draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt
References: <148854728632.10105.590253116263033290.idtracker@ietfa.amsl.com> <4BF12F22-F605-406F-9CD8-ACE350B981D0@alcatel-lucent.com> <CA+b+ERkNLHPN23TTC2=Cb-GKDOkFysHca9N3iwopipHPFhLjyA@mail.gmail.com> <CAFAzdPW-KiGdt-Ndtpf4v6TVDPPA2eTaVjKEPkq_s4SPan5oTg@mail.gmail.com> <CA+b+ERmyFNOv0HpoW98ecvbKg0T05pYL6uFZ7Me4nW5n0V+S6g@mail.gmail.com> <19BCC3A8-48A7-4838-A999-5B304C0C7EED@gmail.com> <de730d8327314fa6bfa375c76c8fd116@XCH-ALN-008.cisco.com>
In-Reply-To: <de730d8327314fa6bfa375c76c8fd116@XCH-ALN-008.cisco.com>
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3574660238_965366943"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/fFxlSW4lFQqY70mHujYv5YaH260>
Subject: Re: [Idr] FW: New Version Notification for draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Apr 2017 16:10:29 -0000

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3574660238_965366943
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

Hi Ketan,

=20

During my presentation in Chicago I have asked for adoption, I assume they =
would do so soon.

Wrt email topic =E2=80=93 please do not mix MSD documents with RLD ones.

=20

Thanks!

=20

Cheers,

Jeff

=20

=20

From: "Ketan Talaulikar Talaulikar (ketant)" <ketant@cisco.com>
Date: Monday, April 10, 2017 at 08:30
To: Jeff Tantsura <jefftant.ietf@gmail.com>, "robert@raszuk.net" <robert@ra=
szuk.net>
Cc: idr wg <idr@ietf.org>, "Van De Velde, Gunter (Nokia - BE)" <gunter.van_=
de_velde@nokia.com>
Subject: RE: [Idr] FW: New Version Notification for draft-vandevelde-idr-bg=
p-ls-segment-routing-rld-01.txt

=20

Hi Jeff/Authors,

=20

Could we get this MSD BGP-LS draft polled for IDR WG adoption? The correspo=
nding IGP drafts are already respective WG documents.

=20

Thanks,

Ketan

=20

From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Jeff Tantsura
Sent: 04 March 2017 16:21
To: Robert Raszuk <robert@raszuk.net>
Cc: idr wg <idr@ietf.org>; Van De Velde, Gunter (Nokia - BE) <gunter.van_de=
_velde@nokia.com>
Subject: Re: [Idr] FW: New Version Notification for draft-vandevelde-idr-bg=
p-ls-segment-routing-rld-01.txt

=20

Robert,

=20

Please take a look at 02 isis draft published yesterday, we have added type=
 flag that defines the type of a SID and could be used with v6 dataplane.

The limitations wrt label operations are well understood across both custom=
 and merchant  silicon and from use case prospective had to be addressed fir=
st.

V6 dataplane will be added.

=20

Please let me know if this answers your questions and addresses concerns.

=20

Regards,

Jeff


On Mar 4, 2017, at 06:24, Robert Raszuk <robert@raszuk.net> wrote:

Jeff,

=20

MSD drafts (yours invluded) talks about labels while MSD as such seems to b=
e defined as maximum SID depth.

=20

In SRv6 SID is *NOT* a label. So why not to define MSD properly across all =
SR scenarios?

=20

Are we going to have now new zoo of drafts now defining MSD for SRv6 vs cur=
rent docs just defining MSD for SR-MPLS ?

=20

Cheers,

R.

=20

=20

=20

On Mar 4, 2017 9:41 AM, "Jeff Tantsura" <jefftant.ietf@gmail.com> wrote:

Robert,

That's done in MSD drafts.
In the recently published isis draft we have also introduced MSD type flag =
that would be used to signal different types of SID's: recirculated labels, =
EL's, etc

=20

Cheers,

Jeff

=20

On Fri, Mar 3, 2017 at 22:35 Robert Raszuk <robert@raszuk.net> wrote:

Hey Gunter,

=20

Good proposal however why do you only think about labels ?

=20

Seriously if this is to move fwd let's add ability to signal also following=
 elements:

=20

* ability to punt SR-MPLS to local CPU (slow path) when not handled in hard=
ware (per node basis)

=20

* add signalling for number of SRv6 SRHs supported per node/per LC

=20

* add signalling for depth per SRH and total of SIDs supported per node/per=
 LC

=20

* signal ability to punt to slow path or not for longer then support SRH st=
ack or number of SIDs in each SRH structure.

=20

Cheers,
Robert.

=20

=20

On Fri, Mar 3, 2017 at 3:55 PM, Van De Velde, Gunter (Nokia - BE) <gunter.v=
an_de_velde@nokia.com> wrote:

Heads-up=E2=80=A6 Happy to learn feedback and comments.

This draft is short and defines the attribute to use for BGP-LS to expose a
node RLD "Readable Label Depth" to a centralised controller (PCE/SDN).

G/

On 03/03/2017, 14:21, "internet-drafts@ietf.org" <internet-drafts@ietf.org>=
 wrote:


    A new version of I-D, draft-vandevelde-idr-bgp-ls-segment-routing-rld-0=
1.txt
    has been successfully submitted by Gunter Van de Velde and posted to th=
e
    IETF repository.

    Name:               draft-vandevelde-idr-bgp-ls-segment-routing-rld
    Revision:   01
    Title:              Signalling RLD using BGP-LS
    Document date:      2017-03-03
    Group:              Individual Submission
    Pages:              5
    URL:            https://www.ietf.org/internet-drafts/draft-vandevelde-i=
dr-bgp-ls-segment-routing-rld-01.txt
    Status:         https://datatracker.ietf.org/doc/draft-vandevelde-idr-b=
gp-ls-segment-routing-rld/
    Htmlized:       https://tools.ietf.org/html/draft-vandevelde-idr-bgp-ls=
-segment-routing-rld-01
    Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-vandevelde-idr-=
bgp-ls-segment-routing-rld-01

    Abstract:
       This document defines the attribute to use for BGP-LS to expose a
       node RLD "Readable Label Depth" to a centralised controller (PCE/
       SDN).





    Please note that it may take a couple of minutes from the time of submi=
ssion
    until the htmlized version and diff are available at tools.ietf.org.

    The IETF Secretariat



_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr

=20

_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr


--B_3574660238_965366943
Content-type: text/html;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:schema=
s-microsoft-com:office:word" xmlns:m=3D"http://schemas.microsoft.com/office/20=
04/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta name=3DTitle c=
ontent=3D""><meta name=3DKeywords content=3D""><meta http-equiv=3DContent-Type conte=
nt=3D"text/html; charset=3Dutf-8"><meta name=3DGenerator content=3D"Microsoft Word 1=
5 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:Arial;
	panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:PMingLiU;
	panose-1:2 2 5 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.m9028297214918060569gmailmsg
	{mso-style-name:m_9028297214918060569gmail_msg;}
span.EmailStyle18
	{mso-style-type:personal;
	font-family:Calibri;
	color:#1F497D;}
span.EmailStyle19
	{mso-style-type:personal-reply;
	font-family:Calibri;
	color:windowtext;}
span.msoIns
	{mso-style-type:export-only;
	mso-style-name:"";
	text-decoration:underline;
	color:teal;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style></head><body bgcolor=3Dwhite lang=3DEN-US link=3Dblue vlink=3Dpurple><di=
v class=3DWordSection1><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-f=
amily:Calibri'>Hi Ketan,<o:p></o:p></span></p><p class=3DMsoNormal><span style=
=3D'font-size:11.0pt;font-family:Calibri'><o:p>&nbsp;</o:p></span></p><p class=
=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:Calibri'>During my pres=
entation in Chicago I have asked for adoption, I assume they would do so soo=
n.<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;fon=
t-family:Calibri'>Wrt email topic &#8211; please do not mix MSD documents wi=
th RLD ones.<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:=
11.0pt;font-family:Calibri'><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><=
span style=3D'font-size:11.0pt;font-family:Calibri'>Thanks!<o:p></o:p></span><=
/p><div><p class=3DMsoNormal><span style=3D'font-size:10.5pt;font-family:Calibri=
;color:black'><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span style=3D'fo=
nt-size:10.5pt;font-family:Calibri;color:black'>Cheers,<o:p></o:p></span></p=
><p class=3DMsoNormal><span style=3D'font-size:10.5pt;font-family:Calibri;color:=
black'>Jeff<o:p></o:p></span></p></div><p class=3DMsoNormal><span style=3D'font-=
size:11.0pt;font-family:Calibri'><o:p>&nbsp;</o:p></span></p><p class=3DMsoNor=
mal><span style=3D'font-size:11.0pt;font-family:Calibri'><o:p>&nbsp;</o:p></sp=
an></p><div style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt =
0in 0in 0in'><p class=3DMsoNormal style=3D'margin-left:.5in'><b><span style=3D'fon=
t-family:Calibri;color:black'>From: </span></b><span style=3D'font-family:Cali=
bri;color:black'>&quot;Ketan Talaulikar Talaulikar (ketant)&quot; &lt;ketant=
@cisco.com&gt;<br><b>Date: </b>Monday, April 10, 2017 at 08:30<br><b>To: </b=
>Jeff Tantsura &lt;jefftant.ietf@gmail.com&gt;, &quot;robert@raszuk.net&quot=
; &lt;robert@raszuk.net&gt;<br><b>Cc: </b>idr wg &lt;idr@ietf.org&gt;, &quot=
;Van De Velde, Gunter (Nokia - BE)&quot; &lt;gunter.van_de_velde@nokia.com&g=
t;<br><b>Subject: </b>RE: [Idr] FW: New Version Notification for draft-vande=
velde-idr-bgp-ls-segment-routing-rld-01.txt<o:p></o:p></span></p></div><div>=
<p class=3DMsoNormal style=3D'margin-left:.5in'><o:p>&nbsp;</o:p></p></div><p cl=
ass=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-size:11.0pt;font-fa=
mily:Calibri;color:#1F497D'>Hi Jeff/Authors,</span><o:p></o:p></p><p class=3DM=
soNormal style=3D'margin-left:.5in'><span style=3D'font-size:11.0pt;font-family:=
Calibri;color:#1F497D'>&nbsp;</span><o:p></o:p></p><p class=3DMsoNormal style=3D=
'margin-left:.5in'><span style=3D'font-size:11.0pt;font-family:Calibri;color:#=
1F497D'>Could we get this MSD BGP-LS draft polled for IDR WG adoption? The c=
orresponding IGP drafts are already respective WG documents.</span><o:p></o:=
p></p><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-size:11.=
0pt;font-family:Calibri;color:#1F497D'>&nbsp;</span><o:p></o:p></p><p class=3D=
MsoNormal style=3D'margin-left:.5in'><span style=3D'font-size:11.0pt;font-family=
:Calibri;color:#1F497D'>Thanks,</span><o:p></o:p></p><p class=3DMsoNormal styl=
e=3D'margin-left:.5in'><span style=3D'font-size:11.0pt;font-family:Calibri;color=
:#1F497D'>Ketan</span><o:p></o:p></p><p class=3DMsoNormal style=3D'margin-left:.=
5in'><span style=3D'font-size:11.0pt;font-family:Calibri;color:#1F497D'>&nbsp;=
</span><o:p></o:p></p><div><div style=3D'border:none;border-top:solid #E1E1E1 =
1.0pt;padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal style=3D'margin-left:.5in'=
><b><span style=3D'font-size:11.0pt;font-family:Calibri'>From:</span></b><span=
 style=3D'font-size:11.0pt;font-family:Calibri'> Idr [mailto:idr-bounces@ietf.=
org] <b>On Behalf Of </b>Jeff Tantsura<br><b>Sent:</b> 04 March 2017 16:21<b=
r><b>To:</b> Robert Raszuk &lt;robert@raszuk.net&gt;<br><b>Cc:</b> idr wg &l=
t;idr@ietf.org&gt;; Van De Velde, Gunter (Nokia - BE) &lt;gunter.van_de_veld=
e@nokia.com&gt;<br><b>Subject:</b> Re: [Idr] FW: New Version Notification fo=
r draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt</span><o:p></o:p></=
p></div></div><p class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></o:p><=
/p><div><p class=3DMsoNormal style=3D'margin-left:.5in'>Robert,<o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>Please take a look at 0=
2 isis draft published yesterday, we have added type flag that defines the t=
ype of a SID and could be used with v6 dataplane.<o:p></o:p></p></div><div><=
p class=3DMsoNormal style=3D'margin-left:.5in'>The limitations wrt label operati=
ons are well understood across both custom and merchant &nbsp;silicon and fr=
om use case prospective had to be addressed first.<o:p></o:p></p></div><div>=
<p class=3DMsoNormal style=3D'margin-left:.5in'>V6 dataplane will be added.<o:p>=
</o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p>=
</o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>Please let =
me know if this answers your questions and addresses concerns.<o:p></o:p></p=
></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p=
><div><p class=3DMsoNormal style=3D'margin-left:.5in'>Regards,<o:p></o:p></p><di=
v><p class=3DMsoNormal style=3D'margin-left:.5in'>Jeff<o:p></o:p></p></div></div=
></div><div><p class=3DMsoNormal style=3D'mso-margin-top-alt:0in;margin-right:0i=
n;margin-bottom:12.0pt;margin-left:.5in'><br>On Mar 4, 2017, at 06:24, Rober=
t Raszuk &lt;<a href=3D"mailto:robert@raszuk.net">robert@raszuk.net</a>&gt; wr=
ote:<o:p></o:p></p></div><blockquote style=3D'margin-top:5.0pt;margin-bottom:5=
.0pt'><div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>Jeff,<o:p></o:p>=
</p><div><p class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>MSD drafts (yours invlu=
ded) talks about labels while MSD as such seems to be defined as maximum SID=
 depth.<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'=
>&nbsp;<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'=
>In SRv6 SID is *NOT* a label. So why not to define MSD properly across all =
SR scenarios?<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left=
:.5in'>&nbsp;<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left=
:.5in'>Are we going to have now new zoo of drafts now defining MSD for SRv6 =
vs current docs just defining MSD for SR-MPLS ?<o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>Cheers,<o:p></o:p></p></div><div><p=
 class=3DMsoNormal style=3D'margin-left:.5in'>R.<o:p></o:p></p></div><div><p cla=
ss=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><div><p cla=
ss=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div></div><div>=
<p class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p><div><p cla=
ss=3DMsoNormal style=3D'margin-left:.5in'>On Mar 4, 2017 9:41 AM, &quot;Jeff Tan=
tsura&quot; &lt;<a href=3D"mailto:jefftant.ietf@gmail.com">jefftant.ietf@gmail=
.com</a>&gt; wrote:<o:p></o:p></p><blockquote style=3D'border:none;border-left=
:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:=
5.0pt;margin-right:0in;margin-bottom:5.0pt'><div><p class=3DMsoNormal style=3D'm=
argin-left:.5in'>Robert,<br><br>That's done in MSD drafts.<br>In the recentl=
y published isis draft we have also introduced MSD type flag that would be u=
sed to signal different types of SID's: recirculated labels, EL's, etc<o:p><=
/o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p><=
/o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>Cheers,<o:p>=
</o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>Jeff<o:p></=
o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></=
o:p></p><div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>On Fri, Mar 3,=
 2017 at 22:35 Robert Raszuk &lt;<a href=3D"mailto:robert@raszuk.net" target=3D"=
_blank">robert@raszuk.net</a>&gt; wrote:<o:p></o:p></p></div><blockquote sty=
le=3D'border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;ma=
rgin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'><div>=
<div><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-family:Ar=
ial'>Hey Gunter,</span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'm=
argin-left:.5in'><span style=3D'font-family:Arial'>&nbsp;</span><o:p></o:p></p=
></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-fa=
mily:Arial'>Good proposal however why do you only think about labels ?</span=
><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span=
 style=3D'font-family:Arial'>&nbsp;</span><o:p></o:p></p></div><div><p class=3DM=
soNormal style=3D'margin-left:.5in'><span style=3D'font-family:Arial'>Seriously =
if this is to move fwd let's add ability to signal also following elements:<=
/span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>=
<span style=3D'font-family:Arial'>&nbsp;</span><o:p></o:p></p></div><div><p cl=
ass=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-family:Arial'>* abi=
lity to punt SR-MPLS to local CPU (slow path) when not handled in hardware (=
per node basis)</span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'ma=
rgin-left:.5in'><span style=3D'font-family:Arial'>&nbsp;</span><o:p></o:p></p>=
</div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-fam=
ily:Arial'>* add signalling for number of SRv6 SRHs supported per node/per L=
C</span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in=
'><span style=3D'font-family:Arial'>&nbsp;</span><o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-family:Arial'>* a=
dd signalling for depth per SRH and total of SIDs supported per node/per LC<=
/span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>=
<span style=3D'font-family:Arial'>&nbsp;</span><o:p></o:p></p></div><div><p cl=
ass=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-family:Arial'>* sig=
nal ability to punt to slow path or not for longer then support SRH stack or=
 number of SIDs in each SRH structure.</span><o:p></o:p></p></div><div><p cl=
ass=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-family:Arial'>&nbsp=
;</span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in=
'><span style=3D'font-family:Arial'>Cheers,<br>Robert.</span><o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-famil=
y:Arial'>&nbsp;</span><o:p></o:p></p></div></div><div><p class=3DMsoNormal sty=
le=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p><div><p class=3DMsoNormal style=3D'ma=
rgin-left:.5in'>On Fri, Mar 3, 2017 at 3:55 PM, Van De Velde, Gunter (Nokia =
- BE) <span class=3Dm9028297214918060569gmailmsg>&lt;<a href=3D"mailto:gunter.va=
n_de_velde@nokia.com" target=3D"_blank">gunter.van_de_velde@nokia.com</a>&gt;<=
/span> wrote:<o:p></o:p></p><blockquote style=3D'border:none;border-left:solid=
 #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;=
margin-right:0in;margin-bottom:5.0pt'><p class=3DMsoNormal style=3D'margin-left:=
.5in'>Heads-up&#8230; Happy to learn feedback and comments.<span style=3D'font=
-family:PMingLiU'><br><br></span>This draft is short and defines the attribu=
te to use for BGP-LS to expose a<br>node RLD &quot;Readable Label Depth&quot=
; to a centralised controller (PCE/SDN).<br><br>G/<br><br>On 03/03/2017, 14:=
21, &quot;<a href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank">internet=
-drafts@ietf.org</a>&quot; &lt;<a href=3D"mailto:internet-drafts@ietf.org" tar=
get=3D"_blank">internet-drafts@ietf.org</a>&gt; wrote:<br><br><br>&nbsp; &nbsp=
; A new version of I-D, draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.t=
xt<br>&nbsp; &nbsp; has been successfully submitted by Gunter Van de Velde a=
nd posted to the<br>&nbsp; &nbsp; IETF repository.<br><br>&nbsp; &nbsp; Name=
:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;draft-vandevelde-idr=
-bgp-ls-segment-routing-rld<br>&nbsp; &nbsp; Revision:&nbsp; &nbsp;01<br>&nb=
sp; &nbsp; Title:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Signalling=
 RLD using BGP-LS<br>&nbsp; &nbsp; Document date:&nbsp; &nbsp; &nbsp; 2017-0=
3-03<br>&nbsp; &nbsp; Group:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 Individual Submission<br>&nbsp; &nbsp; Pages:&nbsp; &nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; 5<br>&nbsp; &nbsp; URL:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; <a href=3D"https://www.ietf.org/internet-drafts/draft-vandevelde-idr-b=
gp-ls-segment-routing-rld-01.txt" target=3D"_blank">https://www.ietf.org/inter=
net-drafts/draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt</a><br>&nb=
sp; &nbsp; Status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://datatra=
cker.ietf.org/doc/draft-vandevelde-idr-bgp-ls-segment-routing-rld/" target=3D"=
_blank">https://datatracker.ietf.org/doc/draft-vandevelde-idr-bgp-ls-segment=
-routing-rld/</a><br>&nbsp; &nbsp; Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a hr=
ef=3D"https://tools.ietf.org/html/draft-vandevelde-idr-bgp-ls-segment-routing-=
rld-01" target=3D"_blank">https://tools.ietf.org/html/draft-vandevelde-idr-bgp=
-ls-segment-routing-rld-01</a><br>&nbsp; &nbsp; Diff:&nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp;<a href=3D"https://www.ietf.org/rfcdiff?url2=3Ddraft-vandeveld=
e-idr-bgp-ls-segment-routing-rld-01" target=3D"_blank">https://www.ietf.org/rf=
cdiff?url2=3Ddraft-vandevelde-idr-bgp-ls-segment-routing-rld-01</a><br><br>&nb=
sp; &nbsp; Abstract:<br>&nbsp; &nbsp; &nbsp; &nbsp;This document defines the=
 attribute to use for BGP-LS to expose a<br>&nbsp; &nbsp; &nbsp; &nbsp;node =
RLD &quot;Readable Label Depth&quot; to a centralised controller (PCE/<br>&n=
bsp; &nbsp; &nbsp; &nbsp;SDN).<br><br><br><br><br><br>&nbsp; &nbsp; Please n=
ote that it may take a couple of minutes from the time of submission<br>&nbs=
p; &nbsp; until the htmlized version and diff are available at <a href=3D"http=
://tools.ietf.org" target=3D"_blank">tools.ietf.org</a>.<br><br>&nbsp; &nbsp; =
The IETF Secretariat<br><br><br><br>________________________________________=
_______<br>Idr mailing list<br><a href=3D"mailto:Idr@ietf.org" target=3D"_blank"=
>Idr@ietf.org</a><br><a href=3D"https://www.ietf.org/mailman/listinfo/idr" tar=
get=3D"_blank">https://www.ietf.org/mailman/listinfo/idr</a><o:p></o:p></p></b=
lockquote></div><p class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></o:p=
></p></div><p class=3DMsoNormal style=3D'margin-left:.5in'>_____________________=
__________________________<br>Idr mailing list<br><a href=3D"mailto:Idr@ietf.o=
rg" target=3D"_blank">Idr@ietf.org</a><br><a href=3D"https://www.ietf.org/mailma=
n/listinfo/idr" target=3D"_blank">https://www.ietf.org/mailman/listinfo/idr</a=
><o:p></o:p></p></blockquote></div></div></blockquote></div></div></div></bl=
ockquote></div></body></html>

--B_3574660238_965366943--



From nobody Mon Apr 10 09:41:48 2017
Return-Path: <shares@ndzh.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F87F129562 for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 09:41:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.946
X-Spam-Level: 
X-Spam-Status: No, score=0.946 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845, HTML_MESSAGE=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P6W_yeIT7Ytr for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 09:41:39 -0700 (PDT)
Received: from hickoryhill-consulting.com (50-245-122-97-static.hfc.comcastbusiness.net [50.245.122.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7460E1296CD for <idr@ietf.org>; Mon, 10 Apr 2017 09:41:31 -0700 (PDT)
X-Default-Received-SPF: pass (skip=forwardok (res=PASS)) x-ip-name=70.194.20.181; 
From: "Susan Hares" <shares@ndzh.com>
To: "'Jeff Tantsura'" <jefftant.ietf@gmail.com>, "'Ketan Talaulikar Talaulikar \(ketant\)'" <ketant@cisco.com>, "'Robert Raszuk'" <robert@raszuk.net>
Cc: "'idr wg'" <idr@ietf.org>, "'Van De Velde, Gunter \(Nokia - BE\)'" <gunter.van_de_velde@nokia.com>
References: <148854728632.10105.590253116263033290.idtracker@ietfa.amsl.com> <4BF12F22-F605-406F-9CD8-ACE350B981D0@alcatel-lucent.com> <CA+b+ERkNLHPN23TTC2=Cb-GKDOkFysHca9N3iwopipHPFhLjyA@mail.gmail.com> <CAFAzdPW-KiGdt-Ndtpf4v6TVDPPA2eTaVjKEPkq_s4SPan5oTg@mail.gmail.com> <CA+b+ERmyFNOv0HpoW98ecvbKg0T05pYL6uFZ7Me4nW5n0V+S6g@mail.gmail.com> <19BCC3A8-48A7-4838-A999-5B304C0C7EED@gmail.com> <de730d8327314fa6bfa375c76c8fd116@XCH-ALN-008.cisco.com> <92EB3AA9-005F-4502-B5BD-CF05A40A7867@gmail.com>
In-Reply-To: <92EB3AA9-005F-4502-B5BD-CF05A40A7867@gmail.com>
Date: Mon, 10 Apr 2017 12:36:20 -0400
Message-ID: <014701d2b218$95dd4030$c197c090$@ndzh.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0148_01D2B1F7.0ED03410"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQHzYzczemS+14iJBWKD0JOoUB8IywF2sRx/Ah7MYuIBoWVYoQGUD6AyAkqxrW0CQ0YhYAMur7JyoQktwtA=
Content-Language: en-us
X-Authenticated-User: skh@ndzh.com 
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/9sC1NXvjZJogHf1y4SDBl1oMEgA>
Subject: Re: [Idr] FW: New Version Notification for draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Apr 2017 16:41:44 -0000

This is a multipart message in MIME format.

------=_NextPart_000_0148_01D2B1F7.0ED03410
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Jeff:

=20

I will start IPR for WG adoption calls later today.=20

=20

Sue=20

=20

From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Jeff Tantsura
Sent: Monday, April 10, 2017 12:11 PM
To: Ketan Talaulikar Talaulikar (ketant); Robert Raszuk
Cc: idr wg; Van De Velde, Gunter (Nokia - BE)
Subject: Re: [Idr] FW: New Version Notification for =
draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt

=20

Hi Ketan,

=20

During my presentation in Chicago I have asked for adoption, I assume =
they would do so soon.

Wrt email topic =E2=80=93 please do not mix MSD documents with RLD ones.

=20

Thanks!

=20

Cheers,

Jeff

=20

=20

From: "Ketan Talaulikar Talaulikar (ketant)" <ketant@cisco.com>
Date: Monday, April 10, 2017 at 08:30
To: Jeff Tantsura <jefftant.ietf@gmail.com>, "robert@raszuk.net" =
<robert@raszuk.net>
Cc: idr wg <idr@ietf.org>, "Van De Velde, Gunter (Nokia - BE)" =
<gunter.van_de_velde@nokia.com>
Subject: RE: [Idr] FW: New Version Notification for =
draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt

=20

Hi Jeff/Authors,

=20

Could we get this MSD BGP-LS draft polled for IDR WG adoption? The =
corresponding IGP drafts are already respective WG documents.

=20

Thanks,

Ketan

=20

From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Jeff Tantsura
Sent: 04 March 2017 16:21
To: Robert Raszuk <robert@raszuk.net>
Cc: idr wg <idr@ietf.org>; Van De Velde, Gunter (Nokia - BE) =
<gunter.van_de_velde@nokia.com>
Subject: Re: [Idr] FW: New Version Notification for =
draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt

=20

Robert,

=20

Please take a look at 02 isis draft published yesterday, we have added =
type flag that defines the type of a SID and could be used with v6 =
dataplane.

The limitations wrt label operations are well understood across both =
custom and merchant  silicon and from use case prospective had to be =
addressed first.

V6 dataplane will be added.

=20

Please let me know if this answers your questions and addresses =
concerns.

=20

Regards,

Jeff


On Mar 4, 2017, at 06:24, Robert Raszuk <robert@raszuk.net> wrote:

Jeff,

=20

MSD drafts (yours invluded) talks about labels while MSD as such seems =
to be defined as maximum SID depth.

=20

In SRv6 SID is *NOT* a label. So why not to define MSD properly across =
all SR scenarios?

=20

Are we going to have now new zoo of drafts now defining MSD for SRv6 vs =
current docs just defining MSD for SR-MPLS ?

=20

Cheers,

R.

=20

=20

=20

On Mar 4, 2017 9:41 AM, "Jeff Tantsura" <jefftant.ietf@gmail.com> wrote:

Robert,

That's done in MSD drafts.
In the recently published isis draft we have also introduced MSD type =
flag that would be used to signal different types of SID's: recirculated =
labels, EL's, etc

=20

Cheers,

Jeff

=20

On Fri, Mar 3, 2017 at 22:35 Robert Raszuk <robert@raszuk.net> wrote:

Hey Gunter,

=20

Good proposal however why do you only think about labels ?

=20

Seriously if this is to move fwd let's add ability to signal also =
following elements:

=20

* ability to punt SR-MPLS to local CPU (slow path) when not handled in =
hardware (per node basis)

=20

* add signalling for number of SRv6 SRHs supported per node/per LC

=20

* add signalling for depth per SRH and total of SIDs supported per =
node/per LC

=20

* signal ability to punt to slow path or not for longer then support SRH =
stack or number of SIDs in each SRH structure.

=20

Cheers,
Robert.

=20

=20

On Fri, Mar 3, 2017 at 3:55 PM, Van De Velde, Gunter (Nokia - BE) =
<gunter.van_de_velde@nokia.com> wrote:

Heads-up=E2=80=A6 Happy to learn feedback and comments.

This draft is short and defines the attribute to use for BGP-LS to =
expose a
node RLD "Readable Label Depth" to a centralised controller (PCE/SDN).

G/

On 03/03/2017, 14:21, "internet-drafts@ietf.org" =
<internet-drafts@ietf.org> wrote:


    A new version of I-D, =
draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt
    has been successfully submitted by Gunter Van de Velde and posted to =
the
    IETF repository.

    Name:               draft-vandevelde-idr-bgp-ls-segment-routing-rld
    Revision:   01
    Title:              Signalling RLD using BGP-LS
    Document date:      2017-03-03
    Group:              Individual Submission
    Pages:              5
    URL:            =
https://www.ietf.org/internet-drafts/draft-vandevelde-idr-bgp-ls-segment-=
routing-rld-01.txt
    Status:         =
https://datatracker.ietf.org/doc/draft-vandevelde-idr-bgp-ls-segment-rout=
ing-rld/
    Htmlized:       =
https://tools.ietf.org/html/draft-vandevelde-idr-bgp-ls-segment-routing-r=
ld-01
    Diff:           =
https://www.ietf.org/rfcdiff?url2=3Ddraft-vandevelde-idr-bgp-ls-segment-r=
outing-rld-01

    Abstract:
       This document defines the attribute to use for BGP-LS to expose a
       node RLD "Readable Label Depth" to a centralised controller (PCE/
       SDN).





    Please note that it may take a couple of minutes from the time of =
submission
    until the htmlized version and diff are available at tools.ietf.org.

    The IETF Secretariat



_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr

=20

_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr


------=_NextPart_000_0148_01D2B1F7.0ED03410
Content-Type: text/html;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta =
http-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8"><meta =
name=3DGenerator content=3D"Microsoft Word 14 (filtered =
medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:PMingLiU;
	panose-1:2 1 6 1 0 1 1 1 1 1;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
	{font-family:"\@PMingLiU";
	panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Balloon Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";}
span.m9028297214918060569gmailmsg
	{mso-style-name:m_9028297214918060569gmail_msg;}
span.EmailStyle18
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.EmailStyle19
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:"Tahoma","sans-serif";}
span.EmailStyle22
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=3Dwhite =
lang=3DEN-US link=3Dblue vlink=3Dpurple><div class=3DWordSection1><p =
class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>Jeff:<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>I will start IPR for WG adoption calls later today. =
<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>Sue <o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><o:p>&nbsp;</o:p></span></p><div><div =
style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in'><p class=3DMsoNormal><b><span =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span>=
</b><span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'> =
Idr [mailto:idr-bounces@ietf.org] <b>On Behalf Of </b>Jeff =
Tantsura<br><b>Sent:</b> Monday, April 10, 2017 12:11 PM<br><b>To:</b> =
Ketan Talaulikar Talaulikar (ketant); Robert Raszuk<br><b>Cc:</b> idr =
wg; Van De Velde, Gunter (Nokia - BE)<br><b>Subject:</b> Re: [Idr] FW: =
New Version Notification for =
draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt<o:p></o:p></span><=
/p></div></div><p class=3DMsoNormal><o:p>&nbsp;</o:p></p><p =
class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>Hi =
Ketan,<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p>&nbsp;=
</o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>During my =
presentation in Chicago I have asked for adoption, I assume they would =
do so soon.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>Wrt email =
topic =E2=80=93 please do not mix MSD documents with RLD =
ones.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p>&nbsp;=
</o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>Thanks!<o:p=
></o:p></span></p><div><p class=3DMsoNormal><span =
style=3D'font-size:10.5pt;font-family:"Calibri","sans-serif";color:black'=
><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.5pt;font-family:"Calibri","sans-serif";color:black'=
>Cheers,<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.5pt;font-family:"Calibri","sans-serif";color:black'=
>Jeff<o:p></o:p></span></p></div><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p>&nbsp;=
</o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p>&nbsp;=
</o:p></span></p><div style=3D'border:none;border-top:solid #B5C4DF =
1.0pt;padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal =
style=3D'margin-left:.5in'><b><span =
style=3D'font-family:"Calibri","sans-serif";color:black'>From: =
</span></b><span =
style=3D'font-family:"Calibri","sans-serif";color:black'>&quot;Ketan =
Talaulikar Talaulikar (ketant)&quot; &lt;<a =
href=3D"mailto:ketant@cisco.com">ketant@cisco.com</a>&gt;<br><b>Date: =
</b>Monday, April 10, 2017 at 08:30<br><b>To: </b>Jeff Tantsura &lt;<a =
href=3D"mailto:jefftant.ietf@gmail.com">jefftant.ietf@gmail.com</a>&gt;, =
&quot;<a href=3D"mailto:robert@raszuk.net">robert@raszuk.net</a>&quot; =
&lt;<a =
href=3D"mailto:robert@raszuk.net">robert@raszuk.net</a>&gt;<br><b>Cc: =
</b>idr wg &lt;<a href=3D"mailto:idr@ietf.org">idr@ietf.org</a>&gt;, =
&quot;Van De Velde, Gunter (Nokia - BE)&quot; &lt;<a =
href=3D"mailto:gunter.van_de_velde@nokia.com">gunter.van_de_velde@nokia.c=
om</a>&gt;<br><b>Subject: </b>RE: [Idr] FW: New Version Notification for =
draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt<o:p></o:p></span><=
/p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'><o:p>&nbsp;</o:p></p></div><p =
class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>Hi Jeff/Authors,</span><o:p></o:p></p><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>&nbsp;</span><o:p></o:p></p><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>Could we get this MSD BGP-LS draft polled for IDR WG adoption? The =
corresponding IGP drafts are already respective WG =
documents.</span><o:p></o:p></p><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>&nbsp;</span><o:p></o:p></p><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>Thanks,</span><o:p></o:p></p><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>Ketan</span><o:p></o:p></p><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>&nbsp;</span><o:p></o:p></p><div><div =
style=3D'border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in'><p class=3DMsoNormal style=3D'margin-left:.5in'><b><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span=
></b><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'> Idr [<a =
href=3D"mailto:idr-bounces@ietf.org">mailto:idr-bounces@ietf.org</a>] =
<b>On Behalf Of </b>Jeff Tantsura<br><b>Sent:</b> 04 March 2017 =
16:21<br><b>To:</b> Robert Raszuk &lt;<a =
href=3D"mailto:robert@raszuk.net">robert@raszuk.net</a>&gt;<br><b>Cc:</b>=
 idr wg &lt;<a href=3D"mailto:idr@ietf.org">idr@ietf.org</a>&gt;; Van De =
Velde, Gunter (Nokia - BE) &lt;<a =
href=3D"mailto:gunter.van_de_velde@nokia.com">gunter.van_de_velde@nokia.c=
om</a>&gt;<br><b>Subject:</b> Re: [Idr] FW: New Version Notification for =
draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt</span><o:p></o:p><=
/p></div></div><p class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>Robert,<o:p></o:p></p></div><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>Please take a look at 02 =
isis draft published yesterday, we have added type flag that defines the =
type of a SID and could be used with v6 =
dataplane.<o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'>The limitations wrt label operations are well =
understood across both custom and merchant &nbsp;silicon and from use =
case prospective had to be addressed first.<o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>V6 dataplane will be =
added.<o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>Please let me know if this =
answers your questions and addresses =
concerns.<o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>Regards,<o:p></o:p></p><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>Jeff<o:p></o:p></p></div></div></div><div><p =
class=3DMsoNormal =
style=3D'mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;mar=
gin-left:.5in'><br>On Mar 4, 2017, at 06:24, Robert Raszuk &lt;<a =
href=3D"mailto:robert@raszuk.net">robert@raszuk.net</a>&gt; =
wrote:<o:p></o:p></p></div><blockquote =
style=3D'margin-top:5.0pt;margin-bottom:5.0pt'><div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>Jeff,<o:p></o:p></p><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>MSD drafts (yours invluded) =
talks about labels while MSD as such seems to be defined as maximum SID =
depth.<o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>In SRv6 SID is *NOT* a =
label. So why not to define MSD properly across all SR =
scenarios?<o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>Are we going to have now =
new zoo of drafts now defining MSD for SRv6 vs current docs just =
defining MSD for SR-MPLS ?<o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>Cheers,<o:p></o:p></p></div><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>R.<o:p></o:p></p></div><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div></div><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>On Mar 4, 2017 9:41 AM, =
&quot;Jeff Tantsura&quot; &lt;<a =
href=3D"mailto:jefftant.ietf@gmail.com">jefftant.ietf@gmail.com</a>&gt; =
wrote:<o:p></o:p></p><blockquote style=3D'border:none;border-left:solid =
#CCCCCC 1.0pt;padding:0in 0in 0in =
6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5=
.0pt'><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'>Robert,<br><br>That's done in MSD =
drafts.<br>In the recently published isis draft we have also introduced =
MSD type flag that would be used to signal different types of SID's: =
recirculated labels, EL's, etc<o:p></o:p></p></div><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>Cheers,<o:p></o:p></p></div><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>Jeff<o:p></o:p></p></div><div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p><div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>On Fri, Mar 3, 2017 at =
22:35 Robert Raszuk &lt;<a href=3D"mailto:robert@raszuk.net" =
target=3D"_blank">robert@raszuk.net</a>&gt; =
wrote:<o:p></o:p></p></div><blockquote =
style=3D'border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in =
6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5=
.0pt'><div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>Hey =
Gunter,</span><o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>&nbsp;</span><o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>Good proposal however why do =
you only think about labels ?</span><o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>&nbsp;</span><o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>Seriously if this is to move =
fwd let's add ability to signal also following =
elements:</span><o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>&nbsp;</span><o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>* ability to punt SR-MPLS to =
local CPU (slow path) when not handled in hardware (per node =
basis)</span><o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>&nbsp;</span><o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>* add signalling for number =
of SRv6 SRHs supported per node/per =
LC</span><o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>&nbsp;</span><o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>* add signalling for depth =
per SRH and total of SIDs supported per node/per =
LC</span><o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>&nbsp;</span><o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>* signal ability to punt to =
slow path or not for longer then support SRH stack or number of SIDs in =
each SRH structure.</span><o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>&nbsp;</span><o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>Cheers,<br>Robert.</span><o:p>=
</o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'><span =
style=3D'font-family:"Arial","sans-serif"'>&nbsp;</span><o:p></o:p></p></=
div></div><div><p class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p><div><p =
class=3DMsoNormal style=3D'margin-left:.5in'>On Fri, Mar 3, 2017 at 3:55 =
PM, Van De Velde, Gunter (Nokia - BE) <span =
class=3Dm9028297214918060569gmailmsg>&lt;<a =
href=3D"mailto:gunter.van_de_velde@nokia.com" =
target=3D"_blank">gunter.van_de_velde@nokia.com</a>&gt;</span> =
wrote:<o:p></o:p></p><blockquote style=3D'border:none;border-left:solid =
#CCCCCC 1.0pt;padding:0in 0in 0in =
6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5=
.0pt'><p class=3DMsoNormal style=3D'margin-left:.5in'>Heads-up=E2=80=A6 =
Happy to learn feedback and comments.<span =
style=3D'font-family:PMingLiU'><br><br></span>This draft is short and =
defines the attribute to use for BGP-LS to expose a<br>node RLD =
&quot;Readable Label Depth&quot; to a centralised controller =
(PCE/SDN).<br><br>G/<br><br>On 03/03/2017, 14:21, &quot;<a =
href=3D"mailto:internet-drafts@ietf.org" =
target=3D"_blank">internet-drafts@ietf.org</a>&quot; &lt;<a =
href=3D"mailto:internet-drafts@ietf.org" =
target=3D"_blank">internet-drafts@ietf.org</a>&gt; =
wrote:<br><br><br>&nbsp; &nbsp; A new version of I-D, =
draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt<br>&nbsp; &nbsp; =
has been successfully submitted by Gunter Van de Velde and posted to =
the<br>&nbsp; &nbsp; IETF repository.<br><br>&nbsp; &nbsp; Name:&nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;draft-vandevelde-idr-bgp-ls-segment-routing-rld<br>&nbsp; &nbsp; =
Revision:&nbsp; &nbsp;01<br>&nbsp; &nbsp; Title:&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; Signalling RLD using BGP-LS<br>&nbsp; &nbsp; =
Document date:&nbsp; &nbsp; &nbsp; 2017-03-03<br>&nbsp; &nbsp; =
Group:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Individual =
Submission<br>&nbsp; &nbsp; Pages:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; 5<br>&nbsp; &nbsp; URL:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; <a =
href=3D"https://www.ietf.org/internet-drafts/draft-vandevelde-idr-bgp-ls-=
segment-routing-rld-01.txt" =
target=3D"_blank">https://www.ietf.org/internet-drafts/draft-vandevelde-i=
dr-bgp-ls-segment-routing-rld-01.txt</a><br>&nbsp; &nbsp; Status:&nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/draft-vandevelde-idr-bgp-ls-segm=
ent-routing-rld/" =
target=3D"_blank">https://datatracker.ietf.org/doc/draft-vandevelde-idr-b=
gp-ls-segment-routing-rld/</a><br>&nbsp; &nbsp; Htmlized:&nbsp; &nbsp; =
&nbsp; &nbsp;<a =
href=3D"https://tools.ietf.org/html/draft-vandevelde-idr-bgp-ls-segment-r=
outing-rld-01" =
target=3D"_blank">https://tools.ietf.org/html/draft-vandevelde-idr-bgp-ls=
-segment-routing-rld-01</a><br>&nbsp; &nbsp; Diff:&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp;<a =
href=3D"https://www.ietf.org/rfcdiff?url2=3Ddraft-vandevelde-idr-bgp-ls-s=
egment-routing-rld-01" =
target=3D"_blank">https://www.ietf.org/rfcdiff?url2=3Ddraft-vandevelde-id=
r-bgp-ls-segment-routing-rld-01</a><br><br>&nbsp; &nbsp; =
Abstract:<br>&nbsp; &nbsp; &nbsp; &nbsp;This document defines the =
attribute to use for BGP-LS to expose a<br>&nbsp; &nbsp; &nbsp; =
&nbsp;node RLD &quot;Readable Label Depth&quot; to a centralised =
controller (PCE/<br>&nbsp; &nbsp; &nbsp; =
&nbsp;SDN).<br><br><br><br><br><br>&nbsp; &nbsp; Please note that it may =
take a couple of minutes from the time of submission<br>&nbsp; &nbsp; =
until the htmlized version and diff are available at <a =
href=3D"http://tools.ietf.org" =
target=3D"_blank">tools.ietf.org</a>.<br><br>&nbsp; &nbsp; The IETF =
Secretariat<br><br><br><br>______________________________________________=
_<br>Idr mailing list<br><a href=3D"mailto:Idr@ietf.org" =
target=3D"_blank">Idr@ietf.org</a><br><a =
href=3D"https://www.ietf.org/mailman/listinfo/idr" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/idr</a><o:p></o:p=
></p></blockquote></div><p class=3DMsoNormal =
style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p></div><p =
class=3DMsoNormal =
style=3D'margin-left:.5in'>______________________________________________=
_<br>Idr mailing list<br><a href=3D"mailto:Idr@ietf.org" =
target=3D"_blank">Idr@ietf.org</a><br><a =
href=3D"https://www.ietf.org/mailman/listinfo/idr" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/idr</a><o:p></o:p=
></p></blockquote></div></div></blockquote></div></div></div></blockquote=
></div></body></html>
------=_NextPart_000_0148_01D2B1F7.0ED03410--


From nobody Mon Apr 10 10:34:37 2017
Return-Path: <jefftant.ietf@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39B0B1294EC for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 10:34:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Bzjjtk_R1Rp for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 10:34:32 -0700 (PDT)
Received: from mail-pg0-x242.google.com (mail-pg0-x242.google.com [IPv6:2607:f8b0:400e:c05::242]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E317120227 for <idr@ietf.org>; Mon, 10 Apr 2017 10:34:32 -0700 (PDT)
Received: by mail-pg0-x242.google.com with SMTP id g2so26459903pge.2 for <idr@ietf.org>; Mon, 10 Apr 2017 10:34:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=P3og1m2sMdBTTuZWl55EgEA9LINf1nyq3vtyY04SbsM=; b=dMBtFKROEL0m30JllIu5PqzR9pAgZ279sJM/bhey19/4iM6M8hb8IrwRP6jrilBko5 K+tSiWLiJhmosGlK/lD1UEeaIRCNes2iskagRcLqVPMrbhUjKAHFeeimnyIEzgaGdVtc i1aF/LsHYv9Esi+xJ6k+oGMqTxBUZRsuhJur8rzcOMAi1+MV/ahBL1TYwxtMypgNZhOD BXtFb929SNlDJQnL+z0NFpDJ/g+1hmg6cWChnH4ksb1ncMaF/30DnuLgEKIFh6vmGq4q Etu6JSRb1IuZjZAKZZoeBKoieY1EwQdawChM8r9ctLD76jBRoZn6b6ruOcH6HzAJgATP 88Ww==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=P3og1m2sMdBTTuZWl55EgEA9LINf1nyq3vtyY04SbsM=; b=JgkyxPyFXHVhiLIrsTMRrKW/QscYdIf206UvZQCM9lRVJwv8/RgZoQf67zC9U2K/Ke +7DXvMB+SIVynCxUaU39O9Af4zC7MMIGfWCsH/uvmD/5WfaAntR7eLszQAclyP57e1TB M08e8QtXVp85HMZHHxWPgcDXu3oSyRL9PkVR79ZxrXR+8amcV7KrBBheUnlW0eWnWkkn YcbviTftXf7jhGA10QwwyxRa50U2O5HIMFyugE4LEhioXrcoOjwy+yvoHGCY5K8odUhc 2FK5m2C3n8vts57l5GASfGWt/Hnv7M4IHmhVEHL28YtnYSFbd5yi/nM+lmpUJPqYpJPX iOsA==
X-Gm-Message-State: AFeK/H2BE/JOAY6q1r+qV/QecdIY4g6d2klz1QmLllW4vLnZob7Co+IkwydejmW6aB4CYw==
X-Received: by 10.99.175.66 with SMTP id s2mr57101172pgo.30.1491845671573; Mon, 10 Apr 2017 10:34:31 -0700 (PDT)
Received: from [192.168.255.106] (107-1-141-74-ip-static.hfc.comcastbusiness.net. [107.1.141.74]) by smtp.gmail.com with ESMTPSA id x15sm25809724pfk.68.2017.04.10.10.34.29 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 10 Apr 2017 10:34:30 -0700 (PDT)
User-Agent: Microsoft-MacOutlook/f.20.0.170309
Date: Mon, 10 Apr 2017 10:34:29 -0700
From: Jeff Tantsura <jefftant.ietf@gmail.com>
To: Susan Hares <shares@ndzh.com>, "'Ketan Talaulikar Talaulikar (ketant)'" <ketant@cisco.com>, 'Robert Raszuk' <robert@raszuk.net>
CC: 'idr wg' <idr@ietf.org>, "'Van De Velde, Gunter (Nokia - BE)'" <gunter.van_de_velde@nokia.com>
Message-ID: <0070BF1B-7112-447C-98DA-BC7C671A1F26@gmail.com>
Thread-Topic: [Idr] FW: New Version Notification for draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt
References: <148854728632.10105.590253116263033290.idtracker@ietfa.amsl.com> <4BF12F22-F605-406F-9CD8-ACE350B981D0@alcatel-lucent.com> <CA+b+ERkNLHPN23TTC2=Cb-GKDOkFysHca9N3iwopipHPFhLjyA@mail.gmail.com> <CAFAzdPW-KiGdt-Ndtpf4v6TVDPPA2eTaVjKEPkq_s4SPan5oTg@mail.gmail.com> <CA+b+ERmyFNOv0HpoW98ecvbKg0T05pYL6uFZ7Me4nW5n0V+S6g@mail.gmail.com> <19BCC3A8-48A7-4838-A999-5B304C0C7EED@gmail.com> <de730d8327314fa6bfa375c76c8fd116@XCH-ALN-008.cisco.com> <92EB3AA9-005F-4502-B5BD-CF05A40A7867@gmail.com> <014701d2b218$95dd4030$c197c090$@ndzh.com>
In-Reply-To: <014701d2b218$95dd4030$c197c090$@ndzh.com>
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3574665270_884360821"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/yKhrKOv-QGO9Py4uKU-iSaLmCr4>
Subject: Re: [Idr] FW: New Version Notification for draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Apr 2017 17:34:35 -0000

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3574665270_884360821
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

Thanks Sue, much appreciated!

=20

Cheers,

Jeff

=20

=20

From: Susan Hares <shares@ndzh.com>
Date: Monday, April 10, 2017 at 09:36
To: 'Jeff Tantsura' <jefftant.ietf@gmail.com>, "'Ketan Talaulikar Talaulika=
r (ketant)'" <ketant@cisco.com>, "robert@raszuk.net" <robert@raszuk.net>
Cc: 'idr wg' <idr@ietf.org>, "'Van De Velde, Gunter (Nokia - BE)'" <gunter.=
van_de_velde@nokia.com>
Subject: RE: [Idr] FW: New Version Notification for draft-vandevelde-idr-bg=
p-ls-segment-routing-rld-01.txt

=20

Jeff:

=20

I will start IPR for WG adoption calls later today.=20

=20

Sue=20

=20

From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Jeff Tantsura
Sent: Monday, April 10, 2017 12:11 PM
To: Ketan Talaulikar Talaulikar (ketant); Robert Raszuk
Cc: idr wg; Van De Velde, Gunter (Nokia - BE)
Subject: Re: [Idr] FW: New Version Notification for draft-vandevelde-idr-bg=
p-ls-segment-routing-rld-01.txt

=20

Hi Ketan,

=20

During my presentation in Chicago I have asked for adoption, I assume they =
would do so soon.

Wrt email topic =E2=80=93 please do not mix MSD documents with RLD ones.

=20

Thanks!

=20

Cheers,

Jeff

=20

=20

From: "Ketan Talaulikar Talaulikar (ketant)" <ketant@cisco.com>
Date: Monday, April 10, 2017 at 08:30
To: Jeff Tantsura <jefftant.ietf@gmail.com>, "robert@raszuk.net" <robert@ra=
szuk.net>
Cc: idr wg <idr@ietf.org>, "Van De Velde, Gunter (Nokia - BE)" <gunter.van_=
de_velde@nokia.com>
Subject: RE: [Idr] FW: New Version Notification for draft-vandevelde-idr-bg=
p-ls-segment-routing-rld-01.txt

=20

Hi Jeff/Authors,

=20

Could we get this MSD BGP-LS draft polled for IDR WG adoption? The correspo=
nding IGP drafts are already respective WG documents.

=20

Thanks,

Ketan

=20

From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Jeff Tantsura
Sent: 04 March 2017 16:21
To: Robert Raszuk <robert@raszuk.net>
Cc: idr wg <idr@ietf.org>; Van De Velde, Gunter (Nokia - BE) <gunter.van_de=
_velde@nokia.com>
Subject: Re: [Idr] FW: New Version Notification for draft-vandevelde-idr-bg=
p-ls-segment-routing-rld-01.txt

=20

Robert,

=20

Please take a look at 02 isis draft published yesterday, we have added type=
 flag that defines the type of a SID and could be used with v6 dataplane.

The limitations wrt label operations are well understood across both custom=
 and merchant  silicon and from use case prospective had to be addressed fir=
st.

V6 dataplane will be added.

=20

Please let me know if this answers your questions and addresses concerns.

=20

Regards,

Jeff


On Mar 4, 2017, at 06:24, Robert Raszuk <robert@raszuk.net> wrote:

Jeff,

=20

MSD drafts (yours invluded) talks about labels while MSD as such seems to b=
e defined as maximum SID depth.

=20

In SRv6 SID is *NOT* a label. So why not to define MSD properly across all =
SR scenarios?

=20

Are we going to have now new zoo of drafts now defining MSD for SRv6 vs cur=
rent docs just defining MSD for SR-MPLS ?

=20

Cheers,

R.

=20

=20

=20

On Mar 4, 2017 9:41 AM, "Jeff Tantsura" <jefftant.ietf@gmail.com> wrote:

Robert,

That's done in MSD drafts.
In the recently published isis draft we have also introduced MSD type flag =
that would be used to signal different types of SID's: recirculated labels, =
EL's, etc

=20

Cheers,

Jeff

=20

On Fri, Mar 3, 2017 at 22:35 Robert Raszuk <robert@raszuk.net> wrote:

Hey Gunter,

=20

Good proposal however why do you only think about labels ?

=20

Seriously if this is to move fwd let's add ability to signal also following=
 elements:

=20

* ability to punt SR-MPLS to local CPU (slow path) when not handled in hard=
ware (per node basis)

=20

* add signalling for number of SRv6 SRHs supported per node/per LC

=20

* add signalling for depth per SRH and total of SIDs supported per node/per=
 LC

=20

* signal ability to punt to slow path or not for longer then support SRH st=
ack or number of SIDs in each SRH structure.

=20

Cheers,
Robert.

=20

=20

On Fri, Mar 3, 2017 at 3:55 PM, Van De Velde, Gunter (Nokia - BE) <gunter.v=
an_de_velde@nokia.com> wrote:

Heads-up=E2=80=A6 Happy to learn feedback and comments.

This draft is short and defines the attribute to use for BGP-LS to expose a
node RLD "Readable Label Depth" to a centralised controller (PCE/SDN).

G/

On 03/03/2017, 14:21, "internet-drafts@ietf.org" <internet-drafts@ietf.org>=
 wrote:


    A new version of I-D, draft-vandevelde-idr-bgp-ls-segment-routing-rld-0=
1.txt
    has been successfully submitted by Gunter Van de Velde and posted to th=
e
    IETF repository.

    Name:               draft-vandevelde-idr-bgp-ls-segment-routing-rld
    Revision:   01
    Title:              Signalling RLD using BGP-LS
    Document date:      2017-03-03
    Group:              Individual Submission
    Pages:              5
    URL:            https://www.ietf.org/internet-drafts/draft-vandevelde-i=
dr-bgp-ls-segment-routing-rld-01.txt
    Status:         https://datatracker.ietf.org/doc/draft-vandevelde-idr-b=
gp-ls-segment-routing-rld/
    Htmlized:       https://tools.ietf.org/html/draft-vandevelde-idr-bgp-ls=
-segment-routing-rld-01
    Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-vandevelde-idr-=
bgp-ls-segment-routing-rld-01

    Abstract:
       This document defines the attribute to use for BGP-LS to expose a
       node RLD "Readable Label Depth" to a centralised controller (PCE/
       SDN).





    Please note that it may take a couple of minutes from the time of submi=
ssion
    until the htmlized version and diff are available at tools.ietf.org.

    The IETF Secretariat



_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr

=20

_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr


--B_3574665270_884360821
Content-type: text/html;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:schema=
s-microsoft-com:office:word" xmlns:m=3D"http://schemas.microsoft.com/office/20=
04/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta name=3DTitle c=
ontent=3D""><meta name=3DKeywords content=3D""><meta http-equiv=3DContent-Type conte=
nt=3D"text/html; charset=3Dutf-8"><meta name=3DGenerator content=3D"Microsoft Word 1=
5 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:Arial;
	panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:PMingLiU;
	panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Balloon Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:Tahoma;}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:Tahoma;}
span.m9028297214918060569gmailmsg
	{mso-style-name:m_9028297214918060569gmail_msg;}
span.EmailStyle20
	{mso-style-type:personal;
	font-family:Calibri;
	color:#1F497D;}
span.EmailStyle21
	{mso-style-type:personal;
	font-family:Calibri;
	color:windowtext;}
span.EmailStyle22
	{mso-style-type:personal;
	font-family:Calibri;
	color:#1F497D;}
span.EmailStyle23
	{mso-style-type:personal-reply;
	font-family:Calibri;
	color:windowtext;}
span.msoIns
	{mso-style-type:export-only;
	mso-style-name:"";
	text-decoration:underline;
	color:teal;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style></head><body bgcolor=3Dwhite lang=3DEN-US link=3Dblue vlink=3Dpurple><di=
v class=3DWordSection1><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-f=
amily:Calibri'>Thanks Sue, much appreciated!<o:p></o:p></span></p><div><p cl=
ass=3DMsoNormal><span style=3D'font-size:10.5pt;font-family:Calibri;color:black'=
><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:10.5p=
t;font-family:Calibri;color:black'>Cheers,<o:p></o:p></span></p><p class=3DMso=
Normal><span style=3D'font-size:10.5pt;font-family:Calibri;color:black'>Jeff<o=
:p></o:p></span></p></div><p class=3DMsoNormal><span style=3D'font-size:11.0pt;f=
ont-family:Calibri'><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span sty=
le=3D'font-size:11.0pt;font-family:Calibri'><o:p>&nbsp;</o:p></span></p><div s=
tyle=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>=
<p class=3DMsoNormal style=3D'margin-left:.5in'><b><span style=3D'font-family:Cali=
bri;color:black'>From: </span></b><span style=3D'font-family:Calibri;color:bla=
ck'>Susan Hares &lt;shares@ndzh.com&gt;<br><b>Date: </b>Monday, April 10, 20=
17 at 09:36<br><b>To: </b>'Jeff Tantsura' &lt;jefftant.ietf@gmail.com&gt;, &=
quot;'Ketan Talaulikar Talaulikar (ketant)'&quot; &lt;ketant@cisco.com&gt;, =
&quot;robert@raszuk.net&quot; &lt;robert@raszuk.net&gt;<br><b>Cc: </b>'idr w=
g' &lt;idr@ietf.org&gt;, &quot;'Van De Velde, Gunter (Nokia - BE)'&quot; &lt=
;gunter.van_de_velde@nokia.com&gt;<br><b>Subject: </b>RE: [Idr] FW: New Vers=
ion Notification for draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt<=
o:p></o:p></span></p></div><div><p class=3DMsoNormal style=3D'margin-left:.5in'>=
<o:p>&nbsp;</o:p></p></div><p class=3DMsoNormal style=3D'margin-left:.5in'><span=
 style=3D'font-size:11.0pt;font-family:Calibri;color:#1F497D'>Jeff:</span><o:p=
></o:p></p><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-siz=
e:11.0pt;font-family:Calibri;color:#1F497D'>&nbsp;</span><o:p></o:p></p><p c=
lass=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-size:11.0pt;font-f=
amily:Calibri;color:#1F497D'>I will start IPR for WG adoption calls later to=
day. </span><o:p></o:p></p><p class=3DMsoNormal style=3D'margin-left:.5in'><span=
 style=3D'font-size:11.0pt;font-family:Calibri;color:#1F497D'>&nbsp;</span><o:=
p></o:p></p><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-si=
ze:11.0pt;font-family:Calibri;color:#1F497D'>Sue </span><o:p></o:p></p><p cl=
ass=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-size:11.0pt;font-fa=
mily:Calibri;color:#1F497D'>&nbsp;</span><o:p></o:p></p><div><div style=3D'bor=
der:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=3D=
MsoNormal style=3D'margin-left:.5in'><b><span style=3D'font-size:10.0pt;font-fam=
ily:Tahoma'>From:</span></b><span style=3D'font-size:10.0pt;font-family:Tahoma=
'> Idr [mailto:idr-bounces@ietf.org] <b>On Behalf Of </b>Jeff Tantsura<br><b=
>Sent:</b> Monday, April 10, 2017 12:11 PM<br><b>To:</b> Ketan Talaulikar Ta=
laulikar (ketant); Robert Raszuk<br><b>Cc:</b> idr wg; Van De Velde, Gunter =
(Nokia - BE)<br><b>Subject:</b> Re: [Idr] FW: New Version Notification for d=
raft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt</span><o:p></o:p></p><=
/div></div><p class=3DMsoNormal style=3D'margin-left:.5in'>&nbsp;<o:p></o:p></p>=
<p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-size:11.0pt;fo=
nt-family:Calibri'>Hi Ketan,</span><o:p></o:p></p><p class=3DMsoNormal style=3D'=
margin-left:.5in'><span style=3D'font-size:11.0pt;font-family:Calibri'>&nbsp;<=
/span><o:p></o:p></p><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=
=3D'font-size:11.0pt;font-family:Calibri'>During my presentation in Chicago I =
have asked for adoption, I assume they would do so soon.</span><o:p></o:p></=
p><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-size:11.0pt;=
font-family:Calibri'>Wrt email topic &#8211; please do not mix MSD documents=
 with RLD ones.</span><o:p></o:p></p><p class=3DMsoNormal style=3D'margin-left:.=
5in'><span style=3D'font-size:11.0pt;font-family:Calibri'>&nbsp;</span><o:p></=
o:p></p><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font-size:1=
1.0pt;font-family:Calibri'>Thanks!</span><o:p></o:p></p><div><p class=3DMsoNor=
mal style=3D'margin-left:.5in'><span style=3D'font-size:10.5pt;font-family:Calib=
ri;color:black'>&nbsp;</span><o:p></o:p></p><p class=3DMsoNormal style=3D'margin=
-left:.5in'><span style=3D'font-size:10.5pt;font-family:Calibri;color:black'>C=
heers,</span><o:p></o:p></p><p class=3DMsoNormal style=3D'margin-left:.5in'><spa=
n style=3D'font-size:10.5pt;font-family:Calibri;color:black'>Jeff</span><o:p><=
/o:p></p></div><p class=3DMsoNormal style=3D'margin-left:.5in'><span style=3D'font=
-size:11.0pt;font-family:Calibri'>&nbsp;</span><o:p></o:p></p><p class=3DMsoNo=
rmal style=3D'margin-left:.5in'><span style=3D'font-size:11.0pt;font-family:Cali=
bri'>&nbsp;</span><o:p></o:p></p><div style=3D'border:none;border-top:solid #B=
5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal style=3D'margin-left=
:1.0in'><b><span style=3D'font-family:Calibri;color:black'>From: </span></b><s=
pan style=3D'font-family:Calibri;color:black'>&quot;Ketan Talaulikar Talaulika=
r (ketant)&quot; &lt;<a href=3D"mailto:ketant@cisco.com">ketant@cisco.com</a>&=
gt;<br><b>Date: </b>Monday, April 10, 2017 at 08:30<br><b>To: </b>Jeff Tants=
ura &lt;<a href=3D"mailto:jefftant.ietf@gmail.com">jefftant.ietf@gmail.com</a>=
&gt;, &quot;<a href=3D"mailto:robert@raszuk.net">robert@raszuk.net</a>&quot; &=
lt;<a href=3D"mailto:robert@raszuk.net">robert@raszuk.net</a>&gt;<br><b>Cc: </=
b>idr wg &lt;<a href=3D"mailto:idr@ietf.org">idr@ietf.org</a>&gt;, &quot;Van D=
e Velde, Gunter (Nokia - BE)&quot; &lt;<a href=3D"mailto:gunter.van_de_velde@n=
okia.com">gunter.van_de_velde@nokia.com</a>&gt;<br><b>Subject: </b>RE: [Idr]=
 FW: New Version Notification for draft-vandevelde-idr-bgp-ls-segment-routin=
g-rld-01.txt</span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margi=
n-left:1.0in'>&nbsp;<o:p></o:p></p></div><p class=3DMsoNormal style=3D'margin-le=
ft:1.0in'><span style=3D'font-size:11.0pt;font-family:Calibri;color:#1F497D'>H=
i Jeff/Authors,</span><o:p></o:p></p><p class=3DMsoNormal style=3D'margin-left:1=
.0in'><span style=3D'font-size:11.0pt;font-family:Calibri;color:#1F497D'>&nbsp=
;</span><o:p></o:p></p><p class=3DMsoNormal style=3D'margin-left:1.0in'><span st=
yle=3D'font-size:11.0pt;font-family:Calibri;color:#1F497D'>Could we get this M=
SD BGP-LS draft polled for IDR WG adoption? The corresponding IGP drafts are=
 already respective WG documents.</span><o:p></o:p></p><p class=3DMsoNormal st=
yle=3D'margin-left:1.0in'><span style=3D'font-size:11.0pt;font-family:Calibri;co=
lor:#1F497D'>&nbsp;</span><o:p></o:p></p><p class=3DMsoNormal style=3D'margin-le=
ft:1.0in'><span style=3D'font-size:11.0pt;font-family:Calibri;color:#1F497D'>T=
hanks,</span><o:p></o:p></p><p class=3DMsoNormal style=3D'margin-left:1.0in'><sp=
an style=3D'font-size:11.0pt;font-family:Calibri;color:#1F497D'>Ketan</span><o=
:p></o:p></p><p class=3DMsoNormal style=3D'margin-left:1.0in'><span style=3D'font-=
size:11.0pt;font-family:Calibri;color:#1F497D'>&nbsp;</span><o:p></o:p></p><=
div><div style=3D'border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in=
 0in 0in'><p class=3DMsoNormal style=3D'margin-left:1.0in'><b><span style=3D'font-=
size:11.0pt;font-family:Calibri'>From:</span></b><span style=3D'font-size:11.0=
pt;font-family:Calibri'> Idr [<a href=3D"mailto:idr-bounces@ietf.org">mailto:i=
dr-bounces@ietf.org</a>] <b>On Behalf Of </b>Jeff Tantsura<br><b>Sent:</b> 0=
4 March 2017 16:21<br><b>To:</b> Robert Raszuk &lt;<a href=3D"mailto:robert@ra=
szuk.net">robert@raszuk.net</a>&gt;<br><b>Cc:</b> idr wg &lt;<a href=3D"mailto=
:idr@ietf.org">idr@ietf.org</a>&gt;; Van De Velde, Gunter (Nokia - BE) &lt;<=
a href=3D"mailto:gunter.van_de_velde@nokia.com">gunter.van_de_velde@nokia.com<=
/a>&gt;<br><b>Subject:</b> Re: [Idr] FW: New Version Notification for draft-=
vandevelde-idr-bgp-ls-segment-routing-rld-01.txt</span><o:p></o:p></p></div>=
</div><p class=3DMsoNormal style=3D'margin-left:1.0in'>&nbsp;<o:p></o:p></p><div=
><p class=3DMsoNormal style=3D'margin-left:1.0in'>Robert,<o:p></o:p></p></div><d=
iv><p class=3DMsoNormal style=3D'margin-left:1.0in'>&nbsp;<o:p></o:p></p></div><=
div><p class=3DMsoNormal style=3D'margin-left:1.0in'>Please take a look at 02 is=
is draft published yesterday, we have added type flag that defines the type =
of a SID and could be used with v6 dataplane.<o:p></o:p></p></div><div><p cl=
ass=3DMsoNormal style=3D'margin-left:1.0in'>The limitations wrt label operations=
 are well understood across both custom and merchant &nbsp;silicon and from =
use case prospective had to be addressed first.<o:p></o:p></p></div><div><p =
class=3DMsoNormal style=3D'margin-left:1.0in'>V6 dataplane will be added.<o:p></=
o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>&nbsp;<o:p><=
/o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>Please let =
me know if this answers your questions and addresses concerns.<o:p></o:p></p=
></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>&nbsp;<o:p></o:p></=
p><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>Regards,<o:p></o:p></p><=
div><p class=3DMsoNormal style=3D'margin-left:1.0in'>Jeff<o:p></o:p></p></div></=
div></div><div><p class=3DMsoNormal style=3D'mso-margin-top-alt:0in;margin-right=
:0in;margin-bottom:12.0pt;margin-left:1.0in'><br>On Mar 4, 2017, at 06:24, R=
obert Raszuk &lt;<a href=3D"mailto:robert@raszuk.net">robert@raszuk.net</a>&gt=
; wrote:<o:p></o:p></p></div><blockquote style=3D'margin-top:5.0pt;margin-bott=
om:5.0pt'><div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>Jeff,<o:p><=
/o:p></p><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>&nbsp;<o:p></o:p>=
</p></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>MSD drafts (your=
s invluded) talks about labels while MSD as such seems to be defined as maxi=
mum SID depth.<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-lef=
t:1.0in'>&nbsp;<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-le=
ft:1.0in'>In SRv6 SID is *NOT* a label. So why not to define MSD properly ac=
ross all SR scenarios?<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'ma=
rgin-left:1.0in'>&nbsp;<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'm=
argin-left:1.0in'>Are we going to have now new zoo of drafts now defining MS=
D for SRv6 vs current docs just defining MSD for SR-MPLS ?<o:p></o:p></p></d=
iv><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>&nbsp;<o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>Cheers,<o:p></o:p></p>=
</div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>R.<o:p></o:p></p></d=
iv><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>&nbsp;<o:p></o:p></p></=
div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>&nbsp;<o:p></o:p></p><=
/div></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>&nbsp;<o:p></o:=
p></p><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>On Mar 4, 2017 9:41 =
AM, &quot;Jeff Tantsura&quot; &lt;<a href=3D"mailto:jefftant.ietf@gmail.com">j=
efftant.ietf@gmail.com</a>&gt; wrote:<o:p></o:p></p><blockquote style=3D'borde=
r:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left=
:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'><div><p class=3D=
MsoNormal style=3D'margin-left:1.0in'>Robert,<br><br>That's done in MSD drafts=
.<br>In the recently published isis draft we have also introduced MSD type f=
lag that would be used to signal different types of SID's: recirculated labe=
ls, EL's, etc<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left=
:1.0in'>&nbsp;<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-lef=
t:1.0in'>Cheers,<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-l=
eft:1.0in'>Jeff<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-le=
ft:1.0in'>&nbsp;<o:p></o:p></p><div><div><p class=3DMsoNormal style=3D'margin-le=
ft:1.0in'>On Fri, Mar 3, 2017 at 22:35 Robert Raszuk &lt;<a href=3D"mailto:rob=
ert@raszuk.net" target=3D"_blank">robert@raszuk.net</a>&gt; wrote:<o:p></o:p><=
/p></div><blockquote style=3D'border:none;border-left:solid #CCCCCC 1.0pt;padd=
ing:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;ma=
rgin-bottom:5.0pt'><div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'><s=
pan style=3D'font-family:Arial'>Hey Gunter,</span><o:p></o:p></p></div><div><p=
 class=3DMsoNormal style=3D'margin-left:1.0in'><span style=3D'font-family:Arial'>&=
nbsp;</span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:=
1.0in'><span style=3D'font-family:Arial'>Good proposal however why do you only=
 think about labels ?</span><o:p></o:p></p></div><div><p class=3DMsoNormal sty=
le=3D'margin-left:1.0in'><span style=3D'font-family:Arial'>&nbsp;</span><o:p></o=
:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'><span style=3D'=
font-family:Arial'>Seriously if this is to move fwd let's add ability to sig=
nal also following elements:</span><o:p></o:p></p></div><div><p class=3DMsoNor=
mal style=3D'margin-left:1.0in'><span style=3D'font-family:Arial'>&nbsp;</span><=
o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'><span =
style=3D'font-family:Arial'>* ability to punt SR-MPLS to local CPU (slow path)=
 when not handled in hardware (per node basis)</span><o:p></o:p></p></div><d=
iv><p class=3DMsoNormal style=3D'margin-left:1.0in'><span style=3D'font-family:Ari=
al'>&nbsp;</span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-=
left:1.0in'><span style=3D'font-family:Arial'>* add signalling for number of S=
Rv6 SRHs supported per node/per LC</span><o:p></o:p></p></div><div><p class=3D=
MsoNormal style=3D'margin-left:1.0in'><span style=3D'font-family:Arial'>&nbsp;</=
span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>=
<span style=3D'font-family:Arial'>* add signalling for depth per SRH and total=
 of SIDs supported per node/per LC</span><o:p></o:p></p></div><div><p class=3D=
MsoNormal style=3D'margin-left:1.0in'><span style=3D'font-family:Arial'>&nbsp;</=
span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>=
<span style=3D'font-family:Arial'>* signal ability to punt to slow path or not=
 for longer then support SRH stack or number of SIDs in each SRH structure.<=
/span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'=
><span style=3D'font-family:Arial'>&nbsp;</span><o:p></o:p></p></div><div><p c=
lass=3DMsoNormal style=3D'margin-left:1.0in'><span style=3D'font-family:Arial'>Che=
ers,<br>Robert.</span><o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'ma=
rgin-left:1.0in'><span style=3D'font-family:Arial'>&nbsp;</span><o:p></o:p></p=
></div></div><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>&nbsp;<o:p></=
o:p></p><div><p class=3DMsoNormal style=3D'margin-left:1.0in'>On Fri, Mar 3, 201=
7 at 3:55 PM, Van De Velde, Gunter (Nokia - BE) <span class=3Dm902829721491806=
0569gmailmsg>&lt;<a href=3D"mailto:gunter.van_de_velde@nokia.com" target=3D"_bla=
nk">gunter.van_de_velde@nokia.com</a>&gt;</span> wrote:<o:p></o:p></p><block=
quote style=3D'border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in=
 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0=
pt'><p class=3DMsoNormal style=3D'margin-left:1.0in'>Heads-up&#8230; Happy to le=
arn feedback and comments.<span style=3D'font-family:PMingLiU'><br><br></span>=
This draft is short and defines the attribute to use for BGP-LS to expose a<=
br>node RLD &quot;Readable Label Depth&quot; to a centralised controller (PC=
E/SDN).<br><br>G/<br><br>On 03/03/2017, 14:21, &quot;<a href=3D"mailto:interne=
t-drafts@ietf.org" target=3D"_blank">internet-drafts@ietf.org</a>&quot; &lt;<a=
 href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank">internet-drafts@ietf=
.org</a>&gt; wrote:<br><br><br>&nbsp; &nbsp; A new version of I-D, draft-van=
develde-idr-bgp-ls-segment-routing-rld-01.txt<br>&nbsp; &nbsp; has been succ=
essfully submitted by Gunter Van de Velde and posted to the<br>&nbsp; &nbsp;=
 IETF repository.<br><br>&nbsp; &nbsp; Name:&nbsp; &nbsp; &nbsp; &nbsp; &nbs=
p; &nbsp; &nbsp; &nbsp;draft-vandevelde-idr-bgp-ls-segment-routing-rld<br>&n=
bsp; &nbsp; Revision:&nbsp; &nbsp;01<br>&nbsp; &nbsp; Title:&nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; Signalling RLD using BGP-LS<br>&nbsp; &nbsp=
; Document date:&nbsp; &nbsp; &nbsp; 2017-03-03<br>&nbsp; &nbsp; Group:&nbsp=
; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Individual Submission<br>&nbsp; =
&nbsp; Pages:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 5<br>&nbsp; &n=
bsp; URL:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a href=3D"https://www.ietf=
.org/internet-drafts/draft-vandevelde-idr-bgp-ls-segment-routing-rld-01.txt"=
 target=3D"_blank">https://www.ietf.org/internet-drafts/draft-vandevelde-idr-b=
gp-ls-segment-routing-rld-01.txt</a><br>&nbsp; &nbsp; Status:&nbsp; &nbsp; &=
nbsp; &nbsp; &nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-vandeveld=
e-idr-bgp-ls-segment-routing-rld/" target=3D"_blank">https://datatracker.ietf.=
org/doc/draft-vandevelde-idr-bgp-ls-segment-routing-rld/</a><br>&nbsp; &nbsp=
; Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://tools.ietf.org/html/d=
raft-vandevelde-idr-bgp-ls-segment-routing-rld-01" target=3D"_blank">https://t=
ools.ietf.org/html/draft-vandevelde-idr-bgp-ls-segment-routing-rld-01</a><br=
>&nbsp; &nbsp; Diff:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https:=
//www.ietf.org/rfcdiff?url2=3Ddraft-vandevelde-idr-bgp-ls-segment-routing-rld-=
01" target=3D"_blank">https://www.ietf.org/rfcdiff?url2=3Ddraft-vandevelde-idr-b=
gp-ls-segment-routing-rld-01</a><br><br>&nbsp; &nbsp; Abstract:<br>&nbsp; &n=
bsp; &nbsp; &nbsp;This document defines the attribute to use for BGP-LS to e=
xpose a<br>&nbsp; &nbsp; &nbsp; &nbsp;node RLD &quot;Readable Label Depth&qu=
ot; to a centralised controller (PCE/<br>&nbsp; &nbsp; &nbsp; &nbsp;SDN).<br=
><br><br><br><br><br>&nbsp; &nbsp; Please note that it may take a couple of =
minutes from the time of submission<br>&nbsp; &nbsp; until the htmlized vers=
ion and diff are available at <a href=3D"http://tools.ietf.org" target=3D"_blank=
">tools.ietf.org</a>.<br><br>&nbsp; &nbsp; The IETF Secretariat<br><br><br><=
br>_______________________________________________<br>Idr mailing list<br><a=
 href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br><a href=3D"htt=
ps://www.ietf.org/mailman/listinfo/idr" target=3D"_blank">https://www.ietf.org=
/mailman/listinfo/idr</a><o:p></o:p></p></blockquote></div><p class=3DMsoNorma=
l style=3D'margin-left:1.0in'>&nbsp;<o:p></o:p></p></div><p class=3DMsoNormal st=
yle=3D'margin-left:1.0in'>_______________________________________________<br>I=
dr mailing list<br><a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.or=
g</a><br><a href=3D"https://www.ietf.org/mailman/listinfo/idr" target=3D"_blank"=
>https://www.ietf.org/mailman/listinfo/idr</a><o:p></o:p></p></blockquote></=
div></div></blockquote></div></div></div></blockquote></div></body></html>

--B_3574665270_884360821--



From nobody Mon Apr 10 14:23:49 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8F701243FE; Mon, 10 Apr 2017 14:23:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OL-Dm0di5t-L; Mon, 10 Apr 2017 14:23:46 -0700 (PDT)
Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D0D42126C83; Mon, 10 Apr 2017 14:23:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2164; q=dns/txt; s=iport; t=1491859426; x=1493069026; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=kHihzv6Sw8iVFbTVzqCtLnX/0ahiI2tn42BH/OliSV4=; b=Dqwm5M3mOhatde6+TAlytN4LCa0KgLl2ZkNQWhh+MWKiK4T87kLfCvIw 77jkbbBqo+gwsKLvaolp2xsWp26FdD/pY6xFDUvmcnSi6j1QiLClOirG2 Jyc5S++eK+O/8cpJfGZFMkmTmOmmMHzk7OGiujjsV74aDN7hcoSvFsO8U A=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0A0AgB69+tY/4wNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1NhgQsHg1+KE5EplXaCDyELhXgCGoNOPxgBAgEBAQEBAQFrHQu?= =?us-ascii?q?FFgIBAwEBIRE6CxACAQgaAh8HAgICJQsUAQYBBgMCBA4Fig8OqQCCJosBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBGAWBC4VFggUJgmKHXC6CMQWWIIZbAYZ/i1mBf4U?= =?us-ascii?q?ug1qGOpN/AR84gQVbFUERAYR+gUp1iFKBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,183,1488844800"; d="scan'208";a="409661962"
Received: from alln-core-7.cisco.com ([173.36.13.140]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 10 Apr 2017 21:23:45 +0000
Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id v3ALNibn031525 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 10 Apr 2017 21:23:44 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 10 Apr 2017 16:23:44 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Mon, 10 Apr 2017 16:23:44 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: "idr@ietf.org" <idr@ietf.org>
CC: "grow@ietf.org" <grow@ietf.org>
Thread-Topic: [GROW] Last Call: <draft-ietf-grow-bgp-reject-04.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSrYwvDiD4yKVUKkK3UiPT2H5J+KG/NyCA
Date: Mon, 10 Apr 2017 21:23:44 +0000
Message-ID: <71A56CDB-B71C-4513-9E3B-6F5391FE8501@cisco.com>
References: <149134206733.1216.17171963660891761162.idtracker@ietfa.amsl.com>
In-Reply-To: <149134206733.1216.17171963660891761162.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: text/plain; charset="utf-8"
Content-ID: <FF89B49299632D47A230296C9B5CF009@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/gvvc7gfI7hx1-X3YtDvbhXWX6Xs>
Subject: [Idr] FW: [GROW] Last Call: <draft-ietf-grow-bgp-reject-04.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Apr 2017 21:23:48 -0000
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From nobody Mon Apr 10 14:27:38 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D4A2124D6C; Mon, 10 Apr 2017 14:27:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mi4SIPIMYGZO; Mon, 10 Apr 2017 14:27:34 -0700 (PDT)
Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1635126C83; Mon, 10 Apr 2017 14:27:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1894; q=dns/txt; s=iport; t=1491859654; x=1493069254; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=7YVObTNN5UV8mjZyErlzOz4ORlWo9D6MjGlztEDEjm0=; b=P5oRMZUGH1CxXMRpsqbegOdAuQulTTYlrudktyEqh4UHG4JVIQAXWMpq MyrRH0lcQBFmBDJLZAfRpKb9+vC+1nbEW9q5acFLv4noKxzyFAKOuj3CZ kx265guIUVEBSeIkKXF8+YMdqrZ2BlYQ0K6xb9tehFDsWX3+YQwhHYm9n g=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BFAgBu+OtY/5ldJa1cGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBg1NhgQsHg1+KE6cfgg8uhXYCGoNOPxgBAgEBAQEBAQFrHQuFFgYjETo?= =?us-ascii?q?LEAIBCBoCHwcCAgIwFAEGAQYDAgQOBYoPDqh+giaLAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBARgFgQuFRYIFgmuHXC6CMQWWIIZbAYZ/i1mBf4UuihSTfwEfOIEFWxV?= =?us-ascii?q?SAYR+gUp1iFKBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,183,1488844800"; d="scan'208";a="410196068"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 10 Apr 2017 21:27:33 +0000
Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v3ALRXd6021891 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 10 Apr 2017 21:27:33 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 10 Apr 2017 16:27:33 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Mon, 10 Apr 2017 16:27:33 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: "idr@ietf.org" <idr@ietf.org>
CC: "grow@ietf.org" <grow@ietf.org>
Thread-Topic: Last Call: <draft-ietf-grow-large-communities-usage-05.txt> (Use of BGP Large Communities) to Informational RFC
Thread-Index: AQHSr8JJAIcq/mh6ZEaTbBD7ZEChuqG/M8UA
Date: Mon, 10 Apr 2017 21:27:33 +0000
Message-ID: <73F21891-0C4E-41A2-846C-9E9ACB43B125@cisco.com>
References: <149158518251.11127.8008659284325510446.idtracker@ietfa.amsl.com>
In-Reply-To: <149158518251.11127.8008659284325510446.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: text/plain; charset="utf-8"
Content-ID: <0426FB5DF79B0B488A28594DE8F8E57E@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/wVYZ2T8z9almXwNKTmrr-JH43TI>
Subject: [Idr] FW: Last Call: <draft-ietf-grow-large-communities-usage-05.txt> (Use of BGP Large Communities) to Informational RFC
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Apr 2017 21:27:36 -0000
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From nobody Mon Apr 10 17:42:22 2017
Return-Path: <szhong@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 723CE1293F8 for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 17:42:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.92
X-Spam-Level: 
X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZJxRhcCBJZ1Y for <idr@ietfa.amsl.com>; Mon, 10 Apr 2017 17:42:17 -0700 (PDT)
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0091.outbound.protection.outlook.com [104.47.32.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 67BD91293EC for <idr@ietf.org>; Mon, 10 Apr 2017 17:42:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=2GiOijkN/lJ0w9VxZ0wKe2o3shNwlEWX4sT0HU8hLUQ=; b=OydOsSXWnrtsxRQWWhUw2mdSzHpPZM3ep2agIYMStj8He/LT5lfu3sVxpiXFh6U0q0utJ1QRcTYsqjQze2AWhQ/WFd/c5uZQl648cqchgRQK3dZzLFX/QLqX98epZqkqd/ZtoCC957PfHdVAXvdkw5+gG3aSUZFK9SAigJg1AUY=
Received: from CY4PR05MB2886.namprd05.prod.outlook.com (10.169.183.20) by CY4PR05MB2886.namprd05.prod.outlook.com (10.169.183.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.5; Tue, 11 Apr 2017 00:42:13 +0000
Received: from CY4PR05MB2886.namprd05.prod.outlook.com ([10.169.183.20]) by CY4PR05MB2886.namprd05.prod.outlook.com ([10.169.183.20]) with mapi id 15.01.1034.007; Tue, 11 Apr 2017 00:42:13 +0000
From: Simon Zhong <szhong@juniper.net>
To: "Ketan Talaulikar Talaulikar (ketant)" <ketant@cisco.com>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-routing-ext-01
Thread-Index: AdKxXgD4Cpf4ePb3QmGGH9sXHoVJLwAsG3PwABIaYEA=
Date: Tue, 11 Apr 2017 00:42:13 +0000
Message-ID: <CY4PR05MB288662F7AF9B773667B5E249D3000@CY4PR05MB2886.namprd05.prod.outlook.com>
References: <CY4PR05MB28860927E141274AFB83BB7ED30E0@CY4PR05MB2886.namprd05.prod.outlook.com> <33d6b2c1e8164ae6abd36010fce175bb@XCH-ALN-008.cisco.com>
In-Reply-To: <33d6b2c1e8164ae6abd36010fce175bb@XCH-ALN-008.cisco.com>
Accept-Language: en-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=juniper.net;
x-originating-ip: [66.129.241.13]
x-microsoft-exchange-diagnostics: 1; CY4PR05MB2886; 7:KeGVpw7uxscdvOrOduthoifDIo4f7wJmUj/u1XFO8BdZMBHB+FBJV2YXmGcX8nxCyhskSkVhUQ4P8SnZp5ucckeR9s7GMLDeUuQ2MkGil6fTE20WRBcaIDLiZUncXjbfWhgmxBxj4D+0VfF2lkzx8mLHfxUHxQbHEHVmS2FisXAr1YZXi4+Lrfx8jgQWTls0Xx84qaUfAeDt++uNFsGNRH0CJi+U4ujYj5DAJZ1iGJ+Ktxo21x4OX12WQX5s8LsEkW4lG+y/j/xAoEffANcqveHbifQx1soXild0tDVGANZBw8Pa5svMXHYDS3UlTE6Qv6XVfzSX2B8OyAtDk4K1yQ==
x-ms-office365-filtering-correlation-id: 4b403164-5ed9-4b68-73f6-08d4807398a8
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081);  SRVR:CY4PR05MB2886; 
x-microsoft-antispam-prvs: <CY4PR05MB28863A56589E37220DC73C05D3000@CY4PR05MB2886.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(138986009662008)(95692535739014)(21748063052155); 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(6055026)(6041248)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(20161123555025)(20161123564025)(20161123560025)(6072148); SRVR:CY4PR05MB2886; BCL:0; PCL:0; RULEID:; SRVR:CY4PR05MB2886; 
x-forefront-prvs: 0274272F87
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39850400002)(39860400002)(39410400002)(39840400002)(39400400002)(39450400003)(51914003)(6306002)(53936002)(236005)(53546009)(25786009)(9686003)(81166006)(66066001)(3660700001)(6506006)(8936002)(50986999)(54356999)(230783001)(76176999)(55016002)(99286003)(2501003)(3280700002)(33656002)(54896002)(6436002)(8676002)(102836003)(6116002)(790700001)(3846002)(189998001)(2950100002)(229853002)(86362001)(122556002)(74316002)(7696004)(7736002)(5660300001)(77096006)(38730400002)(6246003); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR05MB2886; H:CY4PR05MB2886.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY4PR05MB288662F7AF9B773667B5E249D3000CY4PR05MB2886namp_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Apr 2017 00:42:13.6363 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR05MB2886
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Ez2hk-8QdDDkNBvO3azcjxcwMww>
Subject: Re: [Idr] SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-routing-ext-01
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Apr 2017 00:42:19 -0000

--_000_CY4PR05MB288662F7AF9B773667B5E249D3000CY4PR05MB2886namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Thanks for the clarification Ketan.

/Simon

From: Ketan Talaulikar Talaulikar (ketant) [mailto:ketant@cisco.com]
Sent: Monday, April 10, 2017 11:26
To: Simon Zhong <szhong@juniper.net>; idr@ietf.org
Subject: RE: SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-routing-e=
xt-01

Hi Simon,

The pair "Range Size + SID/Label sub-TLV" would be repeated if there are mo=
re than one SRGB/SRLB ranges advertised by a node.

Thanks,
Ketan

From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Simon Zhong
Sent: 09 April 2017 11:21
To: idr@ietf.org<mailto:idr@ietf.org>
Subject: [Idr] SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-routing=
-ext-01

Hi,

I'm working on Wireshark bgp dissector and following description confuses m=
e.

2.1.1.  SR-Capabilities TLV

   The SR Capabilities sub-TLV has following format:
......
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                  Range Size                   |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   //                SID/Label Sub-TLV (variable)                 //
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

This implies that there's one "Range Size" and one or more "SID/Lable Sub-T=
LV), however later in this section, it says:

     One or more entries, each of which have the following format:

         Range Size: 3 octet value indicating the number of labels in
         the range.

         SID/Label sub-TLV (as defined in Section 2.3.7.2).

Which sounds like one or more "Range Size" + "SID/Lable sub-TLV" combo are =
allowed.

The same applies to SR Local Block TLV as well.

So what's the intended behaviour? Thanks.

/Simon


--_000_CY4PR05MB288662F7AF9B773667B5E249D3000CY4PR05MB2886namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:DengXian;
	panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"\@DengXian";
	panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:12.0pt;
	font-family:"Times New Roman",serif;}
p.emailquote, li.emailquote, div.emailquote
	{mso-style-name:emailquote;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:1.0pt;
	font-size:12.0pt;
	font-family:"Times New Roman",serif;}
span.EmailStyle19
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:#1F497D;}
span.EmailStyle20
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:#1F497D;}
span.EmailStyle21
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D">Thanks for the clarification Ketan.<o=
:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D">/Simon<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#1F497D"><o:p>&nbsp;</o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">From:</span></b><span style=3D"font-size:11.0pt;=
font-family:&quot;Calibri&quot;,sans-serif"> Ketan Talaulikar Talaulikar (k=
etant) [mailto:ketant@cisco.com]
<br>
<b>Sent:</b> Monday, April 10, 2017 11:26<br>
<b>To:</b> Simon Zhong &lt;szhong@juniper.net&gt;; idr@ietf.org<br>
<b>Subject:</b> RE: SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-ro=
uting-ext-01<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN=
-US">Hi Simon,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN=
-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN=
-US">The pair &#8220;Range Size &#43; SID/Label sub-TLV&#8221; would be rep=
eated if there are more than one SRGB/SRLB ranges advertised by
 a node.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN=
-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN=
-US">Thanks,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN=
-US">Ketan<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif;color:#1F497D;mso-fareast-language:EN=
-US"><o:p>&nbsp;</o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">From:</span></b><span style=3D"font-size:11.0pt;=
font-family:&quot;Calibri&quot;,sans-serif"> Idr [<a href=3D"mailto:idr-bou=
nces@ietf.org">mailto:idr-bounces@ietf.org</a>]
<b>On Behalf Of </b>Simon Zhong<br>
<b>Sent:</b> 09 April 2017 11:21<br>
<b>To:</b> <a href=3D"mailto:idr@ietf.org">idr@ietf.org</a><br>
<b>Subject:</b> [Idr] SR-Capabilities TLV in draft-ietf-idr-bgp-ls-segment-=
routing-ext-01<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN"><o:p>&nbsp;</o:p></span></p>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:DengXian">Hi,<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt">&nbs=
p;</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXia=
n"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:DengXian">I</span><span lang=3D"ZH-CN" style=3D"font-size:10.0pt;fon=
t-family:DengXian">&#8217;</span><span lang=3D"EN-IN" style=3D"font-size:10=
.0pt;font-family:DengXian">m working on Wireshark bgp
 dissector and following description confuses me.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt">&nbs=
p;</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXia=
n"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">2.1.1.&nbsp; SR-Capabilities TLV</span><spa=
n lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p=
></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;</span><span lang=3D"EN-IN" style=3D"=
font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;&nbsp; The SR Capabilities sub-TLV ha=
s following format:</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;fo=
nt-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">&#8230;&#8230;</span><span lang=3D"E=
N-IN" style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;&nbsp; &#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;</span><span lang=3D"EN-IN" sty=
le=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; R=
ange Size&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |</span><span lang=3D"EN-IN" sty=
le=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;&nbsp; &#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font=
-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;&nbsp; //&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SID/Label Su=
b-TLV (variable)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; //</span><span lang=3D"EN-IN" style=
=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;&nbsp; &#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#4=
3;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-&#43;-=
&#43;-&#43;-&#43;</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font=
-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt">&nbs=
p;</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXia=
n"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">This implies that there&#8217;s one =
&#8220;Range Size&#8221; and one or more &#8220;SID/Lable Sub-TLV), however=
 later in this section, it says:</span><span lang=3D"EN-IN" style=3D"font-s=
ize:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt">&nbs=
p;</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXia=
n"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;&nbsp;&nbsp;&nbsp; One or more entrie=
s, each of which have the following format:</span><span lang=3D"EN-IN" styl=
e=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;</span><span lang=3D"EN-IN" style=3D"=
font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp; Range Size: 3 octet value indicating the number of labels in</span><s=
pan lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o=
:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp; the range.</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;</span><span lang=3D"EN-IN" style=3D"=
font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp; SID/Label sub-TLV (as defined in Section 2.3.7.2).</span><span lang=
=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></spa=
n></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt">&nbs=
p;</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXia=
n"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">Which sounds like one or more &#8220=
;Range Size&#8221; &#43; &#8220;SID/Lable sub-TLV&#8221; combo are allowed.=
</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXian"=
><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt">&nbs=
p;</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXia=
n"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">The same applies to SR Local Block T=
LV as well.</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-famil=
y:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt">&nbs=
p;</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXia=
n"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">So what&#8217;s the intended behavio=
ur? Thanks.</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-famil=
y:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">&nbsp;</span><span lang=3D"EN-IN" st=
yle=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">/Simon</span><span lang=3D"EN-IN" st=
yle=3D"font-size:10.0pt;font-family:DengXian"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-IN" style=3D"font-size:11.0pt">&nbs=
p;</span><span lang=3D"EN-IN" style=3D"font-size:10.0pt;font-family:DengXia=
n"><o:p></o:p></span></p>
</div>
</div>
</body>
</html>

--_000_CY4PR05MB288662F7AF9B773667B5E249D3000CY4PR05MB2886namp_--


From nobody Tue Apr 11 13:29:33 2017
Return-Path: <gregimirsky@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2B6C129513; Tue, 11 Apr 2017 13:29:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.698
X-Spam-Level: 
X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GcnK7hy1lGyr; Tue, 11 Apr 2017 13:29:28 -0700 (PDT)
Received: from mail-oi0-x232.google.com (mail-oi0-x232.google.com [IPv6:2607:f8b0:4003:c06::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 421EE127601; Tue, 11 Apr 2017 13:29:25 -0700 (PDT)
Received: by mail-oi0-x232.google.com with SMTP id b187so10458346oif.0; Tue, 11 Apr 2017 13:29:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Ek5sa5RZUO849yVKGF3xDNpPLyNBo+qyQLh8Gn3hmp8=; b=iGns2kmGr5FE/hYDdhRYVpSaeLuiuUDTV1pomt4Qv0UoVL4WUeI7vo96bPuVTB6n2u pcuB1VLIad0C6xaNLJRCKrsxJI72vyicfgLU9x/pErVJq1HdZ+62HRD955CGHdfEfiz7 5oegwU/LlCdE4ko43Uy3RzQBll1m8tn39IdnT56h/viAzYQ/JoJt60wb07ud+NjucREP cP6qnmQ/NEctxaIpRGOKS/vxxh6EMy0520yfBm64/OYdWIs48mYIhpIjCV2rvEHIlstd 9j/1QGHujHOsc/J08ek8APzd84vXyUaJZnSZHQVRUH+p4dBYnM5sRKri0+wV8gCJVShX lLDQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Ek5sa5RZUO849yVKGF3xDNpPLyNBo+qyQLh8Gn3hmp8=; b=m6qTL3xddcnz/HMvcEgBGbONSOkmj/aiKh3tXMPo1GTRKv3CqXQ/BhGdPh9L1R9MOq zZCfBdalYirBxXJgpdICDlzf17H2Ghp4CMn52SghXrMsW8JvctbBr/4HpdYOPs6NcCh4 Xce4Ll5AargU/vJpMekkGCXZ8+yYyRWj0h5xNYMa0lXUNavOs/zlge2gn9fDA2SXftxZ 8q77IU8owBqe/56MW9O+673lzNs26UHhavZ32o2Sr+DQ2hQPu6pqxj/LI2ZO92XhXT4s pD7PdfbwCXk5cX8RWd7g8uZZ2FSRvWXikuP4M4cKqMFr9xmik0eR5vXNgBdCa88iaPj5 bZMg==
X-Gm-Message-State: AN3rC/6Uc5agC7rTYsb/vaL5ZLnxbN5V14JnAYh+JmtBpjoQkphLbd9VUkc+K5oWRKizTwEFb9ghRqbwPQ5cDw==
X-Received: by 10.157.42.82 with SMTP id t76mr8762747ota.40.1491942564517; Tue, 11 Apr 2017 13:29:24 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.157.39.165 with HTTP; Tue, 11 Apr 2017 13:29:24 -0700 (PDT)
In-Reply-To: <201704071044279565138@zte.com.cn>
References: <201704071044279565138@zte.com.cn>
From: Greg Mirsky <gregimirsky@gmail.com>
Date: Tue, 11 Apr 2017 13:29:24 -0700
Message-ID: <CA+RyBmUPbBbcgp_OfKNjnKqfeE7EaPw6WDy54wmiAxzHdFya+w@mail.gmail.com>
To: chen.ran@zte.com.cn, draft-ietf-bier-bgp-ls-bier-ext@ietf.org
Cc: bier@ietf.org, idr@ietf.org
Content-Type: multipart/alternative; boundary=001a113d09de955d1f054ce9f23e
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/wm-ScycoNsF6ojDYzOrXR6xLZek>
Subject: Re: [Idr] [Bier] I-D Action: draft-ietf-bier-bgp-ls-bier-ext-00.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Apr 2017 20:29:31 -0000

--001a113d09de955d1f054ce9f23e
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi Ran, Authors,
thank you for the very good and timely work. Please kindly consider my
notes to the draft:

   - section 3.1
      - for consistency of format definition add Type with reference to the
      appropriate sub-section in IANA Considerations;
      - add definition of the value in Length field, e.g. "equals number of
      octets of the Value field";
      - you may describe the Reserved field and note that is MUST be set to
      0 on transmit and ignored on receipt;
      - I think that meaning and use of subdomain-id and MT-ID need more
      discussion. E.g., how these id's assigned, managed? What they signify=
?
      - how the value of BSL field defined? Is it the same as Len field in
      the BIER Header (Section 3 in
draft-ietf-bier-mpls-encapsulation)? You may
      add the reference to encaps draft.
      - I think that Set Identifier (SI) should be included in the BIER
      TLV. According to Section 3 of the BIER Architecture document,
SI value may
      be in the [0, 255] range. Then one octet seems sufficient for SI fiel=
d.
      - I'd suggest to keep format to four octet alignment and add reserved
      field after the BFR-id field.
   - Section 3.1.1
      - you can add reference to the sub-section in IANA Considerations for
      Type field;
      - add definition of the value of Length field;
      - is 255 range sufficient for Label Range advertisement?Is it because
      SI is limited to 255? Would be helpful to clarify;
      - would BS Length in the sub-TLV be the same as BSL field in the BIER
      TLV?

Regards,
Greg

On Thu, Apr 6, 2017 at 7:44 PM, <chen.ran@zte.com.cn> wrote:

> Hello all,
>
> We would like to request comments on the draft
>
> https://datatracker.ietf.org/doc/html/draft-ietf-bier-bgp-ls-bier-ext
>
>
> We would really appreciate any comments and questions about the draft.
>
>
> Best Regards.
>
> Ran
>
>
> =E5=8E=9F=E5=A7=8B=E9=82=AE=E4=BB=B6
> *=E5=8F=91=E4=BB=B6=E4=BA=BA=EF=BC=9A* =EF=BC=9Cinternet-drafts@ietf.org=
=EF=BC=9E;
> *=E6=94=B6=E4=BB=B6=E4=BA=BA=EF=BC=9A* =EF=BC=9Ci-d-announce@ietf.org=EF=
=BC=9E;
> *=E6=8A=84=E9=80=81=E4=BA=BA=EF=BC=9A* =EF=BC=9Cbier@ietf.org=EF=BC=9E;
> *=E6=97=A5 =E6=9C=9F =EF=BC=9A*2017=E5=B9=B401=E6=9C=8819=E6=97=A5 00:26
> *=E4=B8=BB =E9=A2=98 =EF=BC=9A**[Bier] I-D Action: draft-ietf-bier-bgp-ls=
-bier-ext-00.txt*
>
>
>
> A New Internet-Draft is available from the on-line
> Internet-Drafts directories.
> This draft is a work item of the Bit Indexed Explicit
> Replication of the IETF.
>
>         Title           : BGP Link-State extensions for BIER
>         Authors         : Ran Chen
>                           Zheng Zhang
>                           Vengada Prasad Govindan
>                           IJsbrand Wijnands
>     Filename        : draft-ietf-bier-bgp-ls-bier-ext-00.txt
>     Pages           : 8
>     Date            : 2017-01-10
>
> Abstract:
>    Bit Index Explicit Replication (BIER) is an architecture that
>    provides optimal multicast forwarding through a "BIER domain" without
>    requiring intermediate routers to maintain any multicast related per-
>    flow state.  BIER also does not require any explicit tree-building
>    protocol for its operation.  A multicast data packet enters a BIER
>    domain at a "Bit-Forwarding Ingress Router" (BFIR), and leaves the
>    BIER domain at one or more "Bit-Forwarding Egress Routers" (BFERs).
>    The BFIR router adds a BIER header to the packet.  The BIER header
>    contains a bitstring in which each bit represents exactly one BFER to
>    forward the packet to.  The set of BFERs to which the multicast
>    packet needs to be forwarded is expressed by setting the bits that
>    correspond to those routers in the BIER header.
>
>    This document specifies extensions to the BGP Link-state address-
>    family in order to advertising BIER information.
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-bier-bgp-ls-bier-ext/
>
> There's also a htmlized version available at:
> https://tools.ietf.org/html/draft-ietf-bier-bgp-ls-bier-ext-00
>
>
> Please note that it may take a couple of minutes from the
> time of submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> _______________________________________________
> BIER mailing list
> BIER@ietf.org
> https://www.ietf.org/mailman/listinfo/bier
>
>
>
>
> _______________________________________________
> BIER mailing list
> BIER@ietf.org
> https://www.ietf.org/mailman/listinfo/bier
>
>

--001a113d09de955d1f054ce9f23e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Ran, Authors,<div>thank you for the very good and timel=
y work. Please kindly consider my notes to the draft:</div><div><ul><li>sec=
tion 3.1</li><ul><li>for consistency of format definition add Type with ref=
erence to the appropriate sub-section in IANA Considerations;</li><li>add d=
efinition of the value in Length field, e.g. &quot;equals number of octets =
of the Value field&quot;;</li><li>you may describe the Reserved field and n=
ote that is MUST be set to 0 on transmit and ignored on receipt;</li><li>I =
think that meaning and use of subdomain-id and MT-ID need more discussion. =
E.g., how these id&#39;s assigned, managed? What they signify?</li><li>how =
the value of BSL field defined? Is it the same as Len field in the BIER Hea=
der (Section 3 in draft-ietf-bier-mpls-encapsulation)? You may add the refe=
rence to encaps draft.</li><li>I think that Set Identifier (SI) should be i=
ncluded in the BIER TLV. According to Section 3 of the BIER Architecture do=
cument, SI value may be in the [0, 255] range. Then one octet seems suffici=
ent for SI field.</li><li>I&#39;d suggest to keep format to four octet alig=
nment and add reserved field after the BFR-id field.</li></ul><li>Section 3=
.1.1</li><ul><li>you can add reference to the sub-section in IANA Considera=
tions for Type field;</li><li>add definition of the value of Length field;<=
/li><li>is 255 range sufficient for Label Range advertisement?Is it because=
 SI is limited to 255? Would be helpful to clarify;</li><li>would BS Length=
 in the sub-TLV be the same as BSL field in the BIER TLV?</li></ul></ul><di=
v>Regards,</div></div><div>Greg</div></div><div class=3D"gmail_extra"><br><=
div class=3D"gmail_quote">On Thu, Apr 6, 2017 at 7:44 PM,  <span dir=3D"ltr=
">&lt;<a href=3D"mailto:chen.ran@zte.com.cn" target=3D"_blank">chen.ran@zte=
.com.cn</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D=
"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class=
=3D"m_2288819551571209275zcontentRow"> <p><span style=3D"line-height:21px">=
Hello all,</span><br></p><p style=3D"line-height:21px;white-space:normal">W=
e would like to request comments on the draft</p><p style=3D"line-height:21=
px;white-space:normal"><a href=3D"https://datatracker.ietf.org/doc/html/dra=
ft-ietf-bier-bgp-ls-bier-ext" style=3D"font-size:12.6666669845581px;line-he=
ight:19px" target=3D"_blank">https://datatracker.ietf.org/<wbr>doc/html/dra=
ft-ietf-bier-bgp-<wbr>ls-bier-ext</a>=C2=A0</p><p style=3D"line-height:21px=
;white-space:normal"><br></p><p style=3D"line-height:21px;white-space:norma=
l">We would really appreciate any comments and questions about the draft.</=
p><p style=3D"line-height:21px;white-space:normal"><br></p><p style=3D"line=
-height:21px;white-space:normal">Best Regards.</p><p style=3D"line-height:2=
1px;white-space:normal">Ran</p><p style=3D"line-height:21px;white-space:nor=
mal"><br></p><div><div class=3D"m_2288819551571209275zhistoryRow" style=3D"=
display:block"><div><div><div class=3D"m_2288819551571209275zhistoryDes" st=
yle=3D"width:100%;height:28px;line-height:28px;background-color:#e0e5e9;col=
or:#1388ff;text-align:center">=E5=8E=9F=E5=A7=8B=E9=82=AE=E4=BB=B6</div><di=
v id=3D"m_2288819551571209275zwriteHistoryContainer"><div class=3D"m_228881=
9551571209275control-group m_2288819551571209275zhistoryPanel"><div class=
=3D"m_2288819551571209275zhistoryHeader" style=3D"padding:8px;background-co=
lor:#f5f6f8"><div><strong>=E5=8F=91=E4=BB=B6=E4=BA=BA=EF=BC=9A</strong><spa=
n class=3D"m_2288819551571209275zreadUserName"> =EF=BC=9C<a href=3D"mailto:=
internet-drafts@ietf.org" target=3D"_blank">internet-drafts@ietf.org</a>=EF=
=BC=9E;</span></div><div><strong>=E6=94=B6=E4=BB=B6=E4=BA=BA=EF=BC=9A</stro=
ng><span class=3D"m_2288819551571209275zreadUserName" style=3D"display:inli=
ne-block"> =EF=BC=9C<a href=3D"mailto:i-d-announce@ietf.org" target=3D"_bla=
nk">i-d-announce@ietf.org</a>=EF=BC=9E;</span></div><div><strong>=E6=8A=84=
=E9=80=81=E4=BA=BA=EF=BC=9A</strong><span class=3D"m_2288819551571209275zre=
adUserName" style=3D"display:inline-block"> =EF=BC=9C<a href=3D"mailto:bier=
@ietf.org" target=3D"_blank">bier@ietf.org</a>=EF=BC=9E;</span></div><div><=
strong>=E6=97=A5 =E6=9C=9F =EF=BC=9A</strong><span>2017=E5=B9=B401=E6=9C=88=
19=E6=97=A5 00:26</span></div><div><strong>=E4=B8=BB =E9=A2=98 =EF=BC=9A</s=
trong><span class=3D"m_2288819551571209275zreadTitle"><strong>[Bier] I-D Ac=
tion: draft-ietf-bier-bgp-ls-bier-<wbr>ext-00.txt</strong></span></div></di=
v><p class=3D"m_2288819551571209275zhistoryContent"><br></p><div><br>A=C2=
=A0New=C2=A0Internet-Draft=C2=A0is=C2=A0<wbr>available=C2=A0from=C2=A0the=
=C2=A0on-line=C2=A0<wbr>Internet-Drafts=C2=A0directories.<br>This=C2=A0draf=
t=C2=A0is=C2=A0a=C2=A0work=C2=A0item=C2=A0of=C2=A0<wbr>the=C2=A0Bit=C2=A0In=
dexed=C2=A0Explicit=C2=A0<wbr>Replication=C2=A0of=C2=A0the=C2=A0IETF.<br><b=
r>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0Title=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0:=C2=A0BGP=C2=A0<wbr>Link-S=
tate=C2=A0extensions=C2=A0for=C2=A0BIER<br>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0Authors=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0:=C2=A0Ran=C2=A0<wbr>Chen<br>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0<wbr>Zheng=C2=A0Zhang<br>=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
<wbr>Vengada=C2=A0Prasad=C2=A0Govindan<br>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0<wbr>IJsbrand=C2=A0Wijnands=
<br>=C2=A0=C2=A0=C2=A0=C2=A0Filename=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0:=C2=A0draft-<wbr>ietf-bier-bgp-ls-bier-ext-00.<wbr>txt<br>=C2=A0=
=C2=A0=C2=A0=C2=A0Pages=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0:=C2=A08<br>=C2=A0=C2=A0=C2=A0=C2=A0Date=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0:=C2=A02017-01-<wbr>1=
0<br><br>Abstract:<br>=C2=A0=C2=A0=C2=A0Bit=C2=A0Index=C2=A0Explicit=C2=A0<=
wbr>Replication=C2=A0(BIER)=C2=A0is=C2=A0an=C2=A0<wbr>architecture=C2=A0tha=
t<br>=C2=A0=C2=A0=C2=A0provides=C2=A0optimal=C2=A0multicast=C2=A0<wbr>forwa=
rding=C2=A0through=C2=A0a=C2=A0&quot;BIER=C2=A0<wbr>domain&quot;=C2=A0witho=
ut<br>=C2=A0=C2=A0=C2=A0requiring=C2=A0intermediate=C2=A0<wbr>routers=C2=A0=
to=C2=A0maintain=C2=A0any=C2=A0<wbr>multicast=C2=A0related=C2=A0per-<br>=C2=
=A0=C2=A0=C2=A0flow=C2=A0state.=C2=A0=C2=A0BIER=C2=A0also=C2=A0<wbr>does=C2=
=A0not=C2=A0require=C2=A0any=C2=A0explicit=C2=A0<wbr>tree-building<br>=C2=
=A0=C2=A0=C2=A0protocol=C2=A0for=C2=A0its=C2=A0operation.<wbr>=C2=A0=C2=A0A=
=C2=A0multicast=C2=A0data=C2=A0packet=C2=A0<wbr>enters=C2=A0a=C2=A0BIER<br>=
=C2=A0=C2=A0=C2=A0domain=C2=A0at=C2=A0a=C2=A0&quot;Bit-<wbr>Forwarding=C2=
=A0Ingress=C2=A0Router&quot;=C2=A0(<wbr>BFIR),=C2=A0and=C2=A0leaves=C2=A0th=
e<br>=C2=A0=C2=A0=C2=A0BIER=C2=A0domain=C2=A0at=C2=A0one=C2=A0or=C2=A0more=
=C2=A0<wbr>&quot;Bit-Forwarding=C2=A0Egress=C2=A0<wbr>Routers&quot;=C2=A0(B=
FERs).<br>=C2=A0=C2=A0=C2=A0The=C2=A0BFIR=C2=A0router=C2=A0adds=C2=A0a=C2=
=A0<wbr>BIER=C2=A0header=C2=A0to=C2=A0the=C2=A0packet.=C2=A0=C2=A0<wbr>The=
=C2=A0BIER=C2=A0header<br>=C2=A0=C2=A0=C2=A0contains=C2=A0a=C2=A0bitstring=
=C2=A0in=C2=A0<wbr>which=C2=A0each=C2=A0bit=C2=A0represents=C2=A0<wbr>exact=
ly=C2=A0one=C2=A0BFER=C2=A0to<br>=C2=A0=C2=A0=C2=A0forward=C2=A0the=C2=A0pa=
cket=C2=A0to.=C2=A0=C2=A0<wbr>The=C2=A0set=C2=A0of=C2=A0BFERs=C2=A0to=C2=A0=
which=C2=A0the=C2=A0<wbr>multicast<br>=C2=A0=C2=A0=C2=A0packet=C2=A0needs=
=C2=A0to=C2=A0be=C2=A0<wbr>forwarded=C2=A0is=C2=A0expressed=C2=A0by=C2=A0<w=
br>setting=C2=A0the=C2=A0bits=C2=A0that<br>=C2=A0=C2=A0=C2=A0correspond=C2=
=A0to=C2=A0those=C2=A0<wbr>routers=C2=A0in=C2=A0the=C2=A0BIER=C2=A0header.<=
br><br>=C2=A0=C2=A0=C2=A0This=C2=A0document=C2=A0specifies=C2=A0<wbr>extens=
ions=C2=A0to=C2=A0the=C2=A0BGP=C2=A0Link-<wbr>state=C2=A0address-<br>=C2=A0=
=C2=A0=C2=A0family=C2=A0in=C2=A0order=C2=A0to=C2=A0<wbr>advertising=C2=A0BI=
ER=C2=A0information.<br><br><br>The=C2=A0IETF=C2=A0datatracker=C2=A0status=
=C2=A0<wbr>page=C2=A0for=C2=A0this=C2=A0draft=C2=A0is:<br><a href=3D"https:=
//datatracker.ietf.org/doc/draft-ietf-bier-bgp-ls-bier-ext/" target=3D"_bla=
nk">https://datatracker.ietf.org/<wbr>doc/draft-ietf-bier-bgp-ls-<wbr>bier-=
ext/</a><br><br>There&#39;s=C2=A0also=C2=A0a=C2=A0htmlized=C2=A0<wbr>versio=
n=C2=A0available=C2=A0at:<br><a href=3D"https://tools.ietf.org/html/draft-i=
etf-bier-bgp-ls-bier-ext-00" target=3D"_blank">https://tools.ietf.org/html/=
<wbr>draft-ietf-bier-bgp-ls-bier-<wbr>ext-00</a><br><br><br>Please=C2=A0not=
e=C2=A0that=C2=A0it=C2=A0may=C2=A0take=C2=A0<wbr>a=C2=A0couple=C2=A0of=C2=
=A0minutes=C2=A0from=C2=A0the=C2=A0<wbr>time=C2=A0of=C2=A0submission<br>unt=
il=C2=A0the=C2=A0htmlized=C2=A0version=C2=A0<wbr>and=C2=A0diff=C2=A0are=C2=
=A0available=C2=A0at=C2=A0<a href=3D"http://tools.ietf.org" target=3D"_blan=
k">tool<wbr>s.ietf.org</a>.<br><br>Internet-Drafts=C2=A0are=C2=A0also=C2=A0=
<wbr>available=C2=A0by=C2=A0anonymous=C2=A0FTP=C2=A0at:<br><a href=3D"ftp:/=
/ftp.ietf.org/internet-drafts/" target=3D"_blank">ftp://ftp.ietf.org/intern=
et-<wbr>drafts/</a><br><br>______________________________<wbr>_____________=
____<br>BIER=C2=A0mailing=C2=A0list<br><a href=3D"mailto:BIER@ietf.org" tar=
get=3D"_blank">BIER@ietf.org</a><br><a href=3D"https://www.ietf.org/mailman=
/listinfo/bier" target=3D"_blank">https://www.ietf.org/mailman/<wbr>listinf=
o/bier</a><br></div><p><br></p></div></div></div></div></div></div><p><br><=
/p> </div><br>______________________________<wbr>_________________<br>
BIER mailing list<br>
<a href=3D"mailto:BIER@ietf.org">BIER@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/bier" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/bier</a><br>
<br></blockquote></div><br></div>

--001a113d09de955d1f054ce9f23e--


From nobody Wed Apr 12 10:51:48 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EE33129646; Wed, 12 Apr 2017 10:51:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 50dFSPPlhNyJ; Wed, 12 Apr 2017 10:51:38 -0700 (PDT)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D9871296C6; Wed, 12 Apr 2017 10:51:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10240; q=dns/txt; s=iport; t=1492019482; x=1493229082; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=x41Z5Dknqg7eJEghMHlIBoXAyoaAwPTwc0zoqzLXe8Y=; b=ku4xDlConIKIQH/fSH+8Mr4tIRKnC4Xsrn8KqIkzQMJpmEI/W4shUTaA hb4wx6I56cd4AbtnlHBm1IyGeAh8clzlmgD0AZ5l/vZggrq5xdA/PHKaC cKuhLiR62C9roF6zbR1bxYBns90enD71YzQs1hXyTJgZQyohg1/zFTzOh o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B9AgDbZ+5Y/40NJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm5lYYELB4NfihORMpBDhTWCD4YkAhqDZz8YAQIBAQEBAQEBax0?= =?us-ascii?q?LhRYGI1YQAgEIPwMCAgIwFBECBA4FihapAoImK4plAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBHYZRgV0rCYJjh1wugjEFlieGYwGIAIpggX+PRZQBAR84gQVbFVIBhkh?= =?us-ascii?q?1iBWBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,191,1488844800";  d="scan'208,217";a="229993421"
Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 12 Apr 2017 17:51:21 +0000
Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v3CHpLSx014548 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 12 Apr 2017 17:51:21 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 12 Apr 2017 12:51:20 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Wed, 12 Apr 2017 12:51:20 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: "sidr@ietf.org" <sidr@ietf.org>
CC: "sidr-chairs@ietf.org" <sidr-chairs@ietf.org>, "draft-ietf-sidr-bgpsec-protocol@ietf.org" <draft-ietf-sidr-bgpsec-protocol@ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
Thread-Index: AQHSrV6hkKLo0jlbPUCXfQgnSjWfzKHCIM4A
Date: Wed, 12 Apr 2017 17:51:20 +0000
Message-ID: <C573125C-2518-42D5-AFFF-A4F47F2ABBC7@cisco.com>
References: <65677770-43DB-4CE0-8E81-B35B9A82DF6F@cisco.com>
In-Reply-To: <65677770-43DB-4CE0-8E81-B35B9A82DF6F@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: multipart/alternative; boundary="_000_C573125C251842D5AFFFA4F47F2ABBC7ciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/nYCMgmmDETP2DCb6CAuhr2qUj2o>
Subject: Re: [Idr] BGPsec without Extended Messages (draft-ietf-sidr-bgpsec-protocol)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Apr 2017 17:51:41 -0000

--_000_C573125C251842D5AFFFA4F47F2ABBC7ciscocom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_C573125C251842D5AFFFA4F47F2ABBC7ciscocom_
Content-Type: text/html; charset="utf-8"
Content-ID: <206A78DA63A3AE4E90FB9670ADB3C0DE@emea.cisco.com>
Content-Transfer-Encoding: base64

PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4
bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo
dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo
dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp
dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l
dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu
dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg
KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N
CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0
IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ
cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N
CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsN
CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls
eToiVGltZXMgTmV3IFJvbWFuIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z
dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp
bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w
cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9
DQpzcGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252
ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29u
YWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0Ow0KCWZv
bnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQpzcGFuLm1zb0lucw0KCXtt
c28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0ZXh0LWRl
Y29yYXRpb246dW5kZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNv
LXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3Jk
U2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGlu
IDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9z
dHlsZT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0i
Ymx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6
Q2FsaWJyaSI+SGkhPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+
PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4m
bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9
ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+VGhhbmtzIHRvIGV2ZXJ5b25l
IHdobyBtYWRlIGNvbW1lbnRzIGluIHN1cHBvcnQgZm9yIHRoZSBtb2RpZmllZCB0ZXh0LjxvOnA+
PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250
LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu
PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0
O2ZvbnQtZmFtaWx5OkNhbGlicmkiPkkgYW0gbm93IHByb2NlZWRpbmcgd2l0aCB0aGUgcmVzdCBv
ZiB0aGUgcHJvY2VzcyAoYmVsb3cpLiZuYnNwOyBXaWxsIGNjIHRoZSBXRyBhcyBuZWVkZWQuPG86
cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv
bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3Nw
YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w
cHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+VGhhbmtzISE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh
bWlseTpDYWxpYnJpIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJp
Ij5BbHZhcm8uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw
YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJz
cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv
bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3Nw
YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w
cHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p
bHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiA0LzQvMTcsIDEyOjE1IFBNLCAmcXVvdDtBbHZhcm8gUmV0
YW5hIChhcmV0YW5hKSZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFyZXRhbmFAY2lzY28uY29t
Ij5hcmV0YW5hQGNpc2NvLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+
DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv
cD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImZvbnQtdmFyaWFudC1jYXBz
OiBub3JtYWw7b3JwaGFuczogYXV0bzt0ZXh0LWFsaWduOnN0YXJ0O3dpZG93czogYXV0bzstd2Vi
a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7d29yZC1zcGFjaW5nOjBweCI+DQo8c3BhbiBzdHls
ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5HaXZl
biB0aGF0IHRoaXMgZG9jdW1lbnQgaGFzIGFscmVhZHkgYmVlbiBhcHByb3ZlZCBieSB0aGUgSUVT
RywgdGhlIHByb2Nlc3MgZ29pbmcgZm9yd2FyZCBpczo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt
ZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs
YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsO29ycGhhbnM6
IGF1dG87dGV4dC1hbGlnbjpzdGFydDt3aWRvd3M6IGF1dG87LXdlYmtpdC10ZXh0LXN0cm9rZS13
aWR0aDogMHB4O3dvcmQtc3BhY2luZzowcHgiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w
cHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0
eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48
L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iZm9udC12YXJpYW50LWNhcHM6IG5vcm1h
bDtvcnBoYW5zOiBhdXRvO3RleHQtYWxpZ246c3RhcnQ7d2lkb3dzOiBhdXRvOy13ZWJraXQtdGV4
dC1zdHJva2Utd2lkdGg6IDBweDt3b3JkLXNwYWNpbmc6MHB4Ij4NCjxzcGFuIHN0eWxlPSJmb250
LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPi0gY29uc3VsdCB0
aGUgV0cgKHRoaXMgdGhyZWFkKTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJy
aTtjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h
bCIgc3R5bGU9ImZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7b3JwaGFuczogYXV0bzt0ZXh0LWFs
aWduOnN0YXJ0O3dpZG93czogYXV0bzstd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7d29y
ZC1zcGFjaW5nOjBweCI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls
eTpDYWxpYnJpO2NvbG9yOmJsYWNrIj4tIGluZm9ybSB0aGUgSUVTRyBvZiB0aGUgaW50ZW50PC9z
cGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPjwv
bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iZm9udC12YXJpYW50
LWNhcHM6IG5vcm1hbDtvcnBoYW5zOiBhdXRvO3RleHQtYWxpZ246c3RhcnQ7d2lkb3dzOiBhdXRv
Oy13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDt3b3JkLXNwYWNpbmc6MHB4Ij4NCjxzcGFu
IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2si
Pi0gaW5mb3JtIHRoZSBJRVRGICg8YSBocmVmPSJtYWlsdG86aWV0ZkBpZXRmLm9yZykiPjxzcGFu
IHN0eWxlPSJjb2xvcjojOTU0RjcyIj5pZXRmQGlldGYub3JnKTwvc3Bhbj48L2E+PHNwYW4gY2xh
c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPm9mIHRoZSBjaGFuZ2VzPC9z
cGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPjwv
bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iZm9udC12YXJpYW50
LWNhcHM6IG5vcm1hbDtvcnBoYW5zOiBhdXRvO3RleHQtYWxpZ246c3RhcnQ7d2lkb3dzOiBhdXRv
Oy13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDt3b3JkLXNwYWNpbmc6MHB4Ij4NCjxzcGFu
IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2si
Pi0gcHVibGlzaCBhbiB1cGRhdGVkIGRyYWZ0PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWls
eTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIiBzdHlsZT0iZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDtvcnBoYW5zOiBhdXRv
O3RleHQtYWxpZ246c3RhcnQ7d2lkb3dzOiBhdXRvOy13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6
IDBweDt3b3JkLXNwYWNpbmc6MHB4Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv
bnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPi0gY29udGludWUgdGhlIHB1YmxpY2F0aW9u
IHByb2Nlc3M8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6Ymxh
Y2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJm
b250LXZhcmlhbnQtY2Fwczogbm9ybWFsO29ycGhhbnM6IGF1dG87dGV4dC1hbGlnbjpzdGFydDt3
aWRvd3M6IGF1dG87LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4O3dvcmQtc3BhY2luZzow
cHgiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtj
b2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJp
O2NvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
IiBzdHlsZT0iZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDtvcnBoYW5zOiBhdXRvO3RleHQtYWxp
Z246c3RhcnQ7d2lkb3dzOiBhdXRvOy13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDt3b3Jk
LXNwYWNpbmc6MHB4Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5
OkNhbGlicmk7Y29sb3I6YmxhY2siPkVhY2ggc3RlcCBtYXksIG9idmlvdXNseSwgcmVxdWlyZSBh
ZGRpdGlvbmFsIGRpc2N1c3Npb24gYW5kIGNvdWxkIHJlc3VsdCBpbiBjaGFuZ2VzIHRvIHRoZSBj
dXJyZW50IHBsYW4uPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9y
OmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+
DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K

--_000_C573125C251842D5AFFFA4F47F2ABBC7ciscocom_--


From nobody Thu Apr 13 23:03:00 2017
Return-Path: <ravis@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26F15129407; Thu, 13 Apr 2017 23:02:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.921
X-Spam-Level: 
X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C0dOF6-C6fvH; Thu, 13 Apr 2017 23:02:48 -0700 (PDT)
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0105.outbound.protection.outlook.com [104.47.33.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A7A1128B90; Thu, 13 Apr 2017 23:02:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Jf7cg3xCs8WMOSKb6vWyZTacrKWEwy7rWsOCNAoO400=; b=Jppgy70AlAskIFh9kE+NW1Lv3yWj9E42tf5MUxPi1mu2x1UtHtKLlccnIG1oDnJMP90EUGaKsDR9yO5XlnPN7jZ7YFDqXTO5gnWuCceDO70AdsKoXQtlGUr12QDa2gN3edbV/DvNhC8kYB3kzwPz20L4vs/SMf56CxX88yiN/b8=
Received: from CY1PR05MB2521.namprd05.prod.outlook.com (10.167.10.136) by CY1PR05MB2524.namprd05.prod.outlook.com (10.167.10.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.5; Fri, 14 Apr 2017 06:02:45 +0000
Received: from CY1PR05MB2521.namprd05.prod.outlook.com ([10.167.10.136]) by CY1PR05MB2521.namprd05.prod.outlook.com ([10.167.10.136]) with mapi id 15.01.1047.006; Fri, 14 Apr 2017 06:02:45 +0000
From: Ravi Singh <ravis@juniper.net>
To: "rtg-dir@ietf.org" <rtg-dir@ietf.org>
CC: "draft-ietf-idr-bgpls-segment-routing-epe@ietf.org" <draft-ietf-idr-bgpls-segment-routing-epe@ietf.org>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: Review of draft-ietf-idr-bgpls-segment-routing-epe
Thread-Index: AdK044TTNOR7tL3ASl6OLN2+c3aCsQ==
Date: Fri, 14 Apr 2017 06:02:45 +0000
Message-ID: <CY1PR05MB25215A10F4E4372407A31F13AB050@CY1PR05MB2521.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net;
x-originating-ip: [66.129.239.10]
x-microsoft-exchange-diagnostics: 1; CY1PR05MB2524; 7:nU/a7Nc5BpIiZUbJ+4/LJTNTfbZhYLbmmSUSztHxv7Gt8d9A0h3SxV78SbRtoI7Xus9GcGKM+Ov5Gns/9F4riFLgeqK/IR+z+uimXBBJtK4B+REe65eoXkYtxBZmwynIPROk4y4IlXdhJOWILaZe0wjfKcMQLfzjaz/fSjDqzmkPpsXj0S2OComqNJqg/tNu+8kh0QeU71H3Vga4SndjrGR2tIBIhbul+of6LV5sYVNK6oGY87Yy9cK3HnJj7esXgxM9tqPE82xxqgIx/uL0PVQ8y+dnOUshDB+Ay+otqUvx7BSSPr01izinYdWKcA9+shVFRI5nJIbRot+lJnGeTQ==
x-ms-office365-filtering-correlation-id: fe060ba1-19bc-41bd-b95e-08d482fbdf1e
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081)(201702281549075); SRVR:CY1PR05MB2524; 
x-microsoft-antispam-prvs: <CY1PR05MB252421EA683B7F5956A0A196AB050@CY1PR05MB2524.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(192374486261705)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(20161123564025)(20161123560025)(20161123555025)(20161123562025)(6072148); SRVR:CY1PR05MB2524; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2524; 
x-forefront-prvs: 02778BF158
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39840400002)(39450400003)(39860400002)(39410400002)(39400400002)(39850400002)(790700001)(3846002)(102836003)(86362001)(6116002)(5660300001)(189998001)(25786009)(450100002)(68736007)(54356999)(50986999)(7736002)(110136004)(38730400002)(74316002)(4326008)(5630700001)(33656002)(230783001)(2501003)(2900100001)(77096006)(6916009)(9326002)(2351001)(9686003)(55016002)(54906002)(81166006)(8936002)(54896002)(8676002)(6306002)(3280700002)(2906002)(99286003)(6506006)(53936002)(3660700001)(122556002)(66066001)(5640700003)(7696004)(6436002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2524; H:CY1PR05MB2521.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY1PR05MB25215A10F4E4372407A31F13AB050CY1PR05MB2521namp_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Apr 2017 06:02:45.7266 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2524
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/eR4MD2SFQ3kzRO0LgPI6_rd4q1E>
Subject: [Idr] Review of draft-ietf-idr-bgpls-segment-routing-epe
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Apr 2017 06:02:50 -0000

--_000_CY1PR05MB25215A10F4E4372407A31F13AB050CY1PR05MB2521namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi
I had been designated as the RTG-DIR reviewer for this draft.

Overall the draft is clear.
However, it could be use some editorial revision for improved readability.

Specific comments listed below:

1.       Document title could be less heavy on consecutive adjectives: some=
 suggestions:
a.       BGP-LS extensions for Segment Routing BGP Egress Peer Engineering
b.      BGP-LS extensions for "BGP-EPE using SR"
c.       Segment Routing BGP Egress Peer Engineering extensions for BGP-LS
...
2.       Section 1:
"   This document defines new types of segments: a Peer Node segment
   describing the BGP session between two nodes; a Peer Adjacency
   Segment describing the link (one or more) that is used by the BGP
   session; the Peer Set Segment describing an arbitrary set of sessions
   or links between the local BGP node and its peers."
Above has an unintended meaning. This should instead have stated that this =
doc defines BGP-LS extensions to communicate the above listed SIDs that are=
 defined in "draft-ietf-spring-segment-routing"

3.       Section 3:
"
   This document defines the BGP-EPE Peering Segments:

   o  Peer Node Segment (Peer-Node-SID)

   o  Peer Adjacency Segment (Peer-Adj-SID)

  o  Peer Set Segment (Peer-Set-SID)"

Same issue as listed above for section 1 above.
Section 5 has the same issue.

4.       Section 4.2: I'd suggest that this be broken into 2 separate sub-s=
ections: each listing the mandatory/optional sub-TLVs for the local and rem=
ote node descriptors respectively. That will make for improved readability.

5.       Section 4.2: please clarify in text as to Why no "BGP-LS ID" in li=
nk NLRI in the remote node descriptor.

6.       Section 4.3:
a.       values of the flags are specified only for the Per-Adj-SID. Explic=
it text should be listed for per-node-SID and per-set-SID.
b.      "
   The Peer-Node-SID MUST be present when BGP-LS is used for the use
   case described in [I-D.ietf-spring-segment-routing-central-epe] and
   MAY be omitted for other use cases."
Is there really a need to state what other use-cases might do, considering =
that this doc is specific to BGP-LS for SR-EPE? Perhaps can be reworded. Si=
milarly for "Peer-Adj-SID and Peer-Set-SID SubTLVs MAY" in next paragraph.

7.       There is some repetition of info between sections 4 & 5. eg. What =
local and remote node descriptors contain. Please reword these sections to =
avoid the repetition while still presenting the info.

8.       Sections 5.1 & 5.2: have lots of repetitive text. Tabular presenta=
tion of the text in these sections would allow describing per-node-sid and =
per-adj-sid without the repetition.

9.       Section 9: typo in language in first sentence.

10.   Section 10: please explicitly call out any additional (beyond rfc7752=
) security considerations or include text stating that none exist.

11.   Typos
a.        Section 3:
                                       i.            "an BGP-EPE" -> "a BGP=
-EPE"
b.      Section 4:
                                       i.            "Link-type" NLRI -> "l=
ink-state" NLRI?

Regards
Ravi


--_000_CY1PR05MB25215A10F4E4372407A31F13AB050CY1PR05MB2521namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m=3D"http://sc=
hemas.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-=
html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
p
	{mso-style-priority:99;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:12.0pt;
	font-family:"Times New Roman",serif;}
span.EmailStyle18
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:122117162;
	mso-list-template-ids:494932500;}
@list l0:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1
	{mso-list-id:390275472;
	mso-list-template-ids:1942022014;}
@list l1:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2
	{mso-list-id:750545054;
	mso-list-template-ids:1846298510;}
@list l2:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3
	{mso-list-id:809251525;
	mso-list-template-ids:-578660172;}
@list l3:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l4
	{mso-list-id:874077300;
	mso-list-template-ids:928024490;}
@list l4:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l4:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l4:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l4:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l4:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l4:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l4:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l4:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l4:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5
	{mso-list-id:980429080;
	mso-list-template-ids:2028373668;}
@list l5:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l6
	{mso-list-id:1011568647;
	mso-list-template-ids:-738399812;}
@list l6:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l6:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l6:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l6:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l6:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l6:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l6:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l6:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l6:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l7
	{mso-list-id:1015038617;
	mso-list-template-ids:1093675000;}
@list l7:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l7:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l7:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:1.5in;
	mso-level-number-position:right;
	text-indent:-.25in;}
@list l7:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l7:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l7:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l7:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l7:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l7:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l8
	{mso-list-id:1581520803;
	mso-list-template-ids:-30487334;}
@list l8:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l8:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l8:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l8:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l8:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l8:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l8:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l8:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l8:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l9
	{mso-list-id:1669823736;
	mso-list-template-ids:-254064;}
@list l9:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l9:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l9:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l9:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l9:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l9:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l9:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l9:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l9:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l10
	{mso-list-id:1986080551;
	mso-list-template-ids:770602802;}
@list l10:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l10:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l10:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l10:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l10:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l10:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l10:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l10:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l10:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level1 lfo5
	{mso-level-start-at:2;}
@list l6:level1 lfo7
	{mso-level-start-at:3;}
@list l5:level1 lfo9
	{mso-level-start-at:4;}
@list l9:level1 lfo11
	{mso-level-start-at:5;}
@list l1:level1 lfo13
	{mso-level-start-at:6;}
@list l4:level1 lfo16
	{mso-level-start-at:7;}
@list l0:level1 lfo18
	{mso-level-start-at:8;}
@list l10:level1 lfo20
	{mso-level-start-at:9;}
@list l2:level1 lfo22
	{mso-level-start-at:10;}
@list l7:level1 lfo24
	{mso-level-start-at:11;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"color:black">Hi<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black">I had been designated as=
 the RTG-DIR reviewer for this draft.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><o:p>&nbsp;</o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"color:black">Overall the draft is cle=
ar. <o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black">However, it could be use=
 some editorial revision for improved readability.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><o:p>&nbsp;</o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"color:black">Specific comments listed=
 below:<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black">&nbsp;<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l8 level1 lfo2;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">1.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">Document title c=
ould be less heavy on consecutive adjectives: some suggestions:<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in;text-indent:-.25in;mso-li=
st:l8 level2 lfo3;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">a.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">BGP-LS extension=
s for Segment Routing BGP Egress Peer Engineering
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in;text-indent:-.25in;mso-li=
st:l8 level2 lfo3;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">b.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">BGP-LS extension=
s for &quot;BGP-EPE using SR&quot;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in;text-indent:-.25in;mso-li=
st:l8 level2 lfo3;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">c.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">Segment Routing =
BGP Egress Peer Engineering extensions for BGP-LS<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in"><span style=3D"color:bla=
ck">&#8230;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l3 level1 lfo5;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">2.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">Section 1:<o:p><=
/o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&quot;&nbsp;&nbsp; This document defines new types of segments: a Peer=
 Node segment<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;&nbsp; describing the BGP session between two nodes; a Peer Adja=
cency<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;&nbsp; Segment describing the link (one or more) that is used by=
 the BGP<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;&nbsp; session; the Peer Set Segment describing an arbitrary set=
 of sessions<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;&nbsp; or links between the local BGP node and its peers.&quot;<=
o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">Above has an unintended meaning. This should instead have stated that =
this doc defines BGP-LS extensions to communicate the above listed SIDs tha=
t are defined in &quot;draft-ietf-spring-segment-routing&quot;<o:p></o:p></=
span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l6 level1 lfo7;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">3.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">Section 3: <o:p>=
</o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&quot;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;&nbsp; This document defines the BGP-EPE Peering Segments:<o:p><=
/o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;&nbsp; o&nbsp; Peer Node Segment (Peer-Node-SID)<o:p></o:p></spa=
n></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;&nbsp; o&nbsp; Peer Adjacency Segment (Peer-Adj-SID)<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;&nbsp;o&nbsp; Peer Set Segment (Peer-Set-SID)&quot;<o:p></o:p></=
span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">Same issue as listed above for section 1 above.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">Section 5 has the same issue.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l5 level1 lfo9;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">4.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">Section 4.2: I'd=
 suggest that this be broken into 2 separate sub-sections: each listing the=
 mandatory/optional sub-TLVs for the local and remote node descriptors resp=
ectively. That will make for improved
 readability.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l9 level1 lfo11;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">5.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">Section 4.2: ple=
ase clarify in text as to Why no &quot;BGP-LS ID&quot; in link NLRI in the =
remote node descriptor.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l1 level1 lfo13;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">6.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">Section 4.3: <o:=
p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in;text-indent:-.25in;mso-li=
st:l1 level2 lfo14;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">a.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">values of the fl=
ags are specified only for the Per-Adj-SID. Explicit text should be listed =
for per-node-SID and per-set-SID.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in;text-indent:-.25in;mso-li=
st:l1 level2 lfo14;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">b.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">&quot;<o:p></o:p=
></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in"><span style=3D"color:bla=
ck">&nbsp;&nbsp; The Peer-Node-SID MUST be present when BGP-LS is used for =
the use<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in"><span style=3D"color:bla=
ck">&nbsp;&nbsp; case described in [I-D.ietf-spring-segment-routing-central=
-epe] and<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in"><span style=3D"color:bla=
ck">&nbsp;&nbsp; MAY be omitted for other use cases.&quot;<o:p></o:p></span=
></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in"><span style=3D"color:bla=
ck">Is there really a need to state what other use-cases might do, consider=
ing that this doc is specific to BGP-LS for SR-EPE? Perhaps can be reworded=
. Similarly for &quot;Peer-Adj-SID and Peer-Set-SID
 SubTLVs MAY&quot; in next paragraph.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l4 level1 lfo16;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">7.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">There is some re=
petition of info between sections 4 &amp; 5. eg. What local and remote node=
 descriptors contain. Please reword these sections to avoid the repetition =
while still presenting the info.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l0 level1 lfo18;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">8.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">Sections 5.1 &am=
p; 5.2: have lots of repetitive text. Tabular presentation of the text in t=
hese sections would allow describing per-node-sid and per-adj-sid without t=
he repetition.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l10 level1 lfo20;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">9.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">Section 9: typo =
in language in first sentence.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l2 level1 lfo22;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">10.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp=
;
</span></span></span><![endif]><span style=3D"color:black">Section 10: plea=
se explicitly call out any additional (beyond rfc7752) security considerati=
ons or include text stating that none exist.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt"><span style=3D"color:bl=
ack">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:27.0pt;text-indent:-.25in;mso-l=
ist:l7 level1 lfo24;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">11.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp=
;
</span></span></span><![endif]><span style=3D"color:black">Typos<o:p></o:p>=
</span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in;text-indent:-.25in;mso-li=
st:l7 level2 lfo25;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">a.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">&nbsp;Section 3:=
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:81.0pt;text-indent:-81.0pt;mso-=
text-indent-alt:-.25in;mso-list:l7 level3 lfo26;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore"><span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span>i.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span></spa=
n><![endif]><span style=3D"color:black">&quot;an BGP-EPE&quot; -&gt; &quot;=
a BGP-EPE&quot;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in;text-indent:-.25in;mso-li=
st:l7 level2 lfo26;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore">b.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:black">Section 4:<o:p><=
/o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:81.0pt;text-indent:-81.0pt;mso-=
text-indent-alt:-.25in;mso-list:l7 level3 lfo27;vertical-align:middle">
<![if !supportLists]><span style=3D"color:black"><span style=3D"mso-list:Ig=
nore"><span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span>i.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span></spa=
n><![endif]><span style=3D"color:black">&quot;Link-type&quot; NLRI -&gt; &q=
uot;link-state&quot; NLRI?<o:p></o:p></span></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Regards<o:p></o:p></p>
<p class=3D"MsoNormal">Ravi<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_CY1PR05MB25215A10F4E4372407A31F13AB050CY1PR05MB2521namp_--


From nobody Fri Apr 14 02:16:59 2017
Return-Path: <li_zhenqiang@hotmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2906128768 for <idr@ietfa.amsl.com>; Fri, 14 Apr 2017 02:16:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.286
X-Spam-Level: 
X-Spam-Status: No, score=0.286 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FORGED_HOTMAIL_RCVD2=0.874, FREEMAIL_FROM=0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=hotmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zBwXzxIw8aDy for <idr@ietfa.amsl.com>; Fri, 14 Apr 2017 02:16:56 -0700 (PDT)
Received: from APC01-SG2-obe.outbound.protection.outlook.com (mail-oln040092253085.outbound.protection.outlook.com [40.92.253.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B2163127A90 for <idr@ietf.org>; Fri, 14 Apr 2017 02:16:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=CV+KomEhsQZet8sNXFs49Za4A5SSes0QZ2C1L4AHiTw=; b=vG5j+HW3YFLfWETWhV1UxcsLbGe2+VVm1Pi1azH/0E/uxY7TJmLzl1Pb8kGxVAc+kzwZLPj+iboZ877NArSW2aaOuImR2tGzaOSPugPtqC89INhWKHntuZTIe6+nAmP+Iy8eXwCTjPfLoOlrv63uCUNSQHUwS6Nm49pdViq0fHg/55VcJBBhluH+QkG1/CqIV0YfYDIZRXKdCYAc1COrOk2bPzb9TlIqsYxKESyBZL5jET3pyw11rArlJj11MGi1stm/Tv2jXeIKzdIdOuWjwMe3sKby1Q0usGYUA1uFBBFi/1ZylxMdE01B96UUWhUh/c6gR+R0U8Bljue7J2MCfw==
Received: from PU1APC01FT042.eop-APC01.prod.protection.outlook.com (10.152.252.53) by PU1APC01HT040.eop-APC01.prod.protection.outlook.com (10.152.253.247) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1019.14; Fri, 14 Apr 2017 09:16:52 +0000
Received: from HK2PR0601MB1361.apcprd06.prod.outlook.com (10.152.252.52) by PU1APC01FT042.mail.protection.outlook.com (10.152.253.96) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1019.14 via Frontend Transport; Fri, 14 Apr 2017 09:16:52 +0000
Received: from HK2PR0601MB1361.apcprd06.prod.outlook.com ([10.165.182.19]) by HK2PR0601MB1361.apcprd06.prod.outlook.com ([10.165.182.19]) with mapi id 15.01.1019.028; Fri, 14 Apr 2017 09:16:51 +0000
From: li zhenqiang <li_zhenqiang@hotmail.com>
To: idr <idr@ietf.org>
CC: rv <rv@NIC.DTAG.DE>, wangruixue <wangruixue@chinamobile.com>, Zhuangshunwan <zhuangshunwan@huawei.com>, "Dongjie (Jimmy)" <jie.dong@huawei.com>
Thread-Topic: question about BGP extended community
Thread-Index: AQHStP/aKV88viQwok+b5ZwWc2ZVkA==
Date: Fri, 14 Apr 2017 09:16:51 +0000
Message-ID: <HK2PR0601MB1361C0B1786C4C68CCC05762FC050@HK2PR0601MB1361.apcprd06.prod.outlook.com>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=hotmail.com;
x-incomingtopheadermarker: OriginalChecksum:7A2638D58849EBF53E5646608948A7D29383C32ABCB3B15C1103F3C8991CAA7D; UpperCasedChecksum:302DA298D6C9027593AA73513621C87FCAE5D91AD6B6EF2E3B37EA9C62C2A3F2; SizeAsReceived:7840; Count:38
x-ms-exchange-messagesentrepresentingtype: 1
x-microsoft-exchange-diagnostics: 1; PU1APC01HT040; 5:XvhKbxhXI9t28XuACx0NhSZsLfBqSQkkl13uuEStHlIAQQtz+gQdj/ENVO2qS6G2QUyP01wzCIyjLAhI3wl/UqbFpPFuvgSVvTcQNis++5440tHrCo0BI87TLNAA9E0S383Sz9MOjewnBzXlIHCBzg==; 24:74U5cnvbu7KIkHqaTkKEurSTWCi6MMULZ0Yb04SPUCnYmWhz9oKb7lPWNVVcr6dwy2MedKmv5QWT82icHz71JCETuJkoc+jGkLahrxP6DVQ=; 7:Vdx6QdSzcEPlam2+qUSGTmOfaWKnHRicvNiS7bd8fmCJ9NNe0CCeSiayb0ZTLNU65vTu85XLpcYAqCoP7+dYHbG4RgWII/CYIvi1twFZvJLpivDoxdlO7lnjSrgB0ciZukHcPeyE4HEOhcGBqmZsKNRxagI7CobZKjcj2AL3R51mFQZh8gOWlKkxu3WMbGML1K3EUhxYzMIywtfobapUGdlCYoiTYkgGWaiX7XXh+qYwLC8deUT12jA+zZI5WCjVQEWEy84XpksxWjiQjXSahO0IV01gXB2JeBxyCiTn1KDQ8U/WUFMmbrS8N3KbxdQW
x-incomingheadercount: 38
x-eopattributedmessage: 0
x-forefront-antispam-report: EFV:NLI; SFV:NSPM; SFS:(7070007)(98901004); DIR:OUT; SFP:1901; SCL:1; SRVR:PU1APC01HT040; H:HK2PR0601MB1361.apcprd06.prod.outlook.com; FPR:; SPF:None; LANG:en; 
x-ms-office365-filtering-correlation-id: 5591e726-5b4c-4cfb-b607-08d48316fa69
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031322274)(1603101448)(1601125374)(1701031045); SRVR:PU1APC01HT040; 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(444000031); SRVR:PU1APC01HT040; BCL:0; PCL:0; RULEID:; SRVR:PU1APC01HT040; 
x-forefront-prvs: 02778BF158
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_HK2PR0601MB1361C0B1786C4C68CCC05762FC050HK2PR0601MB1361_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Apr 2017 09:16:51.7303 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU1APC01HT040
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/sOG-69WQxGRFgG-C2pQYJfCvMc8>
Subject: [Idr] question about BGP extended community
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Apr 2017 09:16:58 -0000

--_000_HK2PR0601MB1361C0B1786C4C68CCC05762FC050HK2PR0601MB1361_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi all,

As per RFC4360, BGP extended community is a transitive optional attribute a=
nd RFC4271 specifies it is not required or expected that all BGP implementa=
tions support all optional attributes.  If we do want the BGP peer supports=
 some kinds of extended communities, how to determine this? Check all the p=
eers in advance? MPLS level 3 VPN, for example, uses the extended community=
 to carry route target information, all the relevant BGP peers should suppo=
rt the RT extended community, but we can not expect this according to RFC43=
60 and RFC4271. The traffic action extended community as defined in RFC5575=
 (BGP flowspec) and updated in https://datatracker.ietf.org/doc/draft-li-id=
r-flowspec-populate-to-fib/<file:///C:/Users/cmcc/AppData/Roaming/Foxmail7/=
Temp-9608-20170414150941/%C2%A0https://datatracker.ietf.org/doc/draft-li-id=
r-flowspec-populate-to-fib/>, for another example, is expected to be suppor=
ted by the receiver, which is not guaranteed by the transitive optional att=
ribute. Do we need to do something here? Thank you very much for your help.

Best Regards,
________________________________
li_zhenqiang@hotmail.com

--_000_HK2PR0601MB1361C0B1786C4C68CCC05762FC050HK2PR0601MB1361_
Content-Type: text/html; charset="us-ascii"
Content-ID: <E3AA509B13734A4FBCD967D65A6440D0@apcprd06.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<style>body { line-height: 1.5; }body { font-size: 10.5pt; font-family: ???=
?; color: rgb(0, 0, 0); line-height: 1.5; }</style>
</head>
<body>
<div><span></span>Hi all,</div>
<div><br>
</div>
<div>As per RFC4360, BGP&nbsp;<span style=3D"background-color: rgba(0, 0, 0=
, 0); font-size: 10.5pt; line-height: 1.5;">extended&nbsp;community is&nbsp=
;</span><span style=3D"background-color: rgba(0, 0, 0, 0); font-size: 10.5p=
t; line-height: 1.5;">a&nbsp;transitive&nbsp;optional&nbsp;</span><span sty=
le=3D"color: rgb(0, 0, 0); font-size: 10.5pt; line-height: 1.5; background-=
color: rgba(0, 0, 0, 0);">attribute
 and RFC</span><span style=3D"font-size: 10.5pt; line-height: 1.5; backgrou=
nd-color: window;">4271 specifies it</span><span style=3D"font-size: 10.5pt=
; line-height: 1.5; background-color: window;">&nbsp;is&nbsp;not&nbsp;requi=
red&nbsp;or&nbsp;expected&nbsp;that&nbsp;all&nbsp;</span><span style=3D"fon=
t-size: 10.5pt; line-height: 1.5; background-color: window;">BGP&nbsp;imple=
mentations&nbsp;support&nbsp;all&nbsp;optional&nbsp;attributes.
 &nbsp;If we do want the BGP peer supports some kinds of&nbsp;</span><span =
style=3D"font-size: 10.5pt; line-height: 1.5; background-color: window;">ex=
tended&nbsp;communities, how to determine this? Check all the peers in adva=
nce? MPLS level 3 VPN, for example, uses the&nbsp;</span><span style=3D"fon=
t-size: 10.5pt; line-height: 1.5; background-color: window;">extended&nbsp;=
community
 to carry route target information, all the relevant BGP peers should suppo=
rt the RT&nbsp;</span><span style=3D"font-size: 10.5pt; line-height: 1.5; b=
ackground-color: window;">extended&nbsp;community, but we can not expect th=
is according to RFC4360 and RFC4271. The&nbsp;</span><span style=3D"font-si=
ze: 10.5pt; line-height: 1.5; background-color: window;">traffic&nbsp;actio=
n&nbsp;extended&nbsp;community
 as defined in RFC5575 (BGP flowspec) and updated in&nbsp;</span><a href=3D=
"file:///C:/Users/cmcc/AppData/Roaming/Foxmail7/Temp-9608-20170414150941/%C=
2%A0https://datatracker.ietf.org/doc/draft-li-idr-flowspec-populate-to-fib/=
" style=3D"font-size: 10.5pt; line-height: 1.5; background-color: window; t=
ext-decoration: none !important;">https://datatracker.ietf.org/doc/draft-li=
-idr-flowspec-populate-to-fib/</a>,
 for another example, is expected to be supported by the receiver, which is=
 not guaranteed by the&nbsp;<span style=3D"color: rgb(0, 0, 0); font-size: =
10.5pt; line-height: 1.5; background-color: rgba(0, 0, 0, 0);">transitive&n=
bsp;optional&nbsp;</span><span style=3D"color: rgb(0, 0, 0); font-size: 10.=
5pt; line-height: 1.5; background-color: rgba(0, 0, 0, 0);">attribute.
 Do we need to do something here? Thank you very much for your help.</span>=
</div>
<div><br>
</div>
<div>Best Regards,</div>
<hr style=3D"width: 210px; height: 1px;" color=3D"#b5c4df" size=3D"1" align=
=3D"left">
<div><span>
<div style=3D"MARGIN: 10px; FONT-FAMILY: verdana; FONT-SIZE: 10pt">
<div>li_zhenqiang@hotmail.com</div>
</div>
</span></div>
</body>
</html>

--_000_HK2PR0601MB1361C0B1786C4C68CCC05762FC050HK2PR0601MB1361_--


From nobody Fri Apr 14 05:22:16 2017
Return-Path: <acee@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B24D512EBF3 for <idr@ietfa.amsl.com>; Fri, 14 Apr 2017 05:22:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uSRL2ZkztSiU for <idr@ietfa.amsl.com>; Fri, 14 Apr 2017 05:22:13 -0700 (PDT)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19ED112EBE3 for <idr@ietf.org>; Fri, 14 Apr 2017 05:22:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2788; q=dns/txt; s=iport; t=1492172533; x=1493382133; h=from:to:cc:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=Vn3a03fzNHJ1dPoAR78LzI7Wb7n2fbyN0o7p3+EukNs=; b=bP5vXdE7G5NfRoZjUsh5/EqvcxB67CxNwkiEnsXy+A89Mvpzanl88a0x 4+anMRWv0DbIR9UpUe1HxcW3i0IxYTdt15xvmJQmDonkuo3lUxEZ0BUqN kpQXEuDKu+V00EKdrVd28OukE2vJH1VLw3jZMB1VN7cm2KSjxY5Xclvu7 0=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B7BAB2vvBY/4oNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1NhgQsHg1+bcm+BS4VhjUKCDyyFeByDZEAXAQIBAQEBAQEBayi?= =?us-ascii?q?FFQEDAyMRRRIBCBEDAQIDAiYCBDAVCAoEAQ0FFIlrAxUOqHaCJosRAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBHYELhyOCYzSCUYIFF4Jvgl8FnFw7AYcDhx6EQ4JUjnK?= =?us-ascii?q?LB4kCASECNIEFYxVBhGcXgWN1iC6BDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,198,1488844800"; d="scan'208";a="410274407"
Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 14 Apr 2017 12:22:12 +0000
Received: from XCH-RTP-012.cisco.com (xch-rtp-012.cisco.com [64.101.220.152]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id v3ECMBV8030252 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 14 Apr 2017 12:22:12 GMT
Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-012.cisco.com (64.101.220.152) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Fri, 14 Apr 2017 08:22:11 -0400
Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Fri, 14 Apr 2017 08:22:11 -0400
From: "Acee Lindem (acee)" <acee@cisco.com>
To: li zhenqiang <li_zhenqiang@hotmail.com>, idr <idr@ietf.org>
CC: wangruixue <wangruixue@chinamobile.com>
Thread-Topic: [Idr] question about BGP extended community
Thread-Index: AQHStRm9W1kRV8yls0G3tRqW2Vw51A==
Date: Fri, 14 Apr 2017 12:22:11 +0000
Message-ID: <D51634BE.A89FB%acee@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.116.152.197]
Content-Type: text/plain; charset="utf-8"
Content-ID: <B49134CF2F32CA43B8916A611658B6DE@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/thnmC6L4ygtPD3rIuuhUUApav7k>
Subject: Re: [Idr] question about BGP extended community
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Apr 2017 12:22:15 -0000
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From nobody Fri Apr 14 06:44:44 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0AAB12F253 for <idr@ietfa.amsl.com>; Fri, 14 Apr 2017 06:44:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V7ArE3UhYDd7 for <idr@ietfa.amsl.com>; Fri, 14 Apr 2017 06:44:41 -0700 (PDT)
Received: from mail-wr0-x22e.google.com (mail-wr0-x22e.google.com [IPv6:2a00:1450:400c:c0c::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A2E912EE46 for <idr@ietf.org>; Fri, 14 Apr 2017 06:44:41 -0700 (PDT)
Received: by mail-wr0-x22e.google.com with SMTP id l28so51206349wre.0 for <idr@ietf.org>; Fri, 14 Apr 2017 06:44:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:subject:message-id:mime-version:content-disposition :user-agent; bh=/JT7yF+S/SrOl8fkr8dbEcQvK5ml5KsDqEfvWxUqCRo=; b=tUfI7cNq1CumlE2EZOnexLcgM2/9/TlkpwwVArBQENtZQ/kszPjNWNm1lJlKbCpX/2 QgXwRO9QdEEuca8GtSGzI1Ha1WKxv5qOM10QILJ0muA7kRk66o/FqMtTeR9wGyBO4yz5 XJsiC1GmmC6HKGzoIlRVZskOflIRfougj50E61PbWxBVR2yPM9bMSjyZ7308vfl4Sqi1 iMEXxn5KOhX6ql8+WdULekm3C/Dhx2P7WH1Mi41OpTKj+YYQJYRerstK2ZYXIEMyp6hY LjezkXXEVvMcRtcwx4P5KOhQjl/1p/qkhrb+lNeVZ44kVoKn/13EbKb7nunQMxfFh5fT wMag==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:mime-version :content-disposition:user-agent; bh=/JT7yF+S/SrOl8fkr8dbEcQvK5ml5KsDqEfvWxUqCRo=; b=kYMEkFYX1ySg1ybOj08ibZQ2pEUMckqYvHpW694U45+Ero4nAD4p9wFMU3mtkyD2X2 jLCWD23zem3bk1W7sZuNaypvpmH6ecS5zCYkV7bF6cqkj0cQOmHzA5gsQObMeVW9rRdX xADySvvB6nBYFkQCrdDju7bWBhZG1NHS4hwhj9MAqZ28XS8so+iHsi9Uu63KW3J+TKeX en/KbB626M3wxTm0Jx7ifHkyIu8hiKk0kiEmMNJvmZ+f2jZlJ/vv5MzzB9Y6NJ3TQu6Z uGNG8QpWEcB8x36pgV/KUouSesburHs1cMhcVqwb3rtnIieHvaHqkmJCAd74Ljv2JvHR 8zwg==
X-Gm-Message-State: AN3rC/7JBM3YyfHq1f2JxchLKDyGg/Z4h1DqE2/82CpSMPRj6oBsPald k9xOWDfzOIxUnjgvEH0=
X-Received: by 10.223.136.201 with SMTP id g9mr8280271wrg.97.1492177479414; Fri, 14 Apr 2017 06:44:39 -0700 (PDT)
Received: from localhost ([185.78.129.1]) by smtp.gmail.com with ESMTPSA id d10sm2434682wrd.54.2017.04.14.06.44.38 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 14 Apr 2017 06:44:38 -0700 (PDT)
Date: Fri, 14 Apr 2017 16:44:35 +0300
From: Job Snijders <job@instituut.net>
To: idr@ietf.org
Message-ID: <20170414134435.tpocpyuappmbcam4@Vurt.local>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/63BznVv5Di2o4nm_EWwcoprE3jI>
Subject: [Idr] clarification sought on rfc4360 non-transitive extended communities
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Apr 2017 13:44:43 -0000

Hi IDR,

RFC 4360 states:
    
    """
    If a route has a non-transitivity extended community, then before
    advertising the route across the Autonomous System boundary the
    community SHOULD be removed from the route.  However, the community
    SHOULD NOT be removed when advertising the route across the BGP
    Confederation boundary.
    """

For my edification, I have two questions:

    o   Why was nothing specified for the behaviour of receivers?
    o   why is it a "SHOULD" and not a "MUST"?

Is it a "SHOULD" because Extended Communities are wrapped in an optional
transitive path attribute, so strictly speaking, the non-transivity can't
be enforced anyway, since a middle-box might not understand the Extended
Community?

Kind regards,

Job


From nobody Fri Apr 14 07:59:08 2017
Return-Path: <erosen@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A3AF13013D for <idr@ietfa.amsl.com>; Fri, 14 Apr 2017 07:59:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.912
X-Spam-Level: 
X-Spam-Status: No, score=-2.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z_aYYm6kSnDz for <idr@ietfa.amsl.com>; Fri, 14 Apr 2017 07:59:06 -0700 (PDT)
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0127.outbound.protection.outlook.com [104.47.38.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BAC38124D68 for <idr@ietf.org>; Fri, 14 Apr 2017 07:59:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=kLFATZy8f0HNcPqo3XrjDdTMHcV+k8Xp9WtFespzn7c=; b=gRWqrDaJeW72uZCpi+5tEgbmHT0yJH/4qa02scGsV5psmXS5mDMzc6EnVPhqIo6AXo6qNEHpBIbh7Tg7peusHwr8/lxsmAxtMCTg00HzYF4V3yQb/yI0MO1PE+1COnpb9ycvhQL0fCW0fbE5fwQhNLlVDbCvfSzVTwCPfXPBVPQ=
Authentication-Results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.35.180] (66.129.241.11) by BY2PR05MB2181.namprd05.prod.outlook.com (10.166.112.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Fri, 14 Apr 2017 14:59:02 +0000
To: Job Snijders <job@instituut.net>, <idr@ietf.org>
References: <20170414134435.tpocpyuappmbcam4@Vurt.local>
From: Eric C Rosen <erosen@juniper.net>
Message-ID: <c5f761c9-2a9f-3353-17f9-aac4fca2c07e@juniper.net>
Date: Fri, 14 Apr 2017 10:58:57 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <20170414134435.tpocpyuappmbcam4@Vurt.local>
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [66.129.241.11]
X-ClientProxiedBy: BN6PR1301CA0009.namprd13.prod.outlook.com (10.174.84.150) To BY2PR05MB2181.namprd05.prod.outlook.com (10.166.112.9)
X-MS-Office365-Filtering-Correlation-Id: 5930de6b-4ad9-454f-c160-08d48346ca51
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:BY2PR05MB2181; 
X-Microsoft-Exchange-Diagnostics: 1; BY2PR05MB2181; 3:5SwEa7FYmvNEv1cwAfHB78idq7yF3PMRRBFwMVaya8MnclpXLfaOzmb3FK8Cz8DINOfwy74VmXEba/+HwnrcMbyx4jwQntK7bHbpyAIozZsQgkuQwy7cqdUmCrQqHRmIAscIT5TDB9fFD5FwdJBEEwsYLGOyMDDlMXttkausHfUFq++xlaPR/QVj5945m42mF8oJhFNeMIWai/G6I/xk96ljghCMUR40A2nzeWq9Y2SvDJ6sunxKnG7uJUMrvxCnVNa4F2aptmRGqRzxEiA27NQpVk8bL8eirOdhZ3+dwlX06hQNwH578drBQMFksTvt5Bvdf7fq7lUAXfr99e0WeFwoptXc0ZjlSDWf0HHA61w=; 25:N3yF1eV1pB5TN08+V67gvxRe2tpWw0p3BKxpsYkNMraCOX1bzrnmcLzHWEyKbolgaqPK55waO3n7TxVCuDM/39gnL9hVnBUkBccMlvAQCIdhXVnsK9F5fLo2/vqt5a5lWbUQQqqbbSJGS4S5XeaJHepOaB9V9nFEQUxqmEyUF5frVvH20sE1g2qs9IcTv/sw0vuwluLcCIbn5mxfYRdI92XTWekuQERfH2kSufBi+d6/W65yZD+k1l6do6aC7c6FxvsXkhd2g1x7DdD/iobIJRohofMhtiDg3v+75qktFtFQ2ugL06GE3p5SBEPQK3HfhgeNYKtmH+NexAdlPWfnfhVN1P/4tDpeLXzZZOKrF+SfmHSfimnvfxcu+i5lM11c7CgUKjzen80BDmmNIIFOWrn8/z5lxys72rsEXiYRYissf4xIEVs2Vci2xMTySixxA9LmQexCcRcQmAdF8+1SN6ND197x7PlCBtMANWEFot0=
X-Microsoft-Exchange-Diagnostics: 1; BY2PR05MB2181; 31:qSDpS92CfynEH+CayKp3TocPiHGIDRs2K/z1Ng7roX++Yaea/QG005M53R7OUQpb4rbEqgMd9jtM20e3scrzo/INdIF7ylea+Q3AkKKBBi09jhXsPxwtaC/vozEEwVHM2wJ/v6wSObWr8O8Ci3E3EXiRHFcEVLBJMxpO+zgIWGh6uOlDS+HEcftqjfpw0zr3i9TzzhP24ABVkb6QEbHpNBv3qvtbpOEj7+T6vzZSX6A=; 20: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
X-Microsoft-Antispam-PRVS: <BY2PR05MB2181A91FFA9B82E2CB09B920D4050@BY2PR05MB2181.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(278428928389397);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3002001)(6055026)(6041248)(20161123564025)(20161123560025)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(20161123555025)(6072148); SRVR:BY2PR05MB2181; BCL:0; PCL:0; RULEID:; SRVR:BY2PR05MB2181; 
X-Microsoft-Exchange-Diagnostics: 1; BY2PR05MB2181; 4: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
X-Forefront-PRVS: 02778BF158
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(39850400002)(39410400002)(39400400002)(39840400002)(39860400002)(39450400003)(24454002)(377454003)(66066001)(50466002)(36756003)(25786009)(3260700006)(53546009)(31696002)(47776003)(86362001)(38730400002)(6246003)(8676002)(81166006)(33646002)(189998001)(4001350100001)(229853002)(23746002)(53936002)(42186005)(83506001)(5660300001)(31686004)(65826007)(7736002)(50986999)(305945005)(54356999)(77096006)(230700001)(6486002)(2950100002)(2906002)(6116002)(6666003)(90366009)(3846002)(76176999); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR05MB2181; H:[172.29.35.180]; FPR:; SPF:None; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?Windows-1252?Q?1; BY2PR05MB2181; 23:Vm3d9ZDAPt8iiqn7Le4wDaUqCXplV4hV1k16F?= =?Windows-1252?Q?8+XRwNwpd4ysZNQcvXdE5BVwm3YaT1II3V7RGvcI2e4tLa9jqL+LD1sy?= =?Windows-1252?Q?AjGN4wRdaKOSNiF43z8VsOh9rCMvjARZObKCb1xg3/ciMhqMCcSkShO5?= =?Windows-1252?Q?c/kuXVwnj32BIidaYZrWruhPerxI3u+01atcfLR06FofRalzwqAyfZ7H?= =?Windows-1252?Q?/HTG59tcwbUL0BLZqf8l4Hkaa929rsXfgTSxtq0J9AVF+i/G3Isx8RBr?= =?Windows-1252?Q?7PjiqG19rdJ+Ci0LlUEnKTVP6HkAf196/nz6veMa2tReHYB+vlfP+ta0?= =?Windows-1252?Q?kWf5RnIho/cr4CVHRcVTLuzR89XTHEJ/y4TtGEM1dLuKMGwFj9pEMNAz?= =?Windows-1252?Q?lwkhGXeGwYTIAcOfoSafgy/sh0CaYawQQPXkt0YX4f/WSRbHMkwwIuab?= =?Windows-1252?Q?J47Itu4NBmG51m1QiFVJot61wkJUAzPta8Af7yzHJMj0jtGXV0wF7zLv?= =?Windows-1252?Q?kLG3ZcuSigH0R8KiN8lWD4CDu0fK8mE4141VlQAHqz5GMOLZ6iy11f3u?= =?Windows-1252?Q?iQoHUIxo5MDJdvHQtn3pSHXbFlMv0T+wsun0kODlBhx7M7BFf4/fJ2Yj?= =?Windows-1252?Q?60qzpj8nfyHjeilmYVXjYDvVf0HyBVIadzSHLNgkwNrN1tPAKV8PKNXh?= =?Windows-1252?Q?0IxgecXpBrP/CdKjEAZ1XEXQVVwcvy63/jxHyf+8LGlV73Ss1KNoMSjE?= =?Windows-1252?Q?2XFCT3W4BztDEmLskp+p0aUzDIR/BDuA8rCseCWbQ9cIwMQF5R8Q0KAy?= =?Windows-1252?Q?5g78b4luVTq4JZVgQ+LuS6y8g4tpxVlM6xht6VESeQ3lTLlZaZYQxJcm?= =?Windows-1252?Q?opAiMZQayjQMFlVVK+dJBacqPRbhr/e74AWAwND2J9vs5ZiL0gIyHEdc?= =?Windows-1252?Q?/9Zx05mHyoKCK3moT2gPPWCa4NGzdmsODGkGyZdwosLhM+frXv+hcGph?= =?Windows-1252?Q?hOaLqnAlUu5TxCzoZ2gEICEGSU1+HIUcrFwIbSUphrRcogOOgNfzZcnh?= =?Windows-1252?Q?2p1SedaRmDDI7Rd48s3UaAFNil5GHeS62dRDdJI9PeyKgQnMEmxaxdKL?= =?Windows-1252?Q?IFOefcQ/ZdpO6xc5JP8oZ0EVmq4+MAXTdjVrwRALE+ab83BV0pMOtUMQ?= =?Windows-1252?Q?ZvSqbuvY/Hhg2DAvdp/6zZ7uV6z07VWmpYayZHEc02XErvIxMbhL/DRV?= =?Windows-1252?Q?SwfgdadOTDklbW8LGYoiW0C4Nyx2nILhp+FyJPJ995k9fLpHP+opVLFO?= =?Windows-1252?Q?wF2vZEMRwgjs6hIFiMtjCFZPw=3D=3D?=
X-Microsoft-Exchange-Diagnostics: 1; BY2PR05MB2181; 6:K87gFe0U4Pe8K46auKI7g156NvzlEXLa7VQQY3rgkPXdJddK7YgXTmRUtvEedn//LHA3o1AvkvBsafbYKB6nDljpurdhZRGFiOromzpxBDwZlK8GuQ/sXJbV0J1gEaxeeTCKoOcca/X7UxqwjlZ9TNDnBR5mYep2ueEzQZrzxBR5awaVhd1ZLOGhDtx5eJQRVuLfeU24KJj0gSNcem/kaylbnfsw/QvZD8P8Ot7hZBg5yzrj/47tufndcjdKykT8y4Yecs2fYlNIrW+BuBVl3F7WrZuG58L2o9N1oKLG9WJKiG/IMu3yPhVTcqCK8o3T/lxVP8uk5D/YOf9gvSrxgHJWvyG67vJtwAyz+77rpxrCoiBbi6biRoPKnsjE6/K/1oTTURTsLtf6d6aKfgPjlY9REROqXev27N3qMbM9mcYzQvXrHBRX8M1gFUnJ8Wo7Z18Q2N5n6jcUjHvuU9UlySpYhWEoeFjnSozwDkK/4sI=; 5:D7YMWMCTl1ZeKx3Zah7sjeu+2PcTkq1LMPFrfNYENiyJkcYr/MVyd6VZoJ3M5OI1opAU+vSPaB190i5lT+kE42ln8Sfqqznu9iwMFqaT/sPvp7I/rFC5Cr46TOzczy/bEWIyX6qZPCvbv6l80p8ayC1iEwzoVh0wYI5da71I+iw=; 24:z0mpf+1In6cKaZoPEoPj5zExJdArhZ1JbX4ZMi9XZJV/6cyAyQ2VbBf02oYZ66STfr2yK4AxRlUEHtt9AVC4emQoCqgjxiYY5ENwMx8gZ9Y=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; BY2PR05MB2181; 7:S1ZWmMoZQq/nEcZMS6iMvfEYyj+uGxZMZX36WBfkIbRCx2mBjFlM/ZDsJmri/kUEKunuFyPKcIq4eOlgGb+vmKqDgiLxewwtdNqgvHixGXSaxElP+23dw2LfbZ90exaEL8W7EPsmA6tZYeXfnAGoP8ww4iqt3RF62JHUQLLPk3UiTqYOjN98kp68/4UqftKhqSMs0LmmN/OxCf9UcQUuK/MKmM0ZBTj65JdNXabQp8O5h5Tu/Ul12q7i5VeGG4KFAG0pt61anPbESlbTURkLqCwoDsiibBdoxii/WxBKJ91VFBkmcvxw/VCa/Tb7szhriCgOoooAjNkzHccG5r4PIg==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Apr 2017 14:59:02.4512 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR05MB2181
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/0gy_OUhshX7mjJDAZM97i2BPxHs>
Subject: Re: [Idr] clarification sought on rfc4360 non-transitive extended communities
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Apr 2017 14:59:07 -0000

On 4/14/2017 9:44 AM, Job Snijders wrote:
> Hi IDR,
>
> RFC 4360 states:
>      
>      """
>      If a route has a non-transitivity extended community, then before
>      advertising the route across the Autonomous System boundary the
>      community SHOULD be removed from the route.  However, the community
>      SHOULD NOT be removed when advertising the route across the BGP
>      Confederation boundary.
>      """
>

You'll note that there are very few non-transitive extended 
communities.  Extended communities are usually used to carry parameters 
of various BGP-based control protocols.  As such, it would be nice if 
they could be scoped to the "domain" of the control protocol.  The 
transitive/non-transitive distinction was a somewhat primitive attempt 
to provide this scoping.  Unfortunately, the boundaries of the control 
protocol domain are rarely the boundaries of the AS in which a route 
originates.  So this particular form of scoping has not proven to be 
very useful.

> For my edification, I have two questions:
>
>      o   Why was nothing specified for the behaviour of receivers?

Since the authors are either retired or in management, it is difficult 
to say for sure.  I'd say there are two possibilities:

- Sloppy specification writing.

- A belief that if the transmitter has decided to send the 
non-transitive EC over an AS boundary, it may have a good reason for 
doing so, and the receiver shouldn't second guess it.

I'd guess the former.

It is of course true that receivers have to be careful about getting ECs 
from outside the domain of the relevant control protocol, but that's 
true whether the EC is transitive or non-transitive.

>      o   why is it a "SHOULD" and not a "MUST"?

I'm pretty sure it is a "SHOULD"  because the authors thought that there 
might be applications that need to violate the rule, and hence it should 
be allowable to have policy that passes the non-transitive ECs.

>
> Is it a "SHOULD" because Extended Communities are wrapped in an optional
> transitive path attribute, so strictly speaking, the non-transivity can't
> be enforced anyway, since a middle-box might not understand the Extended
> Community?
>
>

Well, that's a possibility, but I don't recall anyone worrying too much 
about ASBRS that don't understand the Extended Communities attribute.


From nobody Fri Apr 14 12:21:55 2017
Return-Path: <internet-drafts@ietf.org>
X-Original-To: idr@ietf.org
Delivered-To: idr@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B9C19124282; Fri, 14 Apr 2017 12:21:48 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: idr@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.49.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <149219770872.15821.2665785394892276296@ietfa.amsl.com>
Date: Fri, 14 Apr 2017 12:21:48 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/sNNsc8JcSUKHLNA3CnIJk3QogTk>
Subject: [Idr] I-D Action: draft-ietf-idr-tunnel-encaps-04.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Apr 2017 19:21:49 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Inter-Domain Routing of the IETF.

        Title           : The BGP Tunnel Encapsulation Attribute
        Authors         : Eric C. Rosen
                          Keyur Patel
                          Gunter Van de Velde
	Filename        : draft-ietf-idr-tunnel-encaps-04.txt
	Pages           : 40
	Date            : 2017-04-14

Abstract:
   RFC 5512 defines a BGP Path Attribute known as the "Tunnel
   Encapsulation Attribute".  This attribute allows one to specify a set
   of tunnels.  For each such tunnel, the attribute can provide the
   information needed to create the tunnel and the corresponding
   encapsulation header.  The attribute can also provide information
   that aids in choosing whether a particular packet is to be sent
   through a particular tunnel.  RFC 5512 states that the attribute is
   only carried in BGP UPDATEs that have the "Encapsulation Subsequent
   Address Family (Encapsulation SAFI)".  This document deprecates the
   Encapsulation SAFI (which has never been used), and specifies
   semantics for the attribute when it is carried in UPDATEs of certain
   other SAFIs.  This document adds support for additional tunnel types,
   and allows a remote tunnel endpoint address to be specified for each
   tunnel.  This document also provides support for specifying fields of
   any inner or outer encapsulations that may be used by a particular
   tunnel.

   This document obsoletes RFC 5512.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-idr-tunnel-encaps/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-idr-tunnel-encaps-04
https://datatracker.ietf.org/doc/html/draft-ietf-idr-tunnel-encaps-04

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-idr-tunnel-encaps-04


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Sun Apr 16 13:12:52 2017
Return-Path: <rajiva@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75DC6127B57 for <idr@ietfa.amsl.com>; Sun, 16 Apr 2017 13:12:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t-vKzFspvREJ for <idr@ietfa.amsl.com>; Sun, 16 Apr 2017 13:12:50 -0700 (PDT)
Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EADB912025C for <idr@ietf.org>; Sun, 16 Apr 2017 13:12:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4890; q=dns/txt; s=iport; t=1492373569; x=1493583169; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=wZm/K4rVYZsF7u2VoKZi94PnETAaCK1+A1X18lH2o5I=; b=F94Ze/3CVFbVEePH6aBgpF42+shy/LSo5stv88Iy019JhmtWdaLR5d1O 6ivLZJDj085FgvHeG53MrB0HrdsznSi7IkGCb0q3Gs0xR0miVWlLaIWNS gbIG6+K9aR/YaJEUVIyeOvoMAa/HD5bwdpa4/6IqtZDTgsxFH2nfDvCAL Y=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C0AgD4zvNY/5ldJa1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1NhgQsHg1+KFZE6IZVfgg8uhXYCGoNlPxgBAgEBAQEBAQFrKIU?= =?us-ascii?q?VAQEBAQIBIxFFBQcEAgEIDgMDAQIBAgImAgICMBUICAIEDgWKDwgOqwSCJosFA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEBGAWBC4VHgV0rCoJjhCATDhaDBi6CMQWGd4I?= =?us-ascii?q?siCSLVAGHA4ZThQ6RRpQJAR84gQVjFVUBhlN1h0iBMIENAQEB?=
X-IronPort-AV: E=Sophos;i="5.37,210,1488844800"; d="scan'208";a="236632048"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Apr 2017 20:12:48 +0000
Received: from XCH-RCD-004.cisco.com (xch-rcd-004.cisco.com [173.37.102.14]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v3GKCmnJ002498 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 16 Apr 2017 20:12:49 GMT
Received: from xch-aln-005.cisco.com (173.36.7.15) by XCH-RCD-004.cisco.com (173.37.102.14) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sun, 16 Apr 2017 15:12:48 -0500
Received: from xch-aln-005.cisco.com ([173.36.7.15]) by XCH-ALN-005.cisco.com ([173.36.7.15]) with mapi id 15.00.1210.000; Sun, 16 Apr 2017 15:12:48 -0500
From: "Rajiv Asati (rajiva)" <rajiva@cisco.com>
To: Jeffrey Haas <jhaas@pfrc.org>
CC: Robert Raszuk <robert@raszuk.net>, idr wg <idr@ietf.org>
Thread-Topic: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
Thread-Index: AQHSmnRjZQMhW6yq5kum3Hd4lOeZoKGSjLmAgABQ7oCAAAtWgP//sAtXgAKMygD//8REAIAASs2AgDN6BYA=
Date: Sun, 16 Apr 2017 20:12:41 +0000
Message-ID: <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com>
References: <CA+b+ERmmqtUkJMtfOE9ABFHN0gNdztjOGELmirNgWRnDENrjaA@mail.gmail.com> <58C6751D.60306@foobar.org> <CA+b+ERkxvKzArYf7eefB5UL_kDMVBJERz=Qyi=zOsBm3KivAtg@mail.gmail.com> <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org>
In-Reply-To: <20170314213607.GH12864@pfrc.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.20.0.170309
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.82.253.127]
Content-Type: text/plain; charset="utf-8"
Content-ID: <6AA088F613CB544CB7CD36F52D836652@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/QMwKvXHaPSAwp8t4nEpGMED7aEY>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 16 Apr 2017 20:12:51 -0000

SGkgSmVmZiwNCg0KDQo+ICAgQnV0IG1vcmUgaW1wb3J0YW50bHksIHlvdSdsbCBzdG9wIHNlbmRp
bmcgaXQgdG93YXJkIHlvdXIgb3duIHBlZXJpbmcgYW5kDQo+ICAgYXR0cmFjdGluZyBibGFja2hv
bGVkIHRyYWZmaWMuDQogDQpJbmRlZWQuIFRoYXTigJlzIGtleS4gDQoNCkFuZCBpdCBjb3VsZCBy
ZWx5IG9uIHRoZSByb3V0ZSByZXNvbHZhYmlsaXR5IGNvbmRpdGlvbiB0byBiZSBhcHByb3ByaWF0
ZWx5IG1vZGlmaWVkLCBhcyBkZXNjcmliZWQgaW4gIA0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o
dG1sL2RyYWZ0LWlldGYtaWRyLWJncC1iZXN0cGF0aC1zZWxlY3Rpb24tY3JpdGVyaWEuDQoNCj4g
ICAgUlMtQkZEIGJhc2ljYWxseSByZWludmVudHMgdGhlIHNhbWUgcHJvY2VkdXJlIGluIHlvdXIg
ZHJhZnQsIHNpbXBseSBiZWluZw0KPiAgICBzcGVjaWZpYyBhYm91dCB0aGUgdXNlIG9mIEJGRCBh
cyB0aGUgZGF0YXBsYW5lIGxpdmVuZXNzIGNoZWNrIG1lY2hhbmlzbS4NCj4gICAgSG93ZXZlciwg
YXMgeW91IG5vdGUgaW4gdGhlIFJTLUJGRCBkcmFmdCwgd2UgZG8gbGVhdmUgdGhlIG9wdGlvbiBm
b3Igb3RoZXINCj4gICAgbWVjaGFuaXNtcy4NCj4NCj4gICAgSSBzdXNwZWN0IHRoZSBvdGhlciBh
dXRob3JzIG9mIFJTLUJGRCBhcmVuJ3QgcGFydGljdWxhciB3aGVyZSB3ZSBwaWNrIHVwIG91cg0K
PiAgICB0ZXh0IGZvciB0aGUgcmVzb2x2YWJpbGl0eSBjb25kaXRpb24uICBIb3dldmVyLCBpZiB0
aGUgc3VnZ2VzdGlvbiBpcyB0byBtYWtlDQo+ICAgYSByZWZlcmVuY2UgdG8geW91ciBkcmFmdCwg
eW91J2xsIG5lZWQgdG8gYnJpbmcgaXQgYmFjayBmcm9tIHpvbWJpZSBzdGF0ZQ0KPiAgICBhbmQg
cHJvZ3Jlc3MgaXQuIDotKQ0KDQpBZ3JlZWQuIEl0IGlzIGFsaXZlICgtMDcgdmVyc2lvbikuIGh0
dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWlkci1iZ3AtYmVzdHBhdGgtc2Vs
ZWN0aW9uLWNyaXRlcmlhLTA3DQpJdCBjYW4gYmUgdXNlZCBhcyBhIG5vcm1hdGl2ZSByZWZlcmVu
Y2UgaW4geW91ciBkcmFmdC4JDQoNCi0tIA0KQ2hlZXJzLA0KUmFqaXYgQXNhdGkNCkRpc3Rpbmd1
aXNoZWQgRW5naW5lZXIsIENpc2NvDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9t
OiBKZWZmcmV5IEhhYXMgPGpoYWFzQHBmcmMub3JnPg0KRGF0ZTogVHVlc2RheSwgTWFyY2ggMTQs
IDIwMTcgYXQgNTozNiBQTQ0KVG86IFJhaml2IEFzYXRpIDxyYWppdmFAY2lzY28uY29tPg0KQ2M6
ICJyb2JlcnRAcmFzenVrLm5ldCIgPHJvYmVydEByYXN6dWsubmV0PiwgImlkckBpZXRmLm9yZyIg
PGlkckBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbSWRyXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRm
LWlkci1ycy1iZmQtMDIudHh0DQoNCiAgICBSYWppdiwNCiAgICANCiAgICBPbiBUdWUsIE1hciAx
NCwgMjAxNyBhdCAwOTowODoyNFBNICswMDAwLCBSYWppdiBBc2F0aSAocmFqaXZhKSB3cm90ZToN
CiAgICA+IElzIHRoZSBhc3N1bXB0aW9uIGhlcmUgdGhhdCB0aGUgY2xpZW50IHJvdXRlcnMgaGF2
ZSByb3V0aW5nIHZpZXcgbGltaXRlZCB0byB3aGF04oCZcyBwcm92aWRlZCBieSB0aGUgUm91dGUg
U2VydmVyPyBJZiBub3QsIHRoZW4gd291bGRu4oCZdCBDbGllbnQgUm91dGVycyBiZW5lZml0IGZy
b20gaGF2aW5nIHRvIGludmFsaWRhdGUgdGhlIHBhdGggbGVhcm5lZCBmcm9tIHRoZSByZW1vdGUg
Y2xpZW50IHJvdXRlciBhcyBzb29uIGFzIHRoZSBjb25uZWN0aXZpdHkgY2hlY2sgZmFpbGVkPw0K
ICAgIA0KICAgIFRoaXMgaXMgd2hhdCBJIGJlbGlldmUgdGhlIHByb2NlZHVyZSBzYXlzLiAgU2Vl
IHNlY3Rpb24gNi4NCiAgICANCiAgICA+IE9mIGNvdXJzZSwgQ2xpZW50IFJvdXRlcnMgY29udmV5
aW5nIHRoZSBsYWNrIG9mIE5MUkkgcmVhY2hhYmlsaXR5IHBlciBOSCB0byB0aGUgUm91dGUgU2Vy
dmVyLCBhbmQgZXhwZWN0aW5nIFJvdXRlIFNlcnZlciB0byBwcm92aWRlIGEgZGlmZmVyZW50IE5I
cyBvZiB0aGUgTkxSSXMsIGFuZCBleHBlY3RpbmcgaXQgdG8gYmUgZnVuY3Rpb25hbCwgd2hpbGUg
c3RpbGwgYXR0cmFjdGluZyB0aGUgdHJhZmZpYyBmb3IgdW5yZWFjaGFibGUgZGVzdGluYXRpb25z
IHNpbmNlIHRoZSBMb2MtUklCIGlzIHN0aWxsIHBvaW50aW5nIHRvIHRoZSB1bnJlYWNoYWJsZSBO
SCBmb3IgdGhlIGFmZmVjdGVkIE5MUklzLg0KICAgIA0KICAgIFRoZSB0aGluZyB0aGF0IGlzIHNv
bWV3aGF0IGRpZmZlcmVudCBmb3IgYSBJWFAgZW52aXJvbm1lbnQgcnVubmluZyBhIHJvdXRlDQog
ICAgc2VydmVyIHRoYW4gbm9ybWFsIGVCR1AgaXMgdGhlIGxvdyAodG8gemVybykgbGlrZWxpaG9v
ZCBvZiBoYXZpbmcgYSBiYWNrdXANCiAgICBwYXRoLiAgSWYgMTAvOCB3YXMgbGVhcm5lZCBmcm9t
IHRoZSByb3V0ZSBzZXJ2ZXIgZm9yIG5leHRob3AgMTkyLjAuMi4xLCBhbmQNCiAgICB5b3Ugc3Rv
cCBiZWluZyBhYmxlIHRvIHJlYWNoIHRoYXQgbmV4dGhvcCwgcmVtb3ZpbmcgaXQgZnJvbSB5b3Vy
IGZvcndhcmRpbmcNCiAgICAodW5yZWFjaGFibGUpIGlzIHlvdXIgb25seSBjaG9pY2UuDQogICAg
DQogICAgWW91ICptaWdodCogaGF2ZSBhIHNvdXJjZSBvZiB0aGF0IHBhdGggaW50ZXJuYWxseS4g
IEluIHRoYXQgY2FzZSwgeW91IGNhbg0KICAgIHVzZSBpdC4NCiAgICANCiAgICBCdXQgbW9yZSBp
bXBvcnRhbnRseSwgeW91J2xsIHN0b3Agc2VuZGluZyBpdCB0b3dhcmQgeW91ciBvd24gcGVlcmlu
ZyBhbmQNCiAgICBhdHRyYWN0aW5nIGJsYWNraG9sZWQgdHJhZmZpYy4NCiAgICANCiAgICA+IEkg
d29uZGVyIHdoZXRoZXIgIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWlk
ci1iZ3AtYmVzdHBhdGgtc2VsZWN0aW9uLWNyaXRlcmlhIGJlIHVzZWZ1bCBoZXJlLg0KICAgIA0K
ICAgIEluIGEgc2Vuc2Ugb2YgZ29vZCB0aW1pbmcsIEpvaG4gU2N1ZGRlciBoYWQgYnJvdWdodCB0
aGlzIHRvIG15IGF0dGVudGlvbg0KICAgIGFib3V0IGFuIGhvdXIgYWdvLiANCiAgICANCiAgICBS
Uy1CRkQgYmFzaWNhbGx5IHJlaW52ZW50cyB0aGUgc2FtZSBwcm9jZWR1cmUgaW4geW91ciBkcmFm
dCwgc2ltcGx5IGJlaW5nDQogICAgc3BlY2lmaWMgYWJvdXQgdGhlIHVzZSBvZiBCRkQgYXMgdGhl
IGRhdGFwbGFuZSBsaXZlbmVzcyBjaGVjayBtZWNoYW5pc20uDQogICAgSG93ZXZlciwgYXMgeW91
IG5vdGUgaW4gdGhlIFJTLUJGRCBkcmFmdCwgd2UgZG8gbGVhdmUgdGhlIG9wdGlvbiBmb3Igb3Ro
ZXINCiAgICBtZWNoYW5pc21zLg0KICAgIA0KICAgIEkgc3VzcGVjdCB0aGUgb3RoZXIgYXV0aG9y
cyBvZiBSUy1CRkQgYXJlbid0IHBhcnRpY3VsYXIgd2hlcmUgd2UgcGljayB1cCBvdXINCiAgICB0
ZXh0IGZvciB0aGUgcmVzb2x2YWJpbGl0eSBjb25kaXRpb24uICBIb3dldmVyLCBpZiB0aGUgc3Vn
Z2VzdGlvbiBpcyB0byBtYWtlDQogICAgYSByZWZlcmVuY2UgdG8geW91ciBkcmFmdCwgeW91J2xs
IG5lZWQgdG8gYnJpbmcgaXQgYmFjayBmcm9tIHpvbWJpZSBzdGF0ZQ0KICAgIGFuZCBwcm9ncmVz
cyBpdC4gOi0pDQogICAgDQogICAgLS0gSmVmZg0KICAgIA0KDQo=


From nobody Sun Apr 16 13:34:55 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6A011293E3 for <idr@ietfa.amsl.com>; Sun, 16 Apr 2017 13:34:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y6qUPhHwRlEo for <idr@ietfa.amsl.com>; Sun, 16 Apr 2017 13:34:52 -0700 (PDT)
Received: from mail-io0-x22c.google.com (mail-io0-x22c.google.com [IPv6:2607:f8b0:4001:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C2871292D0 for <idr@ietf.org>; Sun, 16 Apr 2017 13:34:51 -0700 (PDT)
Received: by mail-io0-x22c.google.com with SMTP id k87so114885379ioi.0 for <idr@ietf.org>; Sun, 16 Apr 2017 13:34:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=Y4XEuA2xzhVU/8y3iU4ZBuK3svNdx9dFjXRf87kA/Pw=; b=IZBZFJlhORx1WuPQfbRpbnomKeQEbVswtN8GZEcAjVYvX5P8I3a4+Ibs4YC9kuGogm VnRXXTFVKpL9ir+ZhziVdRxU2oi2OwoBG0LiUIZxsMHHRtegOzgLJEbDw2VM+juhjLKD 5Sr+nXoKGtaSQmN28ZHgcUzkeHe6FOwdUaSYdv7m1EA13bBpvWnUhVLSAVXuYYtKgXim ZcDcOWFooVCGNMxr2SD2uSzOK3Rebd11yhiKRHdDlgdClbd5LUisyjK3qwCrePmaSdiv jIKC5zQnSD+v0AEjJ5DY47G0YYJ1/zNIHaNC1Jq0zFcUp4PafgesmmDQubn6tkNDMzS1 F21A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=Y4XEuA2xzhVU/8y3iU4ZBuK3svNdx9dFjXRf87kA/Pw=; b=cRUIKLCjs4PvLIGv5SDmoXg2Sn0bki7o8PyHXZTTl2fQz+J+zSGZauXj8xQpu1j6an HBUGfZMzOSwS2NF4CLs3K1AS6XR+ZdbRAARmow09jTHWN61h2NB41K/Xwa51R209zx8C SpDa2mrZes3O467jVWSpAFjuR68yg+4Jd/wU8c94ytsbQ4NQ91/ratQEppShiO5DFqgF 7lFsj8OyA8+D5/p3HlbxbYrVeFB/SyM1iCNX3gDQkDoYvaSVAQKwPKhirAbUGhUNRm+n 7qUypgPQsSNaphSzsH8ue7rRdDGzPestiYFR7DOkUlA1ks+qbc7/bUb6AMizHapy4lkd PtTQ==
X-Gm-Message-State: AN3rC/5iiW2HehoFLM/g4Y6lhHwJFNgoJSNis/Bnu7EhN4ijBczF3Zst r1eMJYHTLy+Evt0G7WL3yDFiRLFWaA==
X-Received: by 10.107.16.135 with SMTP id 7mr6497841ioq.228.1492374890610; Sun, 16 Apr 2017 13:34:50 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Sun, 16 Apr 2017 13:34:49 -0700 (PDT)
Received: by 10.79.170.4 with HTTP; Sun, 16 Apr 2017 13:34:49 -0700 (PDT)
In-Reply-To: <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com>
References: <CA+b+ERmmqtUkJMtfOE9ABFHN0gNdztjOGELmirNgWRnDENrjaA@mail.gmail.com> <58C6751D.60306@foobar.org> <CA+b+ERkxvKzArYf7eefB5UL_kDMVBJERz=Qyi=zOsBm3KivAtg@mail.gmail.com> <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Sun, 16 Apr 2017 22:34:49 +0200
X-Google-Sender-Auth: UgvHdLiJZCjCJG60VUw5DzRXae4
Message-ID: <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com>
To: "Rajiv Asati (rajiva)" <rajiva@cisco.com>
Cc: PFRC - jhaas <jhaas@pfrc.org>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a113fe9c23a08d8054d4e9bdb
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/CuRb7-TzdJUoSa-QlkixHjd37Bo>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 16 Apr 2017 20:34:54 -0000

--001a113fe9c23a08d8054d4e9bdb
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Rajiv,

I think that everyone fully agrees that in order to consider prefix as
valid the next hop to it should be reachable.

The only open question is how to detect it when you have no direct protocol
adj. established.

Jeff seems stuck with BFD .. but there is number of folks who see S-BFD as
much better fit to the problem. Yet UDP echo in some implementations
already does it today.

I think we need to evaluate pros and cons of all options before making any
more formal recommendation. At this point however I think 7880 fits best.

Kind regards,
R.



On Apr 16, 2017 10:12 PM, "Rajiv Asati (rajiva)" <rajiva@cisco.com> wrote:

> Hi Jeff,
>
>
> >   But more importantly, you'll stop sending it toward your own peering
> and
> >   attracting blackholed traffic.
>
> Indeed. That=E2=80=99s key.
>
> And it could rely on the route resolvability condition to be appropriatel=
y
> modified, as described in
> https://tools.ietf.org/html/draft-ietf-idr-bgp-bestpath-selection-criteri=
a
> .
>
> >    RS-BFD basically reinvents the same procedure in your draft, simply
> being
> >    specific about the use of BFD as the dataplane liveness check
> mechanism.
> >    However, as you note in the RS-BFD draft, we do leave the option for
> other
> >    mechanisms.
> >
> >    I suspect the other authors of RS-BFD aren't particular where we pic=
k
> up our
> >    text for the resolvability condition.  However, if the suggestion is
> to make
> >   a reference to your draft, you'll need to bring it back from zombie
> state
> >    and progress it. :-)
>
> Agreed. It is alive (-07 version). https://tools.ietf.org/html/
> draft-ietf-idr-bgp-bestpath-selection-criteria-07
> It can be used as a normative reference in your draft.
>
> --
> Cheers,
> Rajiv Asati
> Distinguished Engineer, Cisco
>
> -----Original Message-----
> From: Jeffrey Haas <jhaas@pfrc.org>
> Date: Tuesday, March 14, 2017 at 5:36 PM
> To: Rajiv Asati <rajiva@cisco.com>
> Cc: "robert@raszuk.net" <robert@raszuk.net>, "idr@ietf.org" <idr@ietf.org=
>
> Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
>
>     Rajiv,
>
>     On Tue, Mar 14, 2017 at 09:08:24PM +0000, Rajiv Asati (rajiva) wrote:
>     > Is the assumption here that the client routers have routing view
> limited to what=E2=80=99s provided by the Route Server? If not, then woul=
dn=E2=80=99t
> Client Routers benefit from having to invalidate the path learned from th=
e
> remote client router as soon as the connectivity check failed?
>
>     This is what I believe the procedure says.  See section 6.
>
>     > Of course, Client Routers conveying the lack of NLRI reachability
> per NH to the Route Server, and expecting Route Server to provide a
> different NHs of the NLRIs, and expecting it to be functional, while stil=
l
> attracting the traffic for unreachable destinations since the Loc-RIB is
> still pointing to the unreachable NH for the affected NLRIs.
>
>     The thing that is somewhat different for a IXP environment running a
> route
>     server than normal eBGP is the low (to zero) likelihood of having a
> backup
>     path.  If 10/8 was learned from the route server for nexthop
> 192.0.2.1, and
>     you stop being able to reach that nexthop, removing it from your
> forwarding
>     (unreachable) is your only choice.
>
>     You *might* have a source of that path internally.  In that case, you
> can
>     use it.
>
>     But more importantly, you'll stop sending it toward your own peering
> and
>     attracting blackholed traffic.
>
>     > I wonder whether  https://tools.ietf.org/html/
> draft-ietf-idr-bgp-bestpath-selection-criteria be useful here.
>
>     In a sense of good timing, John Scudder had brought this to my
> attention
>     about an hour ago.
>
>     RS-BFD basically reinvents the same procedure in your draft, simply
> being
>     specific about the use of BFD as the dataplane liveness check
> mechanism.
>     However, as you note in the RS-BFD draft, we do leave the option for
> other
>     mechanisms.
>
>     I suspect the other authors of RS-BFD aren't particular where we pick
> up our
>     text for the resolvability condition.  However, if the suggestion is
> to make
>     a reference to your draft, you'll need to bring it back from zombie
> state
>     and progress it. :-)
>
>     -- Jeff
>
>
>

--001a113fe9c23a08d8054d4e9bdb
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Rajiv,<div dir=3D"auto"><br></div><div dir=3D"auto">I thi=
nk that everyone fully agrees that in order to consider prefix as valid the=
 next hop to it should be reachable.</div><div dir=3D"auto"><br></div><div =
dir=3D"auto">The only open question is how to detect it when you have no di=
rect protocol adj. established.</div><div dir=3D"auto"><br></div><div dir=
=3D"auto">Jeff seems stuck with BFD .. but there is number of folks who see=
 S-BFD as much better fit to the problem. Yet UDP echo in some implementati=
ons already does it today.</div><div dir=3D"auto"><br></div><div dir=3D"aut=
o">I think we need to evaluate pros and cons of all options before making a=
ny more formal recommendation. At this point however I think 7880 fits best=
.</div><div dir=3D"auto"><br></div><div dir=3D"auto">Kind regards,</div><di=
v dir=3D"auto">R.</div><div dir=3D"auto"><br></div><div dir=3D"auto"><br></=
div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Apr =
16, 2017 10:12 PM, &quot;Rajiv Asati (rajiva)&quot; &lt;<a href=3D"mailto:r=
ajiva@cisco.com">rajiva@cisco.com</a>&gt; wrote:<br type=3D"attribution"><b=
lockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px =
#ccc solid;padding-left:1ex">Hi Jeff,<br>
<br>
<br>
&gt;=C2=A0 =C2=A0But more importantly, you&#39;ll stop sending it toward yo=
ur own peering and<br>
&gt;=C2=A0 =C2=A0attracting blackholed traffic.<br>
<br>
Indeed. That=E2=80=99s key.<br>
<br>
And it could rely on the route resolvability condition to be appropriately =
modified, as described in<br>
<a href=3D"https://tools.ietf.org/html/draft-ietf-idr-bgp-bestpath-selectio=
n-criteria" rel=3D"noreferrer" target=3D"_blank">https://tools.ietf.org/htm=
l/<wbr>draft-ietf-idr-bgp-bestpath-<wbr>selection-criteria</a>.<br>
<br>
&gt;=C2=A0 =C2=A0 RS-BFD basically reinvents the same procedure in your dra=
ft, simply being<br>
&gt;=C2=A0 =C2=A0 specific about the use of BFD as the dataplane liveness c=
heck mechanism.<br>
&gt;=C2=A0 =C2=A0 However, as you note in the RS-BFD draft, we do leave the=
 option for other<br>
&gt;=C2=A0 =C2=A0 mechanisms.<br>
&gt;<br>
&gt;=C2=A0 =C2=A0 I suspect the other authors of RS-BFD aren&#39;t particul=
ar where we pick up our<br>
&gt;=C2=A0 =C2=A0 text for the resolvability condition.=C2=A0 However, if t=
he suggestion is to make<br>
&gt;=C2=A0 =C2=A0a reference to your draft, you&#39;ll need to bring it bac=
k from zombie state<br>
&gt;=C2=A0 =C2=A0 and progress it. :-)<br>
<br>
Agreed. It is alive (-07 version). <a href=3D"https://tools.ietf.org/html/d=
raft-ietf-idr-bgp-bestpath-selection-criteria-07" rel=3D"noreferrer" target=
=3D"_blank">https://tools.ietf.org/html/<wbr>draft-ietf-idr-bgp-bestpath-<w=
br>selection-criteria-07</a><br>
It can be used as a normative reference in your draft.<br>
<br>
--<br>
Cheers,<br>
Rajiv Asati<br>
Distinguished Engineer, Cisco<br>
<br>
-----Original Message-----<br>
From: Jeffrey Haas &lt;<a href=3D"mailto:jhaas@pfrc.org">jhaas@pfrc.org</a>=
&gt;<br>
Date: Tuesday, March 14, 2017 at 5:36 PM<br>
To: Rajiv Asati &lt;<a href=3D"mailto:rajiva@cisco.com">rajiva@cisco.com</a=
>&gt;<br>
Cc: &quot;<a href=3D"mailto:robert@raszuk.net">robert@raszuk.net</a>&quot; =
&lt;<a href=3D"mailto:robert@raszuk.net">robert@raszuk.net</a>&gt;, &quot;<=
a href=3D"mailto:idr@ietf.org">idr@ietf.org</a>&quot; &lt;<a href=3D"mailto=
:idr@ietf.org">idr@ietf.org</a>&gt;<br>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt<br>
<br>
=C2=A0 =C2=A0 Rajiv,<br>
<br>
=C2=A0 =C2=A0 On Tue, Mar 14, 2017 at 09:08:24PM +0000, Rajiv Asati (rajiva=
) wrote:<br>
=C2=A0 =C2=A0 &gt; Is the assumption here that the client routers have rout=
ing view limited to what=E2=80=99s provided by the Route Server? If not, th=
en wouldn=E2=80=99t Client Routers benefit from having to invalidate the pa=
th learned from the remote client router as soon as the connectivity check =
failed?<br>
<br>
=C2=A0 =C2=A0 This is what I believe the procedure says.=C2=A0 See section =
6.<br>
<br>
=C2=A0 =C2=A0 &gt; Of course, Client Routers conveying the lack of NLRI rea=
chability per NH to the Route Server, and expecting Route Server to provide=
 a different NHs of the NLRIs, and expecting it to be functional, while sti=
ll attracting the traffic for unreachable destinations since the Loc-RIB is=
 still pointing to the unreachable NH for the affected NLRIs.<br>
<br>
=C2=A0 =C2=A0 The thing that is somewhat different for a IXP environment ru=
nning a route<br>
=C2=A0 =C2=A0 server than normal eBGP is the low (to zero) likelihood of ha=
ving a backup<br>
=C2=A0 =C2=A0 path.=C2=A0 If 10/8 was learned from the route server for nex=
thop 192.0.2.1, and<br>
=C2=A0 =C2=A0 you stop being able to reach that nexthop, removing it from y=
our forwarding<br>
=C2=A0 =C2=A0 (unreachable) is your only choice.<br>
<br>
=C2=A0 =C2=A0 You *might* have a source of that path internally.=C2=A0 In t=
hat case, you can<br>
=C2=A0 =C2=A0 use it.<br>
<br>
=C2=A0 =C2=A0 But more importantly, you&#39;ll stop sending it toward your =
own peering and<br>
=C2=A0 =C2=A0 attracting blackholed traffic.<br>
<br>
=C2=A0 =C2=A0 &gt; I wonder whether=C2=A0 <a href=3D"https://tools.ietf.org=
/html/draft-ietf-idr-bgp-bestpath-selection-criteria" rel=3D"noreferrer" ta=
rget=3D"_blank">https://tools.ietf.org/html/<wbr>draft-ietf-idr-bgp-bestpat=
h-<wbr>selection-criteria</a> be useful here.<br>
<br>
=C2=A0 =C2=A0 In a sense of good timing, John Scudder had brought this to m=
y attention<br>
=C2=A0 =C2=A0 about an hour ago.<br>
<br>
=C2=A0 =C2=A0 RS-BFD basically reinvents the same procedure in your draft, =
simply being<br>
=C2=A0 =C2=A0 specific about the use of BFD as the dataplane liveness check=
 mechanism.<br>
=C2=A0 =C2=A0 However, as you note in the RS-BFD draft, we do leave the opt=
ion for other<br>
=C2=A0 =C2=A0 mechanisms.<br>
<br>
=C2=A0 =C2=A0 I suspect the other authors of RS-BFD aren&#39;t particular w=
here we pick up our<br>
=C2=A0 =C2=A0 text for the resolvability condition.=C2=A0 However, if the s=
uggestion is to make<br>
=C2=A0 =C2=A0 a reference to your draft, you&#39;ll need to bring it back f=
rom zombie state<br>
=C2=A0 =C2=A0 and progress it. :-)<br>
<br>
=C2=A0 =C2=A0 -- Jeff<br>
<br>
<br>
</blockquote></div></div>

--001a113fe9c23a08d8054d4e9bdb--


From nobody Mon Apr 17 19:50:50 2017
Return-Path: <li_zhenqiang@hotmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3885D12941C; Mon, 17 Apr 2017 19:50:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.116
X-Spam-Level: 
X-Spam-Status: No, score=-1.116 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FORGED_HOTMAIL_RCVD2=0.874, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=hotmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PksHteXnrwv4; Mon, 17 Apr 2017 19:50:45 -0700 (PDT)
Received: from APC01-PU1-obe.outbound.protection.outlook.com (mail-oln040092254037.outbound.protection.outlook.com [40.92.254.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 203ED12940E; Mon, 17 Apr 2017 19:50:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Og3xdFKjB5R8wrP4f1VCwGl4nfgm19iZYLItaflnlsg=; b=YccOLj2+S2rCoV45Xl4j8UKgfX+EYUJYbyHO6gL3CvgFXW/3+fyzIwuzOfuiYORN21H/sIjt8rNuBmUyETSIoA2wxRkNCkQ7GO/zAy9+De9e0IB3l3DOSl3ViY8SX1sTU3+quhrNKG8fCcTJTX5rrdBD5Td7ukjFwGAOFStI9B6XpJki2AJIzXj+5wNCY60s40sUdP1ibedWGLrWEUi5ZOzCDZjuhkA0CD6Ua3SgKHjtSByAtJAyLKe/G3lo3HYDwW6FYDA/nr90O4+WNg1yjf+89p+hGCaMX1IUN+nw29qH0UTYrlDN9x4d28s/QrHdUP40SUqi6WNJw7Ua3iClKw==
Received: from PU1APC01FT041.eop-APC01.prod.protection.outlook.com (10.152.252.59) by PU1APC01HT172.eop-APC01.prod.protection.outlook.com (10.152.253.171) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1019.14; Tue, 18 Apr 2017 02:50:38 +0000
Received: from HK2PR0601MB1361.apcprd06.prod.outlook.com (10.152.252.56) by PU1APC01FT041.mail.protection.outlook.com (10.152.253.108) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1019.14 via Frontend Transport; Tue, 18 Apr 2017 02:50:37 +0000
Received: from HK2PR0601MB1361.apcprd06.prod.outlook.com ([10.165.182.19]) by HK2PR0601MB1361.apcprd06.prod.outlook.com ([10.165.182.19]) with mapi id 15.01.1034.015; Tue, 18 Apr 2017 02:50:37 +0000
From: li zhenqiang <li_zhenqiang@hotmail.com>
To: "Acee Lindem (acee)" <acee@cisco.com>, idr <idr@ietf.org>, draft-ietf-idr-rfc5575bis.all <draft-ietf-idr-rfc5575bis.all@ietf.org>
CC: wangruixue <wangruixue@chinamobile.com>, rv <rv@NIC.DTAG.DE>, Zhuangshunwan <zhuangshunwan@huawei.com>, Jimmy <jie.dong@huawei.com>
Thread-Topic: Re: [Idr] question about BGP extended community
Thread-Index: AQHSt+6Ovr20nhyBykmQlSd+6X8JLA==
Date: Tue, 18 Apr 2017 02:50:37 +0000
Message-ID: <HK2PR0601MB1361E6C3282B51E3D8EC4C86FC190@HK2PR0601MB1361.apcprd06.prod.outlook.com>
References: <D51634BE.A89FB%acee@cisco.com>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=hotmail.com;
x-incomingtopheadermarker: OriginalChecksum:8FC0871369CEF632D1A88AAD5DF6E0A3E4C6BA733364C3BE9B3BD2A006FB63B2; UpperCasedChecksum:AC6FBC7374EAC0525564E1A47D24E2D4055192568C74A83D7E424550C7358CBD; SizeAsReceived:8020; Count:39
x-ms-exchange-messagesentrepresentingtype: 1
x-microsoft-exchange-diagnostics: 1; PU1APC01HT172; 5:RJy4g+H6NsMPHiiCb+gX8JjFQl4c9VK2RJHJW6ToPBYODDnhJ+ncYBUq4ugOJsGURikSNZfpa4JVlYeuCQLpwFYtE2zkTgDjBgTZKvKjK7ixO0lcHxyUYXekPBFHx498qFjXDWwPJ9iD3bkyE/bhPw==; 24:yxweFPenrZrwsaRz3PDknVMk/prb6E2Q+hma0WiGIhb53S7vv/TEH0IqNyhCjqNzfVaFD1FkQQ1l1MXgkjlyptNTCR2AjYiZEKhxV5x3Xf8=; 7:+HP8sy69ZchzfqgvSdqYtYp/6zYGepoO/iJsgQYXyPXnT+5UiUzNIzMQsmx9cAfqrRkGoD17ID8omVEwxrmar4EZu8bjDikiUVgmUWEZ7Y8UjgdaPT2GZlVQCRRPjxifEcMEbM40jPY0SYXJk4tKGMxI7f4IEGHZU+ooxJl4jp+ajqnaKAF2uTx7fIFarasnRDHQMEHOuXhL+r+A2kSz9gYGCm8bOUzfNP5DigZW0j+/fKRsIcnYBktW4kIMwW3Y4naaqaITrfcbO5kXg0RIDcqJKqk+FWM14fnVMB3r6daPA3H/oJ7l5O5VLVQfHui2
x-incomingheadercount: 39
x-eopattributedmessage: 0
x-forefront-antispam-report: EFV:NLI; SFV:NSPM; SFS:(7070007)(98901004); DIR:OUT; SFP:1901; SCL:1; SRVR:PU1APC01HT172; H:HK2PR0601MB1361.apcprd06.prod.outlook.com; FPR:; SPF:None; LANG:en; 
x-ms-office365-filtering-correlation-id: c56d5166-ba5c-4569-f01e-08d48605af25
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322274)(1603101448)(1601125374)(1701031045); SRVR:PU1APC01HT172; 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(444000031); SRVR:PU1APC01HT172; BCL:0; PCL:0; RULEID:; SRVR:PU1APC01HT172; 
x-forefront-prvs: 028166BF91
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_HK2PR0601MB1361E6C3282B51E3D8EC4C86FC190HK2PR0601MB1361_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Apr 2017 02:50:37.5680 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU1APC01HT172
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/4byGF4mdz37hbTm08X0nsn4BDlk>
Subject: Re: [Idr] question about BGP extended community
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 02:50:47 -0000

--_000_HK2PR0601MB1361E6C3282B51E3D8EC4C86FC190HK2PR0601MB1361_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_HK2PR0601MB1361E6C3282B51E3D8EC4C86FC190HK2PR0601MB1361_
Content-Type: text/html; charset="utf-8"
Content-ID: <07373EC9CE7BDE43A6A5C382D3546EFE@apcprd06.prod.outlook.com>
Content-Transfer-Encoding: base64
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--_000_HK2PR0601MB1361E6C3282B51E3D8EC4C86FC190HK2PR0601MB1361_--


From nobody Mon Apr 17 20:06:34 2017
Return-Path: <li_zhenqiang@hotmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE822126CF6 for <idr@ietfa.amsl.com>; Mon, 17 Apr 2017 20:06:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.116
X-Spam-Level: 
X-Spam-Status: No, score=-1.116 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FORGED_HOTMAIL_RCVD2=0.874, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=hotmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UXulhk6S09VG for <idr@ietfa.amsl.com>; Mon, 17 Apr 2017 20:06:31 -0700 (PDT)
Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-oln040092255030.outbound.protection.outlook.com [40.92.255.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 216DB12940E for <idr@ietf.org>; Mon, 17 Apr 2017 20:06:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=7b0SnB+9xyts5XH6xlWG7G0yBrR/Sc1HFkzSELKVWOM=; b=RCSz8wS99BGr152vgpCEuMk7hJfXeKbyM/T3PYAiwJ0zDO5BGrkXgAfZXDFdYZn4r5tULvqY7BpskqOgUdMDwJphWpfoe9Q67wEp72GuF4vWZhMMxvwBPK1xYpOYQr30NK9Bq0hpSJgjHAlEaztoJwmQxg80dFxHrEcUyrXvvhvCrF9/PkgnPsAagG/1N8Ffu4WgFgmhdlRM/zGrYKZ1t7bEV1rX9QLnnemAOtsvTQmz35Al++asphw1ZEJfrl2ydeWEpLmmRQJP6ZaidR8ZTrhbQQALwlgoFp6o/L0/9ClJUGJ0uAWiRCrkdpjxkjamlKS1QF+J8fBqfSyheFO76A==
Received: from HK2APC01FT005.eop-APC01.prod.protection.outlook.com (10.152.248.57) by HK2APC01HT067.eop-APC01.prod.protection.outlook.com (10.152.249.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1019.14; Tue, 18 Apr 2017 03:06:28 +0000
Received: from HK2PR0601MB1361.apcprd06.prod.outlook.com (10.152.248.57) by HK2APC01FT005.mail.protection.outlook.com (10.152.248.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1019.14 via Frontend Transport; Tue, 18 Apr 2017 03:06:28 +0000
Received: from HK2PR0601MB1361.apcprd06.prod.outlook.com ([10.165.182.19]) by HK2PR0601MB1361.apcprd06.prod.outlook.com ([10.165.182.19]) with mapi id 15.01.1034.015; Tue, 18 Apr 2017 03:06:28 +0000
From: li zhenqiang <li_zhenqiang@hotmail.com>
To: Eric C Rosen <erosen@juniper.net>, Job Snijders <job@instituut.net>, idr <idr@ietf.org>
Thread-Topic: Re: [Idr] clarification sought on rfc4360 non-transitive extended communities
Thread-Index: AQHSt/DF6UMV0gdIqkmNp5pXkbu9Tg==
Date: Tue, 18 Apr 2017 03:06:28 +0000
Message-ID: <HK2PR0601MB13610989519C5EF1D496A66AFC190@HK2PR0601MB1361.apcprd06.prod.outlook.com>
References: <20170414134435.tpocpyuappmbcam4@Vurt.local>, <c5f761c9-2a9f-3353-17f9-aac4fca2c07e@juniper.net>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=hotmail.com;
x-incomingtopheadermarker: OriginalChecksum:24DB0DAC7FAE508AA029DEEA78F19E061DFEE9E8BC4400D723CBFB7E092EC4AB; UpperCasedChecksum:0C437E006182B4B659F67945D91FF86D46D8EDCA1046C4E725E9724433B4A25B; SizeAsReceived:7945; Count:38
x-ms-exchange-messagesentrepresentingtype: 1
x-microsoft-exchange-diagnostics: 1; HK2APC01HT067; 5:SpE0+42CQ5myPi+ogVeoOAAuLkcttumEOKh9Rin7rha2rBZgFx7l2nk1iLnRRbHPE5FtL9l0u2lpRCKQ4uW2MKfme0nFeYe2LEohE6hFrl8sZ1lHSXA0souv1matXRMFutSfgCs1nCTmCduYAjhmoQ==; 24:tim4g2s1ad0UUWFg7PwCS2mlKu8AvSTY4ArL8LsrVMrYmvzJAkvmnMdGf1VJJBUZzxlKpaE9b8zDE8URJCnu+QdrWvY16KOe2/s9+sPq44M=; 7:JWyyuKBnChmgb1fob9qFMyXMa1RGmDI3PRBpA2udlNHMx9HNOS/1kaD5Kr2trAeqgch2k1sNqFRz8WpAcOSKoxQwkTW7Y9pKF/jkND59wY84plTQePKQ058voD7UUsyL3D24sTyanzGLQTRboqYX5BkFEVSXKT8zybc7sYL+mYVhfb5p9VssUGNG/SF3tJXfuoXONb1VSLnL9uPJO6ouwEJMo8iJ19YiQH9gRNkxoHvJ+u86RuijT50YYhLNlA7DbDNMiWYYGEnPnOUvJG6eUuoCCJ+69PD/arSrSDgZ+fuAJx4/GYs9c2962W/mzheS
x-incomingheadercount: 38
x-eopattributedmessage: 0
x-forefront-antispam-report: EFV:NLI; SFV:NSPM; SFS:(7070007)(98901004); DIR:OUT; SFP:1901; SCL:1; SRVR:HK2APC01HT067; H:HK2PR0601MB1361.apcprd06.prod.outlook.com; FPR:; SPF:None; LANG:en; 
x-ms-office365-filtering-correlation-id: 0e1d3acd-33d5-4fd4-255c-08d48607e679
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322274)(1601125374)(1603101448)(1701031045); SRVR:HK2APC01HT067; 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(444000031); SRVR:HK2APC01HT067; BCL:0; PCL:0; RULEID:; SRVR:HK2APC01HT067; 
x-forefront-prvs: 028166BF91
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_HK2PR0601MB13610989519C5EF1D496A66AFC190HK2PR0601MB1361_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Apr 2017 03:06:28.3026 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HK2APC01HT067
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/oMidvpiLv4TeqJnsxh-tJeDeJZk>
Subject: Re: [Idr] clarification sought on rfc4360 non-transitive extended communities
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 03:06:33 -0000

--_000_HK2PR0601MB13610989519C5EF1D496A66AFC190HK2PR0601MB1361_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi Eric and Job,

Extended communities are used to do more and more things by introducing new=
 types. So we cann't expect a BGP speaker that understands the  Extended Co=
mmunities attribute understands all the EC types.

Best Regards,
________________________________
li_zhenqiang@hotmail.com

From: Eric C Rosen<mailto:erosen@juniper.net>
Date: 2017-04-14 22:58
To: Job Snijders<mailto:job@instituut.net>; idr@ietf.org<mailto:idr@ietf.or=
g>
Subject: Re: [Idr] clarification sought on rfc4360 non-transitive extended =
communities
On 4/14/2017 9:44 AM, Job Snijders wrote:
> Hi IDR,
>
> RFC 4360 states:
>
>      """
>      If a route has a non-transitivity extended community, then before
>      advertising the route across the Autonomous System boundary the
>      community SHOULD be removed from the route.  However, the community
>      SHOULD NOT be removed when advertising the route across the BGP
>      Confederation boundary.
>      """
>

You'll note that there are very few non-transitive extended
communities.  Extended communities are usually used to carry parameters
of various BGP-based control protocols.  As such, it would be nice if
they could be scoped to the "domain" of the control protocol.  The
transitive/non-transitive distinction was a somewhat primitive attempt
to provide this scoping.  Unfortunately, the boundaries of the control
protocol domain are rarely the boundaries of the AS in which a route
originates.  So this particular form of scoping has not proven to be
very useful.

> For my edification, I have two questions:
>
>      o   Why was nothing specified for the behaviour of receivers?

Since the authors are either retired or in management, it is difficult
to say for sure.  I'd say there are two possibilities:

- Sloppy specification writing.

- A belief that if the transmitter has decided to send the
non-transitive EC over an AS boundary, it may have a good reason for
doing so, and the receiver shouldn't second guess it.

I'd guess the former.

It is of course true that receivers have to be careful about getting ECs
from outside the domain of the relevant control protocol, but that's
true whether the EC is transitive or non-transitive.

>      o   why is it a "SHOULD" and not a "MUST"?

I'm pretty sure it is a "SHOULD"  because the authors thought that there
might be applications that need to violate the rule, and hence it should
be allowable to have policy that passes the non-transitive ECs.

>
> Is it a "SHOULD" because Extended Communities are wrapped in an optional
> transitive path attribute, so strictly speaking, the non-transivity can't
> be enforced anyway, since a middle-box might not understand the Extended
> Community?
>
>

Well, that's a possibility, but I don't recall anyone worrying too much
about ASBRS that don't understand the Extended Communities attribute.

_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr

--_000_HK2PR0601MB13610989519C5EF1D496A66AFC190HK2PR0601MB1361_
Content-Type: text/html; charset="iso-8859-1"
Content-ID: <CD73196C84D9CB4BBAFB7FF2DED98C67@apcprd06.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style>body { line-height: 1.5; }blockquote { margin-top: 0px; margin-botto=
m: 0px; margin-left: 0.5em; }body { font-size: 10.5pt; font-family: ????; c=
olor: rgb(0, 0, 0); line-height: 1.5; }body { font-size: 10.5pt; color: rgb=
(0, 0, 0); line-height: 1.5; }</style>
</head>
<body>
<div>Hi Eric and Job,&nbsp;</div>
<div><br>
</div>
<div><span></span>Extended communities are used to do more and more things =
by introducing new types. So we cann't expect a BGP speaker that understand=
s the&nbsp;<span style=3D"font-size: 10.5pt; line-height: 1.5; background-c=
olor: window;">&nbsp;</span><span style=3D"font-size: 10.5pt; line-height: =
1.5; background-color: window;">Extended
 Communities attribute understands all the EC types.</span></div>
<div><br>
</div>
<div>Best Regards,</div>
<hr style=3D"width: 210px; height: 1px;" color=3D"#b5c4df" size=3D"1" align=
=3D"left">
<div><span>
<div style=3D"MARGIN: 10px; FONT-FAMILY: verdana; FONT-SIZE: 10pt">
<div>li_zhenqiang@hotmail.com</div>
</div>
</span></div>
<blockquote style=3D"margin-top: 0px; margin-bottom: 0px; margin-left: 0.5e=
m;">
<div>&nbsp;</div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm =
0cm 0cm">
<div style=3D"PADDING-RIGHT: 8px; PADDING-LEFT: 8px; FONT-SIZE: 12px;FONT-F=
AMILY:tahoma;COLOR:#000000; BACKGROUND: #efefef; PADDING-BOTTOM: 8px; PADDI=
NG-TOP: 8px">
<div><b>From:</b>&nbsp;<a href=3D"mailto:erosen@juniper.net">Eric C Rosen</=
a></div>
<div><b>Date:</b>&nbsp;2017-04-14&nbsp;22:58</div>
<div><b>To:</b>&nbsp;<a href=3D"mailto:job@instituut.net">Job Snijders</a>;=
 <a href=3D"mailto:idr@ietf.org">
idr@ietf.org</a></div>
<div><b>Subject:</b>&nbsp;Re: [Idr] clarification sought on rfc4360 non-tra=
nsitive extended communities</div>
</div>
</div>
<div>
<div>On 4/14/2017 9:44 AM, Job Snijders wrote:</div>
<div>&gt; Hi IDR,</div>
<div>&gt;</div>
<div>&gt; RFC 4360 states:</div>
<div>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </div>
<div>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;&quot;&quot;</div>
<div>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If a route has a non-transitivity e=
xtended community, then before</div>
<div>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; advertising the route across the Au=
tonomous System boundary the</div>
<div>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; community SHOULD be removed from th=
e route.&nbsp; However, the community</div>
<div>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SHOULD NOT be removed when advertis=
ing the route across the BGP</div>
<div>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Confederation boundary.</div>
<div>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;&quot;&quot;</div>
<div>&gt;</div>
<div>&nbsp;</div>
<div>You'll note that there are very few non-transitive extended </div>
<div>communities.&nbsp; Extended communities are usually used to carry para=
meters </div>
<div>of various BGP-based control protocols.&nbsp; As such, it would be nic=
e if </div>
<div>they could be scoped to the &quot;domain&quot; of the control protocol=
.&nbsp; The </div>
<div>transitive/non-transitive distinction was a somewhat primitive attempt=
 </div>
<div>to provide this scoping.&nbsp; Unfortunately, the boundaries of the co=
ntrol </div>
<div>protocol domain are rarely the boundaries of the AS in which a route <=
/div>
<div>originates.&nbsp; So this particular form of scoping has not proven to=
 be </div>
<div>very useful.</div>
<div>&nbsp;</div>
<div>&gt; For my edification, I have two questions:</div>
<div>&gt;</div>
<div>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; o&nbsp;&nbsp; Why was nothing speci=
fied for the behaviour of receivers?</div>
<div>&nbsp;</div>
<div>Since the authors are either retired or in management, it is difficult=
 </div>
<div>to say for sure.&nbsp; I'd say there are two possibilities:</div>
<div>&nbsp;</div>
<div>- Sloppy specification writing.</div>
<div>&nbsp;</div>
<div>- A belief that if the transmitter has decided to send the </div>
<div>non-transitive EC over an AS boundary, it may have a good reason for <=
/div>
<div>doing so, and the receiver shouldn't second guess it.</div>
<div>&nbsp;</div>
<div>I'd guess the former.</div>
<div>&nbsp;</div>
<div>It is of course true that receivers have to be careful about getting E=
Cs </div>
<div>from outside the domain of the relevant control protocol, but that's <=
/div>
<div>true whether the EC is transitive or non-transitive.</div>
<div>&nbsp;</div>
<div>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; o&nbsp;&nbsp; why is it a &quot;SHO=
ULD&quot; and not a &quot;MUST&quot;?</div>
<div>&nbsp;</div>
<div>I'm pretty sure it is a &quot;SHOULD&quot;&nbsp; because the authors t=
hought that there </div>
<div>might be applications that need to violate the rule, and hence it shou=
ld </div>
<div>be allowable to have policy that passes the non-transitive ECs.</div>
<div>&nbsp;</div>
<div>&gt;</div>
<div>&gt; Is it a &quot;SHOULD&quot; because Extended Communities are wrapp=
ed in an optional</div>
<div>&gt; transitive path attribute, so strictly speaking, the non-transivi=
ty can't</div>
<div>&gt; be enforced anyway, since a middle-box might not understand the E=
xtended</div>
<div>&gt; Community?</div>
<div>&gt;</div>
<div>&gt;</div>
<div>&nbsp;</div>
<div>Well, that's a possibility, but I don't recall anyone worrying too muc=
h </div>
<div>about ASBRS that don't understand the Extended Communities attribute.<=
/div>
<div>&nbsp;</div>
<div>_______________________________________________</div>
<div>Idr mailing list</div>
<div>Idr@ietf.org</div>
<div>https://www.ietf.org/mailman/listinfo/idr</div>
</div>
</blockquote>
</body>
</html>

--_000_HK2PR0601MB13610989519C5EF1D496A66AFC190HK2PR0601MB1361_--


From nobody Mon Apr 17 20:11:39 2017
Return-Path: <joelja@bogus.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A7FA126B72; Mon, 17 Apr 2017 20:11:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.889
X-Spam-Level: 
X-Spam-Status: No, score=-6.889 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eYdLypV6ibxi; Mon, 17 Apr 2017 20:11:36 -0700 (PDT)
Received: from nagasaki.bogus.com (nagasaki.bogus.com [IPv6:2001:418:1::81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7AC3A12940E; Mon, 17 Apr 2017 20:11:36 -0700 (PDT)
Received: from [IPv6:2607:fb90:2287:64d7:d85b:4d25:2776:d384] ([IPv6:2607:fb90:2287:64d7:d85b:4d25:2776:d384]) (authenticated bits=0) by nagasaki.bogus.com (8.15.2/8.15.2) with ESMTPSA id v3I3BM2s067203 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 18 Apr 2017 03:11:23 GMT (envelope-from joelja@bogus.com)
Content-Type: multipart/alternative; boundary=Apple-Mail-62D3EE55-2C52-46A6-BF89-97799D95F20C
Mime-Version: 1.0 (1.0)
From: Joel Jaeggli <joelja@bogus.com>
X-Mailer: iPhone Mail (14E304)
In-Reply-To: <HK2PR0601MB1361E6C3282B51E3D8EC4C86FC190@HK2PR0601MB1361.apcprd06.prod.outlook.com>
Date: Mon, 17 Apr 2017 20:11:21 -0700
Cc: "Acee Lindem (acee)" <acee@cisco.com>, idr <idr@ietf.org>, "draft-ietf-idr-rfc5575bis.all" <draft-ietf-idr-rfc5575bis.all@ietf.org>, wangruixue <wangruixue@chinamobile.com>
Content-Transfer-Encoding: 7bit
Message-Id: <C55DFF44-1BDE-4501-95B3-9C663F8EDC7D@bogus.com>
References: <D51634BE.A89FB%acee@cisco.com> <HK2PR0601MB1361E6C3282B51E3D8EC4C86FC190@HK2PR0601MB1361.apcprd06.prod.outlook.com>
To: li zhenqiang <li_zhenqiang@hotmail.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/QaGG4YE_f1wakjVrb6jYRkJToPQ>
Subject: Re: [Idr] question about BGP extended community
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 03:11:38 -0000

--Apple-Mail-62D3EE55-2C52-46A6-BF89-97799D95F20C
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable



Sent from my iPhone

> On Apr 17, 2017, at 19:50, li zhenqiang <li_zhenqiang@hotmail.com> wrote:
>=20
> Hi Acee,
>=20
> Thank you very much for your answer. The implication is not declared expli=
citly in corresponding specifications. So some professionals raised this que=
stion when the draft  https://datatracker.ietf.org/doc/draft-li-idr-flowspec=
-populate-to-fib was presented in IETF98. I think it is better to specify ex=
plicitly that " A BGP speaker supports FlowSpec SHOULD support the filter ac=
tions defined with these extended communities" before table 2 in RFC5575bis s=
ince it is under discussion, we have the chance. Comments from the authors o=
f RFC5575bis are expected. Thanks.

Flowspec tends to be something implemented by mutual agreement. E.G. my prov=
ider indicates support for flowspec and what parameters they expect or suppo=
rt and I implement my export policy accordingly.=20

> Best Regards,
> li_zhenqiang@hotmail.com
> =20
> From: Acee Lindem (acee)
> Date: 2017-04-14 20:22
> To: li zhenqiang; idr
> CC: wangruixue
> Subject: Re: [Idr] question about BGP extended community
> Hi Zhenqiang,
> =20
> See inline.
> =20
> From:  Idr <idr-bounces@ietf.org> on behalf of li zhenqiang
> <li_zhenqiang@hotmail.com>
> Date:  Friday, April 14, 2017 at 5:16 AM
> To:  IDR List <idr@ietf.org>
> Cc:  wangruixue <wangruixue@chinamobile.com>
> Subject:  [Idr] question about BGP extended community
> =20
> =20
> >Hi all,
> >
> >As per RFC4360, BGP extended community is a transitive optional attribute=

> > and RFC4271 specifies it is not required or expected that all BGP
> >implementations support all optional attributes.
> >  If we do want the BGP peer supports some kinds of extended communities,=

> >how to determine this? Check all the peers in advance? MPLS level 3 VPN,
> >for example, uses the extended community
> > to carry route target information, all the relevant BGP peers should
> >support the RT extended community, but we can not expect this according
> >to RFC4360 and RFC4271. The traffic action extended community
> > as defined in RFC5575 (BGP flowspec) and updated in
> >https://datatracker.ietf.org/doc/draft-li-idr-flowspec-populate-to-fib/
> ><file:///C:/Users/cmcc/AppData/Roaming/Foxmail7/Temp-9608-20170414150941/=
%
> >C2%A0https://datatracker.ietf.org/doc/draft-li-idr-flowspec-populate-to-f=
i
> >b/>,
> > for another example, is expected to be supported by the receiver, which
> >is not guaranteed by the transitive optional attribute.
> > Do we need to do something here? Thank you very much for your help.
> =20
> In general, if a BGP speaker supports an address family (RFC 4760), it
> should support the required extended communities. The MP capability
> negotiation will assure that only BGP speakers supporting the AF will
> exchange the associated NLRI and attendant attributes including extended
> communities. Of course, many extended communities are, in fact, optional
> and the specifications for those extended communities should specify the
> details of partial deployment.
> =20
> So, I don=E2=80=99t believe we need anything here.
> =20
> Thanks,
> Acee
> >
> >
> >Best Regards,
> >________________________________________
> >li_zhenqiang@hotmail.com
> =20
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr

--Apple-Mail-62D3EE55-2C52-46A6-BF89-97799D95F20C
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div><br><br>Sent from my iPhone</div><div>=
<br>On Apr 17, 2017, at 19:50, li zhenqiang &lt;<a href=3D"mailto:li_zhenqia=
ng@hotmail.com">li_zhenqiang@hotmail.com</a>&gt; wrote:<br><br></div><blockq=
uote type=3D"cite"><div>

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
<style>body { line-height: 1.5; }blockquote { margin-top: 0px; margin-bottom=
: 0px; margin-left: 0.5em; }body { font-size: 10.5pt; font-family: =E5=BE=AE=
=E8=BD=AF=E9=9B=85=E9=BB=91; color: rgb(0, 0, 0); line-height: 1.5; }</style=
>


<div><span></span>Hi Acee,</div>
<div><br>
</div>
<div>Thank you very much for your answer. The implication is not declared ex=
plicitly in corresponding specifications. So some professionals raised this q=
uestion when the draft &nbsp;<span style=3D"font-size: 10.5pt; line-height: 1=
.5; background-color: window;"></span><a href=3D"https://datatracker.ietf.or=
g/doc/draft-li-idr-flowspec-populate-to-fib" style=3D"font-size: 10.5pt; lin=
e-height: 1.5; background-color: window;">https://datatracker.ietf.org/doc/d=
raft-li-idr-flowspec-populate-to-fib</a><span style=3D"font-size: 10.5pt; li=
ne-height: 1.5; background-color: window;">&nbsp;</span><span style=3D"font-=
size: 10.5pt; line-height: 1.5; background-color: window;">was
 presented in IETF98. </span><span style=3D"background-color: window; font-s=
ize: 10.5pt; line-height: 1.5;">I think it is better to specify explicitly t=
hat " A BGP speaker supports FlowSpec SHOULD support the filter actions defi=
ned with these extended communities"
 before table 2 in RFC5575bis since it is under discussion, we have the chan=
ce. Comments from the authors of RFC5575bis are expected. Thanks.</span></di=
v></div></blockquote><div><br></div><div>Flowspec tends to be something impl=
emented by mutual agreement. E.G. my provider indicates support for flowspec=
 and what parameters they expect or support and I implement my export policy=
 accordingly.&nbsp;</div><br><blockquote type=3D"cite"><div>
<div>Best Regards,</div>
<hr style=3D"width: 210px; height: 1px;" color=3D"#b5c4df" size=3D"1" align=3D=
"left">
<div><span>
<div style=3D"MARGIN: 10px; FONT-FAMILY: verdana; FONT-SIZE: 10pt">
<div><a href=3D"mailto:li_zhenqiang@hotmail.com">li_zhenqiang@hotmail.com</a=
></div>
</div>
</span></div>
<blockquote style=3D"margin-top: 0px; margin-bottom: 0px; margin-left: 0.5em=
;">
<div>&nbsp;</div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0=
cm 0cm">
<div style=3D"PADDING-RIGHT: 8px; PADDING-LEFT: 8px; FONT-SIZE: 12px;FONT-FA=
MILY:tahoma;COLOR:#000000; BACKGROUND: #efefef; PADDING-BOTTOM: 8px; PADDING=
-TOP: 8px">
<div><b>From:</b>&nbsp;<a href=3D"mailto:acee@cisco.com">Acee Lindem (acee)<=
/a></div>
<div><b>Date:</b>&nbsp;2017-04-14&nbsp;20:22</div>
<div><b>To:</b>&nbsp;<a href=3D"mailto:li_zhenqiang@hotmail.com">li zhenqian=
g</a>; <a href=3D"mailto:idr@ietf.org">
idr</a></div>
<div><b>CC:</b>&nbsp;<a href=3D"mailto:wangruixue@chinamobile.com">wangruixu=
e</a></div>
<div><b>Subject:</b>&nbsp;Re: [Idr] question about BGP extended community</d=
iv>
</div>
</div>
<div>
<div>Hi Zhenqiang, </div>
<div>&nbsp;</div>
<div>See inline. </div>
<div>&nbsp;</div>
<div>From:&nbsp; Idr &lt;<a href=3D"mailto:idr-bounces@ietf.org">idr-bounces=
@ietf.org</a>&gt; on behalf of li zhenqiang</div>
<div>&lt;<a href=3D"mailto:li_zhenqiang@hotmail.com">li_zhenqiang@hotmail.co=
m</a>&gt;</div>
<div>Date:&nbsp; Friday, April 14, 2017 at 5:16 AM</div>
<div>To:&nbsp; IDR List &lt;<a href=3D"mailto:idr@ietf.org">idr@ietf.org</a>=
&gt;</div>
<div>Cc:&nbsp; wangruixue &lt;<a href=3D"mailto:wangruixue@chinamobile.com">=
wangruixue@chinamobile.com</a>&gt;</div>
<div>Subject:&nbsp; [Idr] question about BGP extended community</div>
<div>&nbsp;</div>
<div>&nbsp;</div>
<div>&gt;Hi all,</div>
<div>&gt;</div>
<div>&gt;As per RFC4360, BGP extended community is a transitive optional att=
ribute</div>
<div>&gt; and RFC4271 specifies it is not required or expected that all BGP<=
/div>
<div>&gt;implementations support all optional attributes.</div>
<div>&gt;&nbsp; If we do want the BGP peer supports some kinds of extended c=
ommunities,</div>
<div>&gt;how to determine this? Check all the peers in advance? MPLS level 3=
 VPN,</div>
<div>&gt;for example, uses the extended community</div>
<div>&gt; to carry route target information, all the relevant BGP peers shou=
ld</div>
<div>&gt;support the RT extended community, but we can not expect this accor=
ding</div>
<div>&gt;to RFC4360 and RFC4271. The traffic action extended community</div>=

<div>&gt; as defined in RFC5575 (BGP flowspec) and updated in</div>
<div>&gt;<a href=3D"https://datatracker.ietf.org/doc/draft-li-idr-flowspec-p=
opulate-to-fib/">https://datatracker.ietf.org/doc/draft-li-idr-flowspec-popu=
late-to-fib/</a></div>
<div>&gt;&lt;file:///C:/Users/cmcc/AppData/Roaming/Foxmail7/Temp-9608-201704=
14150941/%</div>
<div>&gt;C2%A0https://datatracker.ietf.org/doc/draft-li-idr-flowspec-populat=
e-to-fi</div>
<div>&gt;b/&gt;,</div>
<div>&gt; for another example, is expected to be supported by the receiver, w=
hich</div>
<div>&gt;is not guaranteed by the transitive optional attribute.</div>
<div>&gt; Do we need to do something here? Thank you very much for your help=
.</div>
<div>&nbsp;</div>
<div>In general, if a BGP speaker supports an address family (RFC 4760), it<=
/div>
<div>should support the required extended communities. The MP capability</di=
v>
<div>negotiation will assure that only BGP speakers supporting the AF will</=
div>
<div>exchange the associated NLRI and attendant attributes including extende=
d</div>
<div>communities. Of course, many extended communities are, in fact, optiona=
l</div>
<div>and the specifications for those extended communities should specify th=
e</div>
<div>details of partial deployment.</div>
<div>&nbsp;</div>
<div>So, I don=E2=80=99t believe we need anything here.</div>
<div>&nbsp;</div>
<div>Thanks,</div>
<div>Acee </div>
<div>&gt;</div>
<div>&gt;</div>
<div>&gt;Best Regards,</div>
<div>&gt;________________________________________</div>
<div>&gt;<a href=3D"mailto:li_zhenqiang@hotmail.com">li_zhenqiang@hotmail.co=
m</a></div>
<div>&nbsp;</div>
</div>
</blockquote>


</div></blockquote><blockquote type=3D"cite"><div><span>____________________=
___________________________</span><br><span>Idr mailing list</span><br><span=
><a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a></span><br><span><a href=3D=
"https://www.ietf.org/mailman/listinfo/idr">https://www.ietf.org/mailman/lis=
tinfo/idr</a></span><br></div></blockquote></body></html>=

--Apple-Mail-62D3EE55-2C52-46A6-BF89-97799D95F20C--


From nobody Mon Apr 17 21:09:35 2017
Return-Path: <rajiva@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29D8B1270A7 for <idr@ietfa.amsl.com>; Mon, 17 Apr 2017 21:09:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OCMCGaLZa2nx for <idr@ietfa.amsl.com>; Mon, 17 Apr 2017 21:09:31 -0700 (PDT)
Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E8DC120454 for <idr@ietf.org>; Mon, 17 Apr 2017 21:09:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7962; q=dns/txt; s=iport; t=1492488571; x=1493698171; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=Cl9tlWgfmr4+BSkJyLIA5DOLfRDqnPuUc1bjtE+j1Ik=; b=NULpfPwQWzev6T8yMz467gwR84WYRyEiPky2vMueAE6T0djQ1AKplVQQ ygiGXK4dTQvmwqMJTvmSCJsK4G6ZhoyVbercU4HC3xnPFUQSpkBxsa63k ySZzWVQA1G0fHG2UNOUNO1gmIoDv8VUAYhMdAV7ZMXbCDY3F2Uj91XxfV w=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CrAgBFkPVY/49dJa1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1NhgQsHg1+KFZE+IYgdjUKCDy6FdgIag2s/GAECAQEBAQEBAWs?= =?us-ascii?q?ohRUBAQEBAgEjEUUFBwQCAQgRAwECAQICJgICAh8RFQgIAgQOBYl/Aw0IDqpMg?= =?us-ascii?q?iaHNw2DXQEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgQuFR4FcASsKgVmBCoJRgU8?= =?us-ascii?q?TDhYXD4JgLoIxBYZ3giyIJIsZOwGHA4MsgyhKhESRRosHiQIBHziBBWMVVQGGU?= =?us-ascii?q?3WGXoEwgQ0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,217,1488844800"; d="scan'208";a="232289720"
Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 18 Apr 2017 04:09:30 +0000
Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by rcdn-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id v3I49Tli021425 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 18 Apr 2017 04:09:29 GMT
Received: from xch-aln-005.cisco.com (173.36.7.15) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 17 Apr 2017 23:09:29 -0500
Received: from xch-aln-005.cisco.com ([173.36.7.15]) by XCH-ALN-005.cisco.com ([173.36.7.15]) with mapi id 15.00.1210.000; Mon, 17 Apr 2017 23:09:29 -0500
From: "Rajiv Asati (rajiva)" <rajiva@cisco.com>
To: Robert Raszuk <robert@raszuk.net>
CC: PFRC - jhaas <jhaas@pfrc.org>, idr wg <idr@ietf.org>
Thread-Topic: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
Thread-Index: AQHSmnRjZQMhW6yq5kum3Hd4lOeZoKGSjLmAgABQ7oCAAAtWgP//sAtXgAKMygD//8REAIAASs2AgDN6BYCAAFHJgIABzk4A
Date: Tue, 18 Apr 2017 04:09:29 +0000
Message-ID: <9D31CFD8-48AC-4115-9485-47E3ABC018EF@cisco.com>
References: <CA+b+ERmmqtUkJMtfOE9ABFHN0gNdztjOGELmirNgWRnDENrjaA@mail.gmail.com> <58C6751D.60306@foobar.org> <CA+b+ERkxvKzArYf7eefB5UL_kDMVBJERz=Qyi=zOsBm3KivAtg@mail.gmail.com> <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com>
In-Reply-To: <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.20.0.170309
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.82.225.205]
Content-Type: text/plain; charset="utf-8"
Content-ID: <30610E610F085A43AAE3630EBBC9A014@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/mvanTqdqA4gFT0TnU_ahFJ-BCNs>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 04:09:33 -0000
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From nobody Tue Apr 18 06:08:53 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0D34129B73; Tue, 18 Apr 2017 06:08:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.521
X-Spam-Level: 
X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, LOTS_OF_MONEY=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J5y-eTtJBXAg; Tue, 18 Apr 2017 06:08:48 -0700 (PDT)
Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 605361274D0; Tue, 18 Apr 2017 06:08:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=90426; q=dns/txt; s=iport; t=1492520928; x=1493730528; h=from:to:cc:subject:date:message-id:mime-version; bh=2WvTI+1JCzeVr44o5VrUI2tzis7HnBquxDT3H4hyngM=; b=laPn7n/VCkIqps7zmdhX+KjZxs63PrJIbkehFgbW07kb1T0dxxP3d6Ud KEVChyuDql73EeuQ3TB14gING+bKRsum2Aqt1EvONerO/fboYXDXML8g8 g/k78eCLonCq71XDDZm5DxWF03kPMiT/4295Lv6BOdhNdV81cenIeLBgn 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CKAgAUD/ZY/5ldJa1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm5lYYELB4NfihWRQpYCgg8sgkKDNhyDUz8YAQIBAQEBAQEBax0?= =?us-ascii?q?LhTYJCkwSAQY6AQkCBDAnBA4FG4l+DoxUnV2CJiuKeAEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBHoZSgV0rCoJjhCkRAYMiLoIxBZY0hm4BgVWFLoMtgymFEIIAGTyEXIh?= =?us-ascii?q?dgTqIa4Z7hCcBHzh9CGMVRBEBhlIBdYZOBQoXgQqBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,219,1488844800";  d="scan'208,217";a="413846158"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 18 Apr 2017 13:08:47 +0000
Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v3ID8lt2003076 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 18 Apr 2017 13:08:47 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 18 Apr 2017 08:08:46 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Tue, 18 Apr 2017 08:08:46 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: "draft-ietf-grow-bgp-reject@ietf.org" <draft-ietf-grow-bgp-reject@ietf.org>
CC: "grow@ietf.org" <grow@ietf.org>, "idr@ietf.org" <idr@ietf.org>, "Chris Morrow" <morrowc@ops-netman.net>, Warren Kumari <warren@kumari.net>
Thread-Topic: Review of draft-ietf-grow-bgp-reject-05
Thread-Index: AQHSuETpEi5RDG0LC02mWBjlM+E8lA==
Date: Tue, 18 Apr 2017 13:08:46 +0000
Message-ID: <27BC3D10-48EA-4751-A70A-0753B0437F8F@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: multipart/alternative; boundary="_000_27BC3D1048EA4751A70A0753B0437F8Fciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/gU6sk8yrC3uF7aLERwnDh2cuFP4>
Subject: [Idr] Review of draft-ietf-grow-bgp-reject-05
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 13:08:52 -0000

--_000_27BC3D1048EA4751A70A0753B0437F8Fciscocom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_27BC3D1048EA4751A70A0753B0437F8Fciscocom_
Content-Type: text/html; charset="utf-8"
Content-ID: <1895B423DBD88D4EBBA99CFC1B7BC4FB@emea.cisco.com>
Content-Transfer-Encoding: base64
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--_000_27BC3D1048EA4751A70A0753B0437F8Fciscocom_--


From nobody Tue Apr 18 13:11:44 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4183B12EB22 for <idr@ietfa.amsl.com>; Tue, 18 Apr 2017 13:11:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.919
X-Spam-Level: 
X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dI4ciGqL3Sp6 for <idr@ietfa.amsl.com>; Tue, 18 Apr 2017 13:11:36 -0700 (PDT)
Received: from mail-wm0-f44.google.com (mail-wm0-f44.google.com [74.125.82.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F048C127419 for <idr@ietf.org>; Tue, 18 Apr 2017 13:11:32 -0700 (PDT)
Received: by mail-wm0-f44.google.com with SMTP id w64so65149477wma.0 for <idr@ietf.org>; Tue, 18 Apr 2017 13:11:32 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=ygaIPcdbklG86QmTW372/i/V/T/lefubIusCjVXKu2o=; b=FTDEnbBbMWlnqSApNsXd5yp8cDcjoLGasC72LBQQIaZztxeewD7hNkAhfEhhJJ4T5a 7n4nG+cay1koS5Rcyfkwt2FWUr/FCJCpc6Mk0/OLq9/h/4LU/4b/EXhdf20G+NJYfPmW APVwUEA6i6ftC2ZqdZEZI0eStJ8lfWyJ1UZTojvqDPqvgxwvjYhV2kIK1Y3wiqtX4E3Z mBKnuwQ69fRrle2v5NhaV/Fn9O5FAodKXm+mAiAla7IveC4AFaWhJcl9BoO2OVy0tvpa PzqCG3+xcpe+aCxAS0+K5Zu94W00GUgLSfbgpGlUUOZRA6ZVun8RXOQPdmCBbvLFM2Qj g79w==
X-Gm-Message-State: AN3rC/7TzAif6DgqTNnyglWopCYt8SDpt3GljVOVoaMLXxBTWUAWjP9F xslFNTootwbPqg==
X-Received: by 10.28.198.10 with SMTP id w10mr14281249wmf.1.1492546290927; Tue, 18 Apr 2017 13:11:30 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:98ef:c499:492b:f67e]) by smtp.gmail.com with ESMTPSA id c16sm229102wrb.56.2017.04.18.13.11.29 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 18 Apr 2017 13:11:29 -0700 (PDT)
Date: Tue, 18 Apr 2017 22:11:29 +0200
From: Job Snijders <job@ntt.net>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
Cc: "draft-ietf-grow-bgp-reject@ietf.org" <draft-ietf-grow-bgp-reject@ietf.org>,  Chris Morrow <morrowc@ops-netman.net>, "idr@ietf.org" <idr@ietf.org>, "grow@ietf.org" <grow@ietf.org>
Message-ID: <20170418201129.oz4sclhrb2ofqurs@hanna.meerval.net>
References: <27BC3D10-48EA-4751-A70A-0753B0437F8F@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <27BC3D10-48EA-4751-A70A-0753B0437F8F@cisco.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/5bF73mVsaoi1jFxyYzxwW6Ijy38>
Subject: Re: [Idr] Review of draft-ietf-grow-bgp-reject-05
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 20:11:38 -0000

Dear all,

Alvaro's proposal presents a significant change to the document. As
document authors, we've requested the responsible AD (Warren Kumari) to
extend the IETF Last Call to be able to process the suggestions. Thanks!

Kind regards,

Job

On Tue, Apr 18, 2017 at 01:08:46PM +0000, Alvaro Retana (aretana) wrote:
> [Speaking as a grow WG participant.]
> 
> Hi!
> 
> I support this document and its publication.
> 
> However, if this document “defines the default behavior of a BGP speaker…”, then it should explicitly Update rfc4271 and be a little stricter in the language it uses.
> 
> Please see detailed comments below along with suggested text.
> 
> Thanks!
> 
> Alvaro.
> 
> 
> 
> 
> 
> 2       Global Routing Operations                                       J. Mauch
> 3       Internet-Draft                                                    Akamai
> 4       Intended status: Standards Track                             J. Snijders
> 5       Expires: October 12, 2017                                            NTT
> 6                                                                     G. Hankins
> 7                                                                          Nokia
> 8                                                                 April 10, 2017
> 
> The header should indicate that this document “Updates: 4271”.
> 
> 10              Default EBGP Route Propagation Behavior Without Policies
> 11                           draft-ietf-grow-bgp-reject-05
> 
> 13      Abstract
> 
> 15         This document defines the default behavior of a BGP speaker when
> 16         there is no import or export policy associated with an External BGP
> 17         session.
> 
> NEW>
>    This document updates RFC4271 by defining the default behavior…
> 
> 
> 19      Requirements Language
> 
> 21         The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
> 22         "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
> 23         document are to be interpreted as described in RFC 2119 [RFC2119].
> 
> 25      Status of This Memo
> 
> 27         This Internet-Draft is submitted in full conformance with the
> 28         provisions of BCP 78 and BCP 79.
> 
> 30         Internet-Drafts are working documents of the Internet Engineering
> 31         Task Force (IETF).  Note that other groups may also distribute
> 32         working documents as Internet-Drafts.  The list of current Internet-
> 33         Drafts is at http://datatracker.ietf.org/drafts/current/.
> 
> 35         Internet-Drafts are draft documents valid for a maximum of six months
> 36         and may be updated, replaced, or obsoleted by other documents at any
> 37         time.  It is inappropriate to use Internet-Drafts as reference
> 38         material or to cite them other than as "work in progress."
> 
> 40         This Internet-Draft will expire on October 12, 2017.
> 
> 42      Copyright Notice
> 
> 44         Copyright (c) 2017 IETF Trust and the persons identified as the
> 45         document authors.  All rights reserved.
> 
> 47         This document is subject to BCP 78 and the IETF Trust's Legal
> 48         Provisions Relating to IETF Documents
> 49         (http://trustee.ietf.org/license-info) in effect on the date of
> 50         publication of this document.  Please review these documents
> 51         carefully, as they describe your rights and restrictions with respect
> 52         to this document.  Code Components extracted from this document must
> 53         include Simplified BSD License text as described in Section 4.e of
> 54         the Trust Legal Provisions and are provided without warranty as
> 55         described in the Simplified BSD License.
> 
> 57      Table of Contents
> 
> 59         1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   2
> 60         2.  Solution  . . . . . . . . . . . . . . . . . . . . . . . . . .   3
> 61         3.  Acknowledgments . . . . . . . . . . . . . . . . . . . . . . .   3
> 62         4.  Security Considerations . . . . . . . . . . . . . . . . . . .   3
> 63         5.  IANA Considerations . . . . . . . . . . . . . . . . . . . . .   3
> 64         6.  Contributors  . . . . . . . . . . . . . . . . . . . . . . . .   3
> 65         7.  References  . . . . . . . . . . . . . . . . . . . . . . . . .   4
> 66           7.1.  Normative References  . . . . . . . . . . . . . . . . . .   4
> 67           7.2.  Informative References  . . . . . . . . . . . . . . . . .   4
> 68         Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .   4
> 
> 70      1.  Introduction
> 
> 72         There are BGP routing security issues that need to be addressed to
> 73         make the Internet more stable.  Route leaks [RFC7908] are part of the
> 74         problem, but software defects or operator misconfigurations can
> 75         contribute too.  This document provides guidance to BGP [RFC4271]
> 76         implementers to improve the default level of Internet routing
> 77         security.
> 
> s/This document…/This document updates RFC4271 in order to improve the default level…
> 
> 79         Many deployed BGP speakers send and accept any and all route
> 80         announcements between their BGP neighbors by default.  This practice
> 81         dates back to the early days of the Internet, where operators were
> 82         permissive in sending routing information to allow all networks to
> 83         reach each other.  As the Internet has become more densely
> 84         interconnected, the risk of a misbehaving BGP speaker poses
> 85         significant risks to Internet routing.
> 
> 87         This specification intends to improve this situation by requiring the
> 88         explicit configuration of a BGP import and export policy for any
> 89         External BGP (EBGP) session such as customers, peers, or
> 90         confederation boundaries for all enabled address families.  When this
> 91         solution is implemented, BGP speakers do not accept or send routes
> 92         without policies configured on EBGP sessions.
> 
> s/accept/use  (or maybe “considered”)
> 
> The text in Section 2 talks about the received eBGP routes being ineligible, which implies that they were received, just not used/considered.  There is probably no real practical way to not receive the routes, unless the document also specifies the use of route refresh to get the updates again once the policy is configured.  But I think that would just add complexity.
> 
> 
> NEW Section>
> 
> Terminology
> 
> [RFC4271] describes a Policy Information Base (PIB) which contains local policies that can be applied to the information in the Routing Information Base (RIB).  This document distinguishes the type of policy based on its application.
> 
> Import Policy: Local policy to be applied to the information contained in the Adj-RIBs-In.  As described in [Section 3.2 of RFC4271], the Adj-RIBs-In contain information learned from other BGP speakers, and the application of the Import Policy results in the routes that will be used by the local BGP speaker.
> 
> Export Policy: Local policy to be applied in selecting the information contained in the Adj-RIBs-Out.  As described in [Section 3.2 of RFC4271], the Adj-RIBs-Out contain information that has been selected to advertisement to other BGP speakers.
> 
> 
> 
> 94      2.  Solution
> 
> NEW>
> Changes to RFC4271
> 
> 
> 96         The following requirements apply to all BGP speakers:
> 
> NEW>
> 
> This section describes the Updates to [RFC4271] that define the default behavior of a BGP speaker when there are no Import or Export Policies associated with a particular EBGP session.
> 
> 
> 98         o  A BGP speaker MUST consider any routes advertised by an EBGP peer
> 99            ineligible for route selection (section 9.1.1 [RFC4271]), if no
> 100           import policy was configured for the peer.
> 
> Note that 9.1.1. says that if “the route is ineligible, the route MAY NOT serve as an input to the next phase of route selection”.  IOW, even if routes are “ineligible” they can still be used (because of the MAY), which is not what is wanted.
> 
> 102        o  A BGP speaker MUST NOT advertise any routes to an EBGP peer, if no
> 103           export policy was configured for the peer.
> 
> 105        o  A BGP speaker SHOULD fall back to an "import nothing" and "export
> 106           nothing" mode following failure of internal components, such as a
> 107           policy engine.
> 
> 109        o  A BGP speaker MAY provide a configuration option to disable the
> 110           preceding behaviors, but it MUST implement them by default.
> 
> 
> NEW>
> 
> The following paragraph is added to Section 9.1 (Decision Process) after the fifth paragraph:
> 
>    Routes contained in an Adj-RIB-In associated with an EBGP peer SHALL NOT be considered in the Decision
>    Process if no explicit Import Policy has been defined.
> 
> The following paragraph is added to Section 9.1.3 (Phase 3: Route Dissemination) after the third paragraph:
> 
>    Routes SHALL NOT be added to an Adj-RIB-Out associated with an EBGP peer if no explicit Export Policy
>    has been defined.
> 
> A failure of the PIB SHOULD be considered as if no Import or Export Policy is associated with the affected EBGP sessions.
> 
> The behavior described above MAY be disabled by explicit configuration.
> 
> ===
> 
> 
> FWIW, I think that the “SHOULD” above would be better as a “MUST”.
> 
> 
> 112     3.  Acknowledgments
> 
> 114        The authors would like to thank the following people for their
> 115        comments, support and review: Shane Amante, Christopher Morrow,
> 116        Robert Raszuk, Greg Skinner, Adam Chappell, Sriram Kotikalapudi,
> 117        Brian Dickson, Jeffrey Haas, John Heasley, Ignas Bagdonas, Donald
> 118        Smith, and Dale Worley.
> 
> 120     4.  Security Considerations
> 
> 122        This document addresses a basic routing security issue caused by
> 123        permissive default routing policy configurations.  Operators need
> 124        implementers to address this problem with more secure defaults to
> 125        mitigate collateral damage on Internet routing.  Inadvertent or
> 126        adversarial advertisements cause business impact that can be
> 127        mitigated by a secure default behavior.
> 
> NEW>
> 
> Permissive default routing policies can result in inadvertent effects such as route leaks [RFC7908], in general resulting in rerouting of traffic through an unexpected path.  While it is possible for an operator to use monitoring to detect unexpected flows, there is no general framework that can be applied.  These policies also have the potential of exposing software defects or misconfigurations that could have unforeseen technical and business impacting effects.
> 
> The update to RFC4271 specified in this document is aimed at eliminating those inadvertent effects.  Operators must explicitly configure Import and Export Policies to achieve their expected goals.  There is of course no protection against a malicious or incorrect explicit configuration.
> 
> The security considerations described in [RFC4271] and the vulnerability analysis discussed in [RFC4272] also apply to this document.
> 
> 
> 
> 129     5.  IANA Considerations
> 
> 131        This document has no actions for IANA.
> 
> 133     6.  Contributors
> 
> 135        The following people contributed to successful deployment of solution
> 136        described in this document:
> 
> 138        Jakob Heitz
> 139        Cisco
> 
> 141        Email: jheitz@cisco.com
> 142        Ondrej Filip
> 143        CZ.NIC
> 
> 145        Email: ondrej.filip@nic.cz
> 
> 147     7.  References
> 
> 149     7.1.  Normative References
> 
> 151        [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
> 152                   Requirement Levels", BCP 14, RFC 2119,
> 153                   DOI 10.17487/RFC2119, March 1997,
> 154                   <http://www.rfc-editor.org/info/rfc2119>.
> 
> 156        [RFC4271]  Rekhter, Y., Ed., Li, T., Ed., and S. Hares, Ed., "A
> 157                   Border Gateway Protocol 4 (BGP-4)", RFC 4271,
> 158                   DOI 10.17487/RFC4271, January 2006,
> 159                   <http://www.rfc-editor.org/info/rfc4271>.
> 
> 161     7.2.  Informative References
> 
> 163        [RFC7908]  Sriram, K., Montgomery, D., McPherson, D., Osterweil, E.,
> 164                   and B. Dickson, "Problem Definition and Classification of
> 165                   BGP Route Leaks", RFC 7908, DOI 10.17487/RFC7908, June
> 166                   2016, <http://www.rfc-editor.org/info/rfc7908>.
> 
> Add an Informative reference to RFC4272.
> 
> 
> 
> 168     Authors' Addresses
> 
> 170        Jared Mauch
> 171        Akamai Technologies
> 172        8285 Reese Lane
> 173        Ann Arbor  Michigan 48103
> 174        US
> 
> 176        Email: jared@akamai.com
> 
> 178        Job Snijders
> 179        NTT Communications
> 180        Theodorus Majofskistraat 100
> 181        Amsterdam  1065 SZ
> 182        NL
> 
> 184        Email: job@ntt.net
> 185        Greg Hankins
> 186        Nokia
> 187        777 E. Middlefield Road
> 188        Mountain View, CA  94043
> 189        USA
> 
> 191        Email: greg.hankins@nokia.com
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 

> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr


From nobody Tue Apr 18 13:22:44 2017
Return-Path: <jefftant.ietf@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3738B128B8E; Tue, 18 Apr 2017 13:22:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lCCVR8vhiOap; Tue, 18 Apr 2017 13:22:33 -0700 (PDT)
Received: from mail-wm0-x233.google.com (mail-wm0-x233.google.com [IPv6:2a00:1450:400c:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78E8B127876; Tue, 18 Apr 2017 13:22:33 -0700 (PDT)
Received: by mail-wm0-x233.google.com with SMTP id r190so6415134wme.1; Tue, 18 Apr 2017 13:22:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=hu4UHBDItxbY2zD0+oA/orqGvmit/sZzjmSH1FnePik=; b=Hat8sjnp1LktzDLgtTlAXq2Jz/vlkSVb7XoDXHu0Vt7fQAV+mcTlyiGUu82rNDPsSC LuZFwScLSUVFQvnrX8mKY2n5SfqWTinSvTKfoYfjBVY4hxvB3NUaLXdOFeexuRPx7sJ6 PWi3yhCj5Lce+GJLKCTHj9FpBaJXRsLNQ04w5EW69dgxrQvu1mmbGp3V2gWamm2Fb7pa LtgafdeAMzxogBtEuZCT/Yx49axZqihBosV5VLiwgqD1tCVMSeULjIx7uG4zPmtEoNas jTYI8R+K2prqQYtz8JD0sQiaM7AxJ8JmqtxpicLkr9VV5MGmyNt09GZyAV9h/hNm/c6O 2ugw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=hu4UHBDItxbY2zD0+oA/orqGvmit/sZzjmSH1FnePik=; b=G4l9sevLimzyvSZif3viKtrUtC+m/d+zJIjfWHUUFcYSXgavYix0HZvb6GPZnxCxNW aWWFeQagfu+ydvwrx2p4l9i1F1mhIpG/XNUcvcwKUn+HR3xj2tXkXXTNqiHayeAwdtih SeMNUqw7HqpBDTYySvxFZ26SkPyn2X9nbd98Z+cX4X9NqAfnGrDQWW/NZ8CTVHBs55CO usTAZQG7EiWg138/8ACSvc2HCJ2V5QhDiW7fIpoZNGS59g/NlTFW69gQ7JkIwnH4Basl PYaSNngDZalC8+Z8hGJYdzQ/UFilM2twmkFvq6sLV3BYpL1QL4MtVD/lPy3LtT1M4OFj mwJg==
X-Gm-Message-State: AN3rC/4W5xUw/gbNvVVBS0H1xa9uDuhgte4cS0ZVqwrnlCjG6D1c3PKP aG7MY7caW5S60r6TrkuuW+m1VIw7WA==
X-Received: by 10.28.132.16 with SMTP id g16mr15262014wmd.87.1492546951663; Tue, 18 Apr 2017 13:22:31 -0700 (PDT)
MIME-Version: 1.0
References: <93a6a754-0a2e-2053-542c-a4ce8bf9213b@pi.nu>
In-Reply-To: <93a6a754-0a2e-2053-542c-a4ce8bf9213b@pi.nu>
From: Jeff Tantsura <jefftant.ietf@gmail.com>
Date: Tue, 18 Apr 2017 20:22:21 +0000
Message-ID: <CAFAzdPWwiOoh6VeSrsytaWjWy66Z3+psHdbcFRq===4Mm_+DeQ@mail.gmail.com>
To: BESS <bess@ietf.org>, Loa Andersson <loa@pi.nu>, idr@ietf.org,  "mpls@ietf.org" <mpls@ietf.org>
Cc: "<rtg-ads@ietf.org>" <rtg-ads@ietf.org>, bess-chairs@ietf.org,  draft-ietf-mpls-rfc3107bis@ietf.org, idr-chairs@ietf.org,  "mpls-chairs@ietf.org" <mpls-chairs@ietf.org>
Content-Type: multipart/alternative; boundary=001a114428b8dd567b054d76aaa3
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/odPm02PSm4KfWI1gzRwkFS4i8n4>
Subject: [Idr] Yes/support, long time due update to 3107
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 20:22:35 -0000

--001a114428b8dd567b054d76aaa3
Content-Type: text/plain; charset=UTF-8

On Tue, Apr 4, 2017 at 05:33 Loa Andersson <loa@pi.nu> wrote:

> Working Groups,
>
> This is to initiate a two week working group last call in four working
> groups on draft-ietf-mpls-rfc3107bis-01.
>
> According to agreement when we decided to host this document in the
> MPLS working group, this last call is also copied to the IDR and BESS
> working groups.
>
> Please send your comments to the mpls wg mailing list (mpls@ietf.org),
> if you are not subscribed to the mpls wg list, send to "your own"
> working group mailing list, and we'll make sure they are posted to the
> MPLS wg list.
>
> There are no IPR disclosures against this document.
>
> All the authors and contributors have stated on the working group
> mailing list that they are not aware of any other IPRs that relates
> to this document.
>
> This working group last call ends April 20, 2017.
>
>
> /Loa
> MPLS wg co-chairs
> --
>
>
> Loa Andersson                        email: loa@mail01.huawei.com
> Senior MPLS Expert                          loa@pi.nu
> Huawei Technologies (consultant)     phone: +46 739 81 21 64
>
> _______________________________________________
> BESS mailing list
> BESS@ietf.org
> https://www.ietf.org/mailman/listinfo/bess
>

--001a114428b8dd567b054d76aaa3
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div><br><div class=3D"gmail_quote"><div>On Tue, Apr 4, 2017 at 05:33 Loa A=
ndersson &lt;<a href=3D"mailto:loa@pi.nu">loa@pi.nu</a>&gt; wrote:<br></div=
><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1=
px #ccc solid;padding-left:1ex">Working Groups,<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
This is to initiate a two week working group last call in four working<br c=
lass=3D"gmail_msg">
groups on draft-ietf-mpls-rfc3107bis-01.<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
According to agreement when we decided to host this document in the<br clas=
s=3D"gmail_msg">
MPLS working group, this last call is also copied to the IDR and BESS<br cl=
ass=3D"gmail_msg">
working groups.<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
Please send your comments to the mpls wg mailing list (<a href=3D"mailto:mp=
ls@ietf.org" class=3D"gmail_msg" target=3D"_blank">mpls@ietf.org</a>),<br c=
lass=3D"gmail_msg">
if you are not subscribed to the mpls wg list, send to &quot;your own&quot;=
<br class=3D"gmail_msg">
working group mailing list, and we&#39;ll make sure they are posted to the<=
br class=3D"gmail_msg">
MPLS wg list.<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
There are no IPR disclosures against this document.<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
All the authors and contributors have stated on the working group<br class=
=3D"gmail_msg">
mailing list that they are not aware of any other IPRs that relates<br clas=
s=3D"gmail_msg">
to this document.<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
This working group last call ends April 20, 2017.<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
/Loa<br class=3D"gmail_msg">
MPLS wg co-chairs<br class=3D"gmail_msg">
--<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
Loa Andersson=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=
 =C2=A0 =C2=A0 =C2=A0 email: <a href=3D"mailto:loa@mail01.huawei.com" class=
=3D"gmail_msg" target=3D"_blank">loa@mail01.huawei.com</a><br class=3D"gmai=
l_msg">
Senior MPLS Expert=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"mailto:loa@pi.nu" class=3D"gm=
ail_msg" target=3D"_blank">loa@pi.nu</a><br class=3D"gmail_msg">
Huawei Technologies (consultant)=C2=A0 =C2=A0 =C2=A0phone: +46 739 81 21 64=
<br class=3D"gmail_msg">
<br class=3D"gmail_msg">
_______________________________________________<br class=3D"gmail_msg">
BESS mailing list<br class=3D"gmail_msg">
<a href=3D"mailto:BESS@ietf.org" class=3D"gmail_msg" target=3D"_blank">BESS=
@ietf.org</a><br class=3D"gmail_msg">
<a href=3D"https://www.ietf.org/mailman/listinfo/bess" rel=3D"noreferrer" c=
lass=3D"gmail_msg" target=3D"_blank">https://www.ietf.org/mailman/listinfo/=
bess</a><br class=3D"gmail_msg">
</blockquote></div></div>

--001a114428b8dd567b054d76aaa3--


From nobody Tue Apr 18 13:24:03 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C63C01293D9 for <idr@ietfa.amsl.com>; Tue, 18 Apr 2017 13:24:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zydz9LnBO5AG for <idr@ietfa.amsl.com>; Tue, 18 Apr 2017 13:24:00 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id A096A127876 for <idr@ietf.org>; Tue, 18 Apr 2017 13:24:00 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 63E2C1E332; Tue, 18 Apr 2017 16:31:08 -0400 (EDT)
Date: Tue, 18 Apr 2017 16:31:08 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Robert Raszuk <robert@raszuk.net>
Cc: "Rajiv Asati (rajiva)" <rajiva@cisco.com>, idr wg <idr@ietf.org>
Message-ID: <20170418203108.GB9688@pfrc.org>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Q8NSzOP4jTL82RW4kINQSl9BveY>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 20:24:02 -0000

Robert,

On Sun, Apr 16, 2017 at 10:34:49PM +0200, Robert Raszuk wrote:
> I think that everyone fully agrees that in order to consider prefix as
> valid the next hop to it should be reachable.
> 
> The only open question is how to detect it when you have no direct protocol
> adj. established.
> 
> Jeff seems stuck with BFD .. but there is number of folks who see S-BFD as
> much better fit to the problem.

Since you brought it up to the main mailing list, who are the other folks
besides yourself that thinks S-BFD is a better fit?

You're going to make me write that largeish e-mail that doesn't help the
discussion much about why S-BFD is not a good fit, aren't you?

> Yet UDP echo in some implementations
> already does it today.

As noted previously, the draft does permit for alternate means beyond BFD.
However, we have to pick one.  Standardizing ping is likely a bad idea. :-)


-- Jeff


From nobody Tue Apr 18 13:31:20 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6FFD7127876 for <idr@ietfa.amsl.com>; Tue, 18 Apr 2017 13:31:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P8XTSe4XjX7Z for <idr@ietfa.amsl.com>; Tue, 18 Apr 2017 13:31:15 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id DA4A21243FE for <idr@ietf.org>; Tue, 18 Apr 2017 13:31:15 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id A5DF61E332; Tue, 18 Apr 2017 16:38:23 -0400 (EDT)
Date: Tue, 18 Apr 2017 16:38:23 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Robert Raszuk <robert@raszuk.net>
Cc: Jeffrey Haas <jhaas@juniper.net>, idr wg <idr@ietf.org>
Message-ID: <20170418203823.GC9688@pfrc.org>
References: <CA+b+ERnHAdrQa1f-b7st3QBjzbFS1zvktkGCAppRuqGkf8Vnhg@mail.gmail.com> <CA+b+ER=E1FV4=-W9jcHG4ih0GeE2O1jDXKNAZhEe+nENEHAiYg@mail.gmail.com> <CA+b+ERkfV4C++arFCBXnyjgkA-FtcqMmd8_9UcbKLWxR32h1EQ@mail.gmail.com> <CA+b+ERkvu296sqD_bi41++RqHiV-f+4cUpb1BPrhE6HsxeueqA@mail.gmail.com> <CA+b+ERk+XP5DvuZStYW=e1uGRWDWE-PiPdwhtkHiVK7hFui7_g@mail.gmail.com> <CA+b+ERmapG68ysZ4=6uDAH=Z+fRaprzgsyQASP4aYD=OTea_Qg@mail.gmail.com> <CA+b+ERkZ-WY5FWiDu_k=1+7tUHEApYj+mMLqZiFzTWGuvHLjGA@mail.gmail.com> <CA+b+ER=MBiFno8CDv9JgpFFmJz4cuDe_tQhm+AHx5njxJy6p6Q@mail.gmail.com> <CA+b+ER=3qy_096Q61FBQgkRSt8j0P1NTQ+EFVit0XEnWvLp6mg@mail.gmail.com> <CA+b+ERmuGSZBcboZDsRo1NDb3dsRozmcEW77KWLyzyjxK8ezww@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CA+b+ERmuGSZBcboZDsRo1NDb3dsRozmcEW77KWLyzyjxK8ezww@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/guNqgEt5vk7cW4uAZim_S8kgSm4>
Subject: Re: [Idr] RS BFD draft
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 20:31:17 -0000

On Fri, Mar 31, 2017 at 09:34:08AM -0500, Robert Raszuk wrote:
> To your point of assymetry ...
> 
> If the assymetry happens between clients placed in different rib groups of
> the given RS to corellate it is really ugly and breaks all today's code
> running as BGP route servers in the field.
> 
> Besides for say UDP streaming unidirectional connectivity is not that bad
> to withdraw reachability just because symmetry is not there.
> 
> Last most IX clients may have other connectivty outside of IX fabric in one
> or both directions so even TCP would work.

For posterity for the mailing list, Robert and I had this discussion
off-list.

In particular, this refers to the point covered in section 4.2 of the RS-BFD
draft.  This is where the route server may tell one peer about routes with a
given nexthop but not tell the other peer about *any* routes with the
nexthop for that first peer.  Since BFD requires a pair of endpoints over
which to provision a session, it is necessary for the route server to make
sure both sides are informed about both sides/nexthops even if routing only
advertises them one way.

> Bottom line I agree on the need to document as BCP NH tracking part of the
> draft between IX clients, but new SAFI seems to me not to be a best idea.
> 
> Best,
> R.
> 
> PS. If client does not support add-path it can use different sessions as
> described by RFC6774.

The RS-BFD proposal doesn't preclude other mechanisms for advertising
alternate paths.  I'd be interested in hearing about RS operators that have
any intentions of deploying BGP add-paths[1] or diverse paths.

-- Jeff

[1] It should be noted that add-paths is considered problematic in the
traditional eBGP route distribution scenario.
draft-pmohapat-idr-fast-conn-restore was originally drafted to address that
case for traditional service provider networks.  



> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr


From nobody Tue Apr 18 13:37:01 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06178129431 for <idr@ietfa.amsl.com>; Tue, 18 Apr 2017 13:37:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fe2NYg-4_vHl for <idr@ietfa.amsl.com>; Tue, 18 Apr 2017 13:36:58 -0700 (PDT)
Received: from mail-io0-x230.google.com (mail-io0-x230.google.com [IPv6:2607:f8b0:4001:c06::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BB7B127876 for <idr@ietf.org>; Tue, 18 Apr 2017 13:36:58 -0700 (PDT)
Received: by mail-io0-x230.google.com with SMTP id a103so9375782ioj.1 for <idr@ietf.org>; Tue, 18 Apr 2017 13:36:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=iBZfld8P2vZxZVinkZ46+b3t8P+O2e5R+Ct3QF6M74Q=; b=pI9IG/4MuZA+QD4myP0xRVgG/JsowoG+RPhTlJYAMSMSiuDetdNyxdm3Itt/gHiazR iIuhuXx7LexgOq12WLmH+xN2OrXswgKoXdIZ3Ka7xLABxCzFajE0YOyWiWB66lDJX/p8 07Da0KpZ+m8pFGy5g380lefJ3hqhkHp+AcIERe9D994jfxw0hQ0HZjodb9vDXuCjTGye /KwjHivvufUYOaq0wtb4LBoBoRn4zslNywrNnav05xQTS4V1Q1a26HeXOv+wBMrEM+Qz ysgUypq/yWvc6DxT0tfWPBLc1CgVDcslf3Vfo4qqy/2/j04SLFs+OaFa+0vkMA7cwbRV G43A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=iBZfld8P2vZxZVinkZ46+b3t8P+O2e5R+Ct3QF6M74Q=; b=GLI45gFKF7fz+6Z7ZxjPK/WyhYf2kp26qfbA+NkQKIp45FI9CN30DnpOMkj6HyQFBN jnGy4cguwvZM2OG2DIAZ30/glb140jhthS0uKPacYC/SsF/Btkk+4036XAhJ4fcmagG7 23Mhr7sOWsV+ULQ7M2RB13xLclYfuJQrV9OPOEdapy1cl+XbgLTmCINH783I9RFMzIOv iLgHgW2ezgl/Moq3xNC+gj0JZLR8mxSxU/S4xxp/xDG56znNjvyFMn98xHiQd66p8XKN 7r7cfRWha3JV0YufKGmEznLHqI4p+3dIZrftY7iU3y1PeWnjesxAr3P0+J3pBXW0Y26G gcsA==
X-Gm-Message-State: AN3rC/7o/iUzX1FkkY3rPqox8yntWFoMn1eN9bg9+p3FSTF4ETMc+zR6 loPVkHiDscQOhkP0Ldy2TDXIdW+0DQ==
X-Received: by 10.107.140.10 with SMTP id o10mr17028557iod.139.1492547817436;  Tue, 18 Apr 2017 13:36:57 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Tue, 18 Apr 2017 13:36:56 -0700 (PDT)
In-Reply-To: <20170418203108.GB9688@pfrc.org>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org>
From: Robert Raszuk <robert@raszuk.net>
Date: Tue, 18 Apr 2017 22:36:56 +0200
X-Google-Sender-Auth: RFOpPAjrGhYUA9rzisGDFJ5mPM4
Message-ID: <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com>
To: Jeffrey Haas <jhaas@pfrc.org>
Cc: "Rajiv Asati (rajiva)" <rajiva@cisco.com>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=94eb2c06084c77ff1c054d76de17
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Dq294IqjUCjOPmaFXivj08cC4H8>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 20:37:00 -0000

--94eb2c06084c77ff1c054d76de17
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi Jeff,

Since you brought it up to the main mailing list, who are the other folks
> besides yourself that thinks S-BFD is a better fit?
>

=E2=80=8BI will let them speak themselves if they care ...=E2=80=8B



> You're going to make me write that largeish e-mail that doesn't help the
> discussion much about why S-BFD is not a good fit, aren't you?
>

=E2=80=8BI am not going to make you do anything however since we are discus=
sing
how best to detect NH liveness in NBMA env. we should examine all options
vs requirements for those.  =E2=80=8B

And one of the requirements as you have heard from at least one customer is
to test MTU of the path to such BGP next hops. Is RFC5880 BFD really best
tool for that ?



> > Yet UDP echo in some implementations
> > already does it today.
>
> As noted previously, the draft does permit for alternate means beyond BFD=
.
> However, we have to pick one.  Standardizing ping is likely a bad idea. :=
-)
>

=E2=80=8BWhat is there to standardize ? RFC862 seems like pretty good stand=
ard
already.

Ref: https://tools.ietf.org/html/rfc862

And implementing it in hardware should not be that hard too for those
concerned
not to go to RE/RP with each packet. .

Thx,
R.
=E2=80=8B






>
>
> -- Jeff
>

--94eb2c06084c77ff1c054d76de17
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Hi Jeff,</div><div class=3D"gmail_defau=
lt" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></=
div><div class=3D"gmail_extra"><div class=3D"gmail_quote"><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex">Since you brought it up to the main mailin=
g list, who are the other folks<br>
besides yourself that thinks S-BFD is a better fit?<br></blockquote><div><b=
r></div><div><div class=3D"gmail_default" style=3D"font-family:arial,helvet=
ica,sans-serif;font-size:small">=E2=80=8BI will let them speak themselves i=
f they care ...=E2=80=8B</div></div><div><br></div><div>=C2=A0<br></div><bl=
ockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-lef=
t:1px solid rgb(204,204,204);padding-left:1ex">You&#39;re going to make me =
write that largeish e-mail that doesn&#39;t help the<br>
discussion much about why S-BFD is not a good fit, aren&#39;t you?<br></blo=
ckquote><div><br></div><div><div class=3D"gmail_default" style=3D"font-fami=
ly:arial,helvetica,sans-serif;font-size:small">=E2=80=8BI am not going to m=
ake you do anything however since we are discussing=C2=A0</div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small">how best to detect NH liveness in NBMA env. we should examine all =
options=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:arial,=
helvetica,sans-serif;font-size:small">vs requirements for those. =C2=A0=E2=
=80=8B</div></div><div class=3D"gmail_default" style=3D"font-family:arial,h=
elvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_default"=
 style=3D"font-family:arial,helvetica,sans-serif;font-size:small">And one o=
f the requirements as you have heard from at least one customer is</div><di=
v class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;f=
ont-size:small">to test MTU of the path to such BGP next hops. Is RFC5880 B=
FD really best=C2=A0</div><div class=3D"gmail_default" style=3D"font-family=
:arial,helvetica,sans-serif;font-size:small">tool for that ?</div><div><br>=
</div><div>=C2=A0<br></div><blockquote class=3D"gmail_quote" style=3D"margi=
n:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex=
"><span class=3D"gmail-">&gt; Yet UDP echo in some implementations<br>
&gt; already does it today.<br>
<br>
</span>As noted previously, the draft does permit for alternate means beyon=
d BFD.<br>
However, we have to pick one.=C2=A0 Standardizing ping is likely a bad idea=
. :-)<br></blockquote><div><br></div><div><div class=3D"gmail_default" styl=
e=3D"font-family:arial,helvetica,sans-serif;font-size:small">=E2=80=8BWhat =
is there to standardize ? RFC862 seems like pretty good standard already.=
=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:arial,helveti=
ca,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small">Ref: <a href=3D=
"https://tools.ietf.org/html/rfc862">https://tools.ietf.org/html/rfc862</a>=
</div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,san=
s-serif;font-size:small"><br></div><div class=3D"gmail_default" style=3D"fo=
nt-family:arial,helvetica,sans-serif;font-size:small">And implementing it i=
n hardware should not be that hard too for those concerned=C2=A0</div><div =
class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fon=
t-size:small">not to go to RE/RP with each packet. .=C2=A0</div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,=
helvetica,sans-serif;font-size:small">Thx,<br>R.</div><div class=3D"gmail_d=
efault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">=
=E2=80=8B</div><br></div><div><br></div><div><br></div><div><br></div><div>=
=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0=
.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
<br>
-- Jeff<br>
</blockquote></div><br></div></div>

--94eb2c06084c77ff1c054d76de17--


From nobody Tue Apr 18 14:18:45 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F135C12EB22 for <idr@ietfa.amsl.com>; Tue, 18 Apr 2017 14:18:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vi0CoDFeu3xm for <idr@ietfa.amsl.com>; Tue, 18 Apr 2017 14:18:39 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id CC188131478 for <idr@ietf.org>; Tue, 18 Apr 2017 14:18:27 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 62A551E332; Tue, 18 Apr 2017 17:25:35 -0400 (EDT)
Date: Tue, 18 Apr 2017 17:25:35 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Eric C Rosen <erosen@juniper.net>
Cc: Job Snijders <job@instituut.net>, idr@ietf.org
Message-ID: <20170418212534.GD9688@pfrc.org>
References: <20170414134435.tpocpyuappmbcam4@Vurt.local> <c5f761c9-2a9f-3353-17f9-aac4fca2c07e@juniper.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <c5f761c9-2a9f-3353-17f9-aac4fca2c07e@juniper.net>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/8oenqzz2xXgr6H657vHThdt7Mas>
Subject: Re: [Idr] clarification sought on rfc4360 non-transitive extended communities
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 21:18:41 -0000

I have slightly more context here.

On Fri, Apr 14, 2017 at 10:58:57AM -0400, Eric C Rosen wrote:
> On 4/14/2017 9:44 AM, Job Snijders wrote:
> >Hi IDR,
> >
> >RFC 4360 states:
> >     """
> >     If a route has a non-transitivity extended community, then before
> >     advertising the route across the Autonomous System boundary the
> >     community SHOULD be removed from the route.  However, the community
> >     SHOULD NOT be removed when advertising the route across the BGP
> >     Confederation boundary.
> >     """
> >
> 
> You'll note that there are very few non-transitive extended
> communities.  Extended communities are usually used to carry
> parameters of various BGP-based control protocols.  As such, it
> would be nice if they could be scoped to the "domain" of the control
> protocol.  The transitive/non-transitive distinction was a somewhat
> primitive attempt to provide this scoping.  Unfortunately, the
> boundaries of the control protocol domain are rarely the boundaries
> of the AS in which a route originates.  So this particular form of
> scoping has not proven to be very useful.
> 
> >For my edification, I have two questions:
> >
> >     o   Why was nothing specified for the behaviour of receivers?
> 
> Since the authors are either retired or in management, it is
> difficult to say for sure.  I'd say there are two possibilities:
> 
> - Sloppy specification writing.
> 
> - A belief that if the transmitter has decided to send the
> non-transitive EC over an AS boundary, it may have a good reason for
> doing so, and the receiver shouldn't second guess it.
> 
> I'd guess the former.

The missing use case covers the difference between propagation and
origination.

When you are originating a non-transitive EC, you can send it to your iBGP
peers and the case is clear to all parties.  However, you can also attach a
non-transitive community when sending routes to your eBGP peers.  This would
be the case if you're attaching a community that you wanted to only live
within that network.

Thus, by default, if you're not adding a non-transitive EC, you should strip
it when propagating your routes along an eBGP boudnary.

There of course is the annoying case where your policy says "propagate it",
which is effectively the same as if it's re-originating the community.

> >Is it a "SHOULD" because Extended Communities are wrapped in an optional
> >transitive path attribute, so strictly speaking, the non-transivity can't
> >be enforced anyway, since a middle-box might not understand the Extended
> >Community?
> 
> Well, that's a possibility, but I don't recall anyone worrying too
> much about ASBRS that don't understand the Extended Communities
> attribute.

I believe this was to handle the propagate via policy consideration.

-- Jeff


From nobody Tue Apr 18 15:08:27 2017
Return-Path: <agmalis@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC971131493; Tue, 18 Apr 2017 15:08:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EKPEw1_gEwe2; Tue, 18 Apr 2017 15:08:14 -0700 (PDT)
Received: from mail-oi0-x22c.google.com (mail-oi0-x22c.google.com [IPv6:2607:f8b0:4003:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 640211314A4; Tue, 18 Apr 2017 15:08:12 -0700 (PDT)
Received: by mail-oi0-x22c.google.com with SMTP id r203so7847768oib.3; Tue, 18 Apr 2017 15:08:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=1FxHUbJYIr3g2FVo+95F84g1lz5bgyYlYL0ehKAh8jA=; b=FFVjaPw2QI+tUPWqOBizrDqwF5yV29I1VP9M65Dql1cie/FjJFm1MZJyP0nmypxCDU qK415P7PlybW2Yt6mZSYTWC9uClLK2C8sVlhP5y931F9hoORuBSBtCdCtOlFHszVCrJx sI/6XCjR1POQtOVLX67Z5oZqdu188YJRPJWqQtzuAYNi+iYFvJCmWFTyaULypD6lDZlZ LWdesw3osu7b1nMeelvXRAnRtnPEMkzy91+K0JlFhaHTmVCrvPEyyCDjFdeGDEFXk1EB YmbeSDshM3+KFlrA3KdsT042r4kl8S4tkLvK0Ft5fBBwN3h5FmTQgWat6Bff+PruVBIc RDoQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=1FxHUbJYIr3g2FVo+95F84g1lz5bgyYlYL0ehKAh8jA=; b=kjlCqlBoUXNlfiElgN5mtijXh/43o4ivEsm5xTyuPusc6npJEMfbDN6LeaNm4cByMC hEjsYnXmHWLkB1an1fk1gi5JwvUsdwtwoENsFHMsGtv6ufp5YwmmrDA6+lrzjjD4Y7Xk VvRMxOTNA6Qhd4Tko7g6rSIx5BH9tUYpuBgPBd4al8Eiut1AcYQVqBOL8b+KJp6RpOMR NdC6bykXN9DgzUPyG2xN2Dj2YG2hjz9u6dJNLzf4EE6tsbX1Hby/DU0zxnGgXErrKenQ U38DXzHJnrGKrNDgwn1OJy7gMtdMqzu5Dy+j4yztywkUC37ZhU7ZAam18ETqWqHOT8WD C9xQ==
X-Gm-Message-State: AN3rC/4d8TMeks/xxymClrOwgu973ifonThKuYuyqwMm1jH2VtpqpaJ6 gCj6kpNTNl0MkbEJ2kGjC4Cm4ltTxQ==
X-Received: by 10.157.60.145 with SMTP id z17mr6610655otc.252.1492553291499; Tue, 18 Apr 2017 15:08:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.182.231.201 with HTTP; Tue, 18 Apr 2017 15:07:51 -0700 (PDT)
In-Reply-To: <93a6a754-0a2e-2053-542c-a4ce8bf9213b@pi.nu>
References: <93a6a754-0a2e-2053-542c-a4ce8bf9213b@pi.nu>
From: "Andrew G. Malis" <agmalis@gmail.com>
Date: Tue, 18 Apr 2017 17:07:51 -0500
Message-ID: <CAA=duU0vqt5tE7P2WebVCZ0bG1PNqhh7L2CMcQaZWUuRyp7q3w@mail.gmail.com>
To: Loa Andersson <loa@pi.nu>
Cc: "mpls@ietf.org" <mpls@ietf.org>, idr@ietf.org, BESS <bess@ietf.org>,  "<rtg-ads@ietf.org>" <rtg-ads@ietf.org>, idr-chairs@ietf.org, bess-chairs@ietf.org, "mpls-chairs@ietf.org" <mpls-chairs@ietf.org>, draft-ietf-mpls-rfc3107bis@ietf.org
Content-Type: multipart/alternative; boundary=94eb2c18fc54bf90cc054d78248c
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/AF8EkxfhvhMV6bukgiWEr8cidME>
Subject: Re: [Idr] [bess] Working Group Last Call on draft-ietf-mpls-rfc3107bis
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Apr 2017 22:08:16 -0000

--94eb2c18fc54bf90cc054d78248c
Content-Type: text/plain; charset=UTF-8

This draft is very useful and IMHO is ready to be submitted for publication.

Cheers,
Andy


On Tue, Apr 4, 2017 at 7:33 AM, Loa Andersson <loa@pi.nu> wrote:

> Working Groups,
>
> This is to initiate a two week working group last call in four working
> groups on draft-ietf-mpls-rfc3107bis-01.
>
> According to agreement when we decided to host this document in the
> MPLS working group, this last call is also copied to the IDR and BESS
> working groups.
>
> Please send your comments to the mpls wg mailing list (mpls@ietf.org),
> if you are not subscribed to the mpls wg list, send to "your own"
> working group mailing list, and we'll make sure they are posted to the
> MPLS wg list.
>
> There are no IPR disclosures against this document.
>
> All the authors and contributors have stated on the working group
> mailing list that they are not aware of any other IPRs that relates
> to this document.
>
> This working group last call ends April 20, 2017.
>
>
> /Loa
> MPLS wg co-chairs
> --
>
>
> Loa Andersson                        email: loa@mail01.huawei.com
> Senior MPLS Expert                          loa@pi.nu
> Huawei Technologies (consultant)     phone: +46 739 81 21 64
>
> _______________________________________________
> BESS mailing list
> BESS@ietf.org
> https://www.ietf.org/mailman/listinfo/bess
>

--94eb2c18fc54bf90cc054d78248c
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">This draft is very useful and IMHO is ready to be submitte=
d for publication.<div><br></div><div>Cheers,</div><div>Andy</div><div><br>=
</div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Tu=
e, Apr 4, 2017 at 7:33 AM, Loa Andersson <span dir=3D"ltr">&lt;<a href=3D"m=
ailto:loa@pi.nu" target=3D"_blank">loa@pi.nu</a>&gt;</span> wrote:<br><bloc=
kquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #cc=
c solid;padding-left:1ex">Working Groups,<br>
<br>
This is to initiate a two week working group last call in four working<br>
groups on draft-ietf-mpls-rfc3107bis-01.<br>
<br>
According to agreement when we decided to host this document in the<br>
MPLS working group, this last call is also copied to the IDR and BESS<br>
working groups.<br>
<br>
Please send your comments to the mpls wg mailing list (<a href=3D"mailto:mp=
ls@ietf.org" target=3D"_blank">mpls@ietf.org</a>),<br>
if you are not subscribed to the mpls wg list, send to &quot;your own&quot;=
<br>
working group mailing list, and we&#39;ll make sure they are posted to the<=
br>
MPLS wg list.<br>
<br>
There are no IPR disclosures against this document.<br>
<br>
All the authors and contributors have stated on the working group<br>
mailing list that they are not aware of any other IPRs that relates<br>
to this document.<br>
<br>
This working group last call ends April 20, 2017.<br>
<br>
<br>
/Loa<br>
MPLS wg co-chairs<span class=3D"HOEnZb"><font color=3D"#888888"><br>
-- <br>
<br>
<br>
Loa Andersson=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=
 =C2=A0 =C2=A0 =C2=A0 email: <a href=3D"mailto:loa@mail01.huawei.com" targe=
t=3D"_blank">loa@mail01.huawei.com</a><br>
Senior MPLS Expert=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"mailto:loa@pi.nu" target=3D"_=
blank">loa@pi.nu</a><br>
Huawei Technologies (consultant)=C2=A0 =C2=A0 =C2=A0phone: <a href=3D"tel:%=
2B46%20739%2081%2021%2064" value=3D"+46739812164" target=3D"_blank">+46 739=
 81 21 64</a><br>
<br>
______________________________<wbr>_________________<br>
BESS mailing list<br>
<a href=3D"mailto:BESS@ietf.org" target=3D"_blank">BESS@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/bess" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/bess</a><br>
</font></span></blockquote></div><br></div>

--94eb2c18fc54bf90cc054d78248c--


From nobody Wed Apr 19 02:12:48 2017
Return-Path: <nick@foobar.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9AA51315AF for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 02:12:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RRnxJ2qIvmNH for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 02:12:44 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0FFE1292AE for <idr@ietf.org>; Wed, 19 Apr 2017 02:12:44 -0700 (PDT)
X-Envelope-To: idr@ietf.org
Received: from cupcake.local ([194.88.241.232]) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id v3J9CeeD046633 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 19 Apr 2017 10:12:41 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host [194.88.241.232] claimed to be cupcake.local
Message-ID: <58F729FF.7000700@foobar.org>
Date: Wed, 19 Apr 2017 12:12:31 +0300
From: Nick Hilliard <nick@foobar.org>
User-Agent: Postbox 5.0.12 (Macintosh/20170323)
MIME-Version: 1.0
To: Jeffrey Haas <jhaas@pfrc.org>
CC: idr wg <idr@ietf.org>
References: <CA+b+ERnHAdrQa1f-b7st3QBjzbFS1zvktkGCAppRuqGkf8Vnhg@mail.gmail.com> <CA+b+ER=E1FV4=-W9jcHG4ih0GeE2O1jDXKNAZhEe+nENEHAiYg@mail.gmail.com> <CA+b+ERkfV4C++arFCBXnyjgkA-FtcqMmd8_9UcbKLWxR32h1EQ@mail.gmail.com> <CA+b+ERkvu296sqD_bi41++RqHiV-f+4cUpb1BPrhE6HsxeueqA@mail.gmail.com> <CA+b+ERk+XP5DvuZStYW=e1uGRWDWE-PiPdwhtkHiVK7hFui7_g@mail.gmail.com> <CA+b+ERmapG68ysZ4=6uDAH=Z+fRaprzgsyQASP4aYD=OTea_Qg@mail.gmail.com> <CA+b+ERkZ-WY5FWiDu_k=1+7tUHEApYj+mMLqZiFzTWGuvHLjGA@mail.gmail.com> <CA+b+ER=MBiFno8CDv9JgpFFmJz4cuDe_tQhm+AHx5njxJy6p6Q@mail.gmail.com> <CA+b+ER=3qy_096Q61FBQgkRSt8j0P1NTQ+EFVit0XEnWvLp6mg@mail.gmail.com> <CA+b+ERmuGSZBcboZDsRo1NDb3dsRozmcEW77KWLyzyjxK8ezww@mail.gmail.com> <20170418203823.GC9688@pfrc.org>
In-Reply-To: <20170418203823.GC9688@pfrc.org>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/6kUenDu4YuT9D8viuhiLQ-ik-Nw>
Subject: Re: [Idr] RS BFD draft
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 09:12:47 -0000

Jeffrey Haas wrote:
> The RS-BFD proposal doesn't preclude other mechanisms for advertising
> alternate paths.  I'd be interested in hearing about RS operators that have
> any intentions of deploying BGP add-paths[1] or diverse paths.

with RS operator hat on, add-paths is interesting; diverse paths less
so.  I'd deploy add-paths on the RS side if there were more client
support out there for it.  Right now, this is thin on the ground.

Nick


From nobody Wed Apr 19 06:26:57 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79454129537; Wed, 19 Apr 2017 06:26:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xk9wl4uC1Tss; Wed, 19 Apr 2017 06:26:47 -0700 (PDT)
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0120.outbound.protection.outlook.com [104.47.40.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E8DA2129504; Wed, 19 Apr 2017 06:26:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=J46R58dA5Q2cvTI1Qpcz9mXxACaFehba1miEklLbIPQ=; b=DBpwA0/SVuefcjRQWxEmGXhYOOlTzDZ+CoXGXB/QX2sHEXYcW0Dga2A1FzCM3T8VXk+4UNLUvVpUDHGcj2hRCFq3UTlkCYsj6G0kI25am81zT+HwPCFP3T5Khz1OFUug0C5Plk2f1YaLOTrY5zJlxXEozFYo6n3TsgfAgi0nf+o=
Authentication-Results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.33.8] (66.129.241.12) by SN2PR05MB2512.namprd05.prod.outlook.com (10.166.213.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Wed, 19 Apr 2017 13:26:45 +0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <27BC3D10-48EA-4751-A70A-0753B0437F8F@cisco.com>
Date: Wed, 19 Apr 2017 09:26:40 -0400
CC: "draft-ietf-grow-bgp-reject@ietf.org" <draft-ietf-grow-bgp-reject@ietf.org>, Chris Morrow <morrowc@ops-netman.net>,  "idr@ietf.org" <idr@ietf.org>, "grow@ietf.org" <grow@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-ID: <8FA9FC06-CA1C-4738-B15A-387E2A2CE275@juniper.net>
References: <27BC3D10-48EA-4751-A70A-0753B0437F8F@cisco.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR11CA0041.namprd11.prod.outlook.com (10.173.25.27) To SN2PR05MB2512.namprd05.prod.outlook.com (10.166.213.21)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 3f399952-ae95-4fb0-a397-08d48727ba0f
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:SN2PR05MB2512; 
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2512; 3:eUdwmVWW9zodYyGeDusTT2oEsiMnumUdT0M0vfo0MdaoruZMEOL7QTgAln4urjzJT0UVRtZ59GHB7FXjcXX44G78fbMm4L/kacNlnO+ph75s8T8nzcrWEIWvoI4EsQzX6mwFx3xaNZHSDNZs+E1TjAQ79meUi5BKhFGpXQm4GSspOEc9yaDDIMud1n8SYm74YKS1y6dffQ7sBwjqqJ0ieh8dtr+rNuMPcnkY+L/DlVF6TpMTX9V2ZGxEPgod6m93jJOYPXspqxZTJhggo6VaQTT6hWpFNOQYN5W0gWhsFtOexgtsDubjRWE0SjQLzXyWFFT4yibr5sCFHT72Bp0kQNyYulIc54qDieZa4h3i+pM=; 25:qfEX8VkS+4HQqwHAvucr6mFBCAwE938ERMi4/cYsMhmD0AqzCYwzM9TKmmQby3GbIaJsdi0F1cMrS+4CGy2wCMPY6QKBYU2Mt9kYhMwBMycfnOluKqKQ1Gams22Zv1l3Oik/NL6eXTpALriMettk4LhJ+VxMSmdVFxKikl54hxu6Ek30mZ+SwLQhWJC+BxfpCkDmA5PQseASP2AdlTJEwD/FMfAOugs8I8NAinRJEgAxMQi57iYoyb5XQsqqoStqesQ6VzULZGZVkaHSJddI69AwRJTknKc6FjStB0byKkvbPf3xxsdfnjESSCaECW7tWYmjKtkRR3RgmJBq0W5YG0zVx2W+CHUEXTJKRYImBWWTJL/8ce7hQYp1fn8O7TxSIQ8Snu4qBM0nPM80VLfshxXweMccfVbCEvTdnriMZkqZFlneW064aENXp9EheCif/KIkj3J2DeypCVTXBDYoo0aWnbiOTOWKl6/oxWf6ULk=
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2512; 31:Ymphm/nhpVpMi7dKKu11Ex88TFzLAMZlqzVnSzQ0t9bJ0/QrYhp1gelMR4C1/t/lHmZFoEDScFNVjeT/O+N7GQzTqqtVzpFKG46781rrF00K+Mu2fzZ7mhuddFllcmnwY6PZJhJ8v6VdeC+E9TuEvtNMo6BKojNbOvLucsQp7MOBR4GiTZueVIPPy5w79JAYkG46uneJHqoOG4JxPJd6zJb9Q5N3uzKCvT+VgCNsI6TgF27cAFPSjQsJLDbalc3VtIqCuLxK65mdHRiTBeTORQ==; 20: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
X-Microsoft-Antispam-PRVS: <SN2PR05MB2512174E7BDAD8B70B2177EEAA180@SN2PR05MB2512.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(95692535739014);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041248)(20161123564025)(20161123562025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(20161123555025)(6072148); SRVR:SN2PR05MB2512; BCL:0; PCL:0; RULEID:; SRVR:SN2PR05MB2512; 
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2512; 4:61nxz9f/1OCzc3IIMra1pNUGzA9UpNdWSNquAqXsLvVVESDHzSfEFWKNTtWiucoKnL8JnlXj9moG8RIN2mxXgIYvLKlfySY8h9Ln4caAwoPd6wwoP+gYeXbv6ibfOkqKv+rD6G27L4dMFyV4BMXBfDaW/Y2grIQ0FQJfOi/SY7jjG8lM0LdTZrQg9q3zQj3DHqF30CyzQVS/SxzsxhVk7oJP6I0s8AbXBq56VrcAW4Xt8tlbqGmoky7S+ZH/mo/+FAhzBUMWGVYyl9kVFiQ1iqNHDAvH++rvbnoUEcltSy0BSKpWMEvcdwdvXCWOdkUKrNBFaSV3C2RKu8ahiWFDkhWBfOFdVpdHTE1nLmWIHBBgKJuzvHI5TaOUbp7UknLFWF88Fa+YxuyG77CpThatP/PoUZ1i2hMnDnFZtjpFiG668TGA/FXC6uiR9UU3Ni0uZkclmPczc2wbAYeDvXZ/H1Y6PztAvOHD2DRt5yLfcfEN+Ec2c6WkbLC09N3msdnJFoY63wex8Df1zNi1t5P+ssMoH+ehD+SY0OIQWwgaZd5FmBh1OmzeA1Kcy7VCQ5pj1W52Si7EizNd6e7w2eX6T/C+/NuhdAcOP2mVRpjmIROezftTdaxRykmUHBkm9EH/bDaFDrfLRAFwFCQtUDGNI49LaoEUhHXuTdMByLglS4xI++AA6xaSPS1ivTKKfbjmj4UpAN/ABY3BxlY0cFP+S/ou8l1ZMz1bdM0NJ94U+cFU6z5p3ZpLAlA+OT0T9WFfHQM4Nlg60WphTUN6W8hnVg==
X-Forefront-PRVS: 028256169F
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(39400400002)(39450400003)(39850400002)(39840400002)(39410400002)(39860400002)(377454003)(24454002)(3846002)(53936002)(86362001)(2906002)(77096006)(8676002)(90366009)(6486002)(81166006)(8746002)(50986999)(76176999)(33656002)(50226002)(6116002)(189998001)(25786009)(42186005)(230783001)(54906002)(57306001)(4326008)(47776003)(83716003)(110136004)(50466002)(6666003)(66066001)(38730400002)(82746002)(36756003)(2950100002)(5660300001)(6916009)(305945005)(229853002)(23676002)(7736002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN2PR05MB2512; H:[172.29.33.8]; FPR:; SPF:None;  MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtTTjJQUjA1TUIyNTEyOzIzOmREc05IbnRham5ZdmlaTXhKNnJxd3V6NHdM?= =?utf-8?B?RU14TjVHYVNqMWVUOUx3VFBjZWNQaTBSVDd0QzNneDlDSmpBTlFUeGFjVmlz?= =?utf-8?B?dEpWek0yTCtWN0tOcFF0alhEZHc2OWJLblRaL2RlcjhQdXdRd0pZTDJibTNO?= =?utf-8?B?UWNBUTZiS1phcHJKSVg0bHFpV0t1cEVUR2xWbjR4V3JwTkFhOTJNZjBqdWx4?= =?utf-8?B?eUZZVHlXRG1laFFjcXVGV2xRWU01WWtjRW1oTEVrdFBwK3JXenVybG1jZE9R?= =?utf-8?B?M2Z0ZDFPaHpoU2tGT29lc21HWkJBdHdQcFlZZ2xHTVRkSnRzYmExUWIyNjli?= =?utf-8?B?bktPUTFmSVgzR3ZOdWNUZmxnc0lYS0V3MGs4L1JLVCtzZHJQekJaRGRhSjBx?= =?utf-8?B?NERJM3lpTCtabTg5UFdmeFcvZlRPZDdOeis3cjd2SkFVSGhFQUNmckVadWNI?= =?utf-8?B?TTIzcC9yV3JDSkhNc2lrR2dWUEM0N1dwbEhWQ3FDTUFKYzFCRlY3cW1QT3hv?= =?utf-8?B?UEkrVGVyWUhnUTJVWmUxbUZ1Mzk1Y1AwVjI5N2lta3VDMEpCMTVBSGNMN0dK?= =?utf-8?B?TERGeTZWUEU1YjYvZElra2hSUGt0VUFsM0tZNDBuOGpSTjd4d1NrUThPL0lK?= =?utf-8?B?cnNWdlhmTzV2N2ZvZDVzZitZKzB6ZnBUVzlJblpmaCtaWGpZNCsycUhmU3JE?= =?utf-8?B?Vm1FbmJGdU5NUjFtTFRNVHlwOTZZdXV2TjJXOFRocTFQNHB5NGlIN2NoaU5K?= =?utf-8?B?bUN6bXRPZEZzRkJMbXhVZmVRWFpkVTlUdUpSTGNLRjlBcmh0NmMvMzRrcytS?= =?utf-8?B?MEUwYTg2clp1RnBzd3FZTDUvcXdYU0syMlhJQWxSQ29ubEVNV2dodHZ2RWo5?= =?utf-8?B?bWQrZmhKR0xyVFpVd3lpc0VuMXpoMmFZeEdjdEZYcGsrMXZsRVNBTGxSckxx?= =?utf-8?B?QnovcTVNYmhjb2E3c0ZvTHRVLzJoUmpyc08vTGRWR3NmNjVUWnhuR0dWMTVJ?= =?utf-8?B?SUpILzJjSllJbFlPMURCN3RhYmhDOFhoNE1IWGNXMjdLS3d2N0NGU1p2QlVH?= =?utf-8?B?eDFHb2dRTTIyWUtQVDZZRlJuSllyeEYyUVVHSjczd2tvVENsWCs4dXNidzQ0?= =?utf-8?B?YnVkN0dpSnh4MlQ1eHFnR1NlYlNScjlJTU9JK0xNQlpyYWwwbGNtNEwvcXNY?= =?utf-8?B?TE91SkFNQURUTjg4cUN6cE82Y3kxRXcvT0Q4K05JajNTR3FZQ0x5Uys0YkIz?= =?utf-8?B?OE1Wc0M2VXhuRDl4ZkJNdkZDTDFnTE9naW1EREpWaUVBR091OU8rRmppR1Zj?= =?utf-8?B?eTArRWJiUGh5eVpBT3gvKzZ3SUhpWmVKUjdmODhFTDdGVm85WTVwdStJWGlS?= =?utf-8?B?TzliZlhoaXpBNXhVN05MZWU4QnlxQTZCUFpVaUZ3TWNwMFB4dDRSSGJreUlo?= =?utf-8?B?N0pTR2l5SFMranVnQWpYSTNwTFJvVUY3TUVnQ2hVam9SRVhLQmd0eXpvTUtH?= =?utf-8?B?QmhtZTFPdHdlL1JqWmJzNTJFWGlJbXdWc0FwYmRBUVdHVysyVHFVNzNoc0R3?= =?utf-8?B?emhRS0RQWi8wZXJvUjJDSUJFMVVBN3NPS2hrcXFTdzJyczM3aFNzY0FoQlV5?= =?utf-8?B?UUdkSmVIdUpMTVZrWGdwNkM5R2JnUHdHNTJRWk4rTEFZc1ZJcEJhV1R3PT0=?=
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2512; 6: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; 5:uaZLHYE0UnT8L3eZbXj1buN4QcYpzCGbDS6vAjy7tKNZBO3tNLQEphuUZNFW/vcV5bHGcQreCUJ7k4vnBtuIt0f/0AcCw1aeWHRAHqhSkm0RUERhIFBb7yj8eqJ5EHNNWMxnlcNV2LwVS6M+XGQRwg==; 24:/ejUmliGaLOGfKP/ZWGSyqDAzqsPR2Uv45I4eIYgP268X4x6STEVPnPdHSOk2Sd+oymTA63XxPsSzO0+79qIiWW1RUpZYHi+v7I2kntaP24=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2512; 7:Dd+GQ/1wm61ugicoGw4krR43Pz8isgfcl0YlAHffVIGgBUIMzb7jkU3Rkg74Rm5K077WGGltleE+5lPnZ61+K7xmZA0Qu0Aad4jUFBhi2WczcupE0tOn+xBNZiZ2FWhGfc2kHnIjR8ruvpj7UBIDmZ/AoBGoJxCeZYvfkS86HP/Lt0d1ZLKuhVR5F+v6Fj+TAGjHNKuzJXgSnRk2rAGPBtZONHpXcWst7vq1OJvOEWSD9ZfNSKI6yQxzn0dNTcPrLKBRwAACdJ0+3CdH9yMoKoNBv9rHijKUohguAT3Y5+mlyWyCDbK+BShSHHgnXyMlmixMts5fz88Rvhjr1E6Oqg==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Apr 2017 13:26:45.5018 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR05MB2512
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/4rzkMcoxTC0tkOoixFD3X-R9a6s>
Subject: Re: [Idr] Review of draft-ietf-grow-bgp-reject-05
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 13:26:48 -0000

On Apr 18, 2017, at 9:08 AM, Alvaro Retana (aretana) <aretana@cisco.com> =
wrote:
> Note that 9.1.1. says that if =E2=80=9Cthe route is ineligible, the =
route MAY NOT serve as an input to the next phase of route selection=E2=80=
=9D.  IOW, even if routes are =E2=80=9Cineligible=E2=80=9D they can =
still be used (because of the MAY), which is not what is wanted.

Oh cool, MAY NOT is actually not a special term defined in RFC 2119. It =
doesn't have any special meaning despite the ALL CAPS. I think the plain =
English of it is clear in context -- the authors meant MUST NOT in =
2119-speak.=20

I think this is actually an erratum against 4271. To make matters worse, =
there is one other occurrence of MAY NOT in 4271, and in that case the =
intent is clearly the other way around -- in 4271, section 5, we have =
"Others are discretionary and MAY or MAY NOT be sent in a particular =
UPDATE message".

I'll plan to open errata against 4271 for these.

IMO the language in draft-ietf-grow-bgp-reject-05 is OK.

--John=


From nobody Wed Apr 19 06:53:56 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35FCA1274D0; Wed, 19 Apr 2017 06:53:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5zKicn2F-AWo; Wed, 19 Apr 2017 06:53:46 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8A18127B60; Wed, 19 Apr 2017 06:53:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2082; q=dns/txt; s=iport; t=1492610026; x=1493819626; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=asJ+ucvZcynrAWgPlP4rcYrEgnQYjnP21YTokBaWDfo=; b=Oydz7dThLs8fNwEuJtxGihrgTcAVN3yfQrXD7sV9XM3f7IYiD6Ja102X U8BcXytcRMCPVE4gNUwGfgIKQkxdW9NIm+ZcX892gA1Jl2LT9SdgLpi9U V2LECHYX+Rg3zNt1IqF6oEejZYjqcX96ODArvbpmi+OtUBDIYQPeb1xjv 8=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0APAQDravdY/5BdJa1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1SBbAeDYIoVkWOVYoIPhiQCGoNkPxgBAgEBAQEBAQFrKIUWAQU?= =?us-ascii?q?jEUUQAgEIGAICJgICAjAVEAIEDgWKGapTgiaLKgEBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAR2BC4VIggiCboRXgwYugjEBBJY+hnEBknuCAI9MiGyLJAEfOIEFYxVVAYZ?= =?us-ascii?q?TdYgIgQ0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,221,1488844800"; d="scan'208";a="414601773"
Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Apr 2017 13:53:45 +0000
Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by rcdn-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v3JDrjTt029900 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 19 Apr 2017 13:53:45 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Apr 2017 08:53:45 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Wed, 19 Apr 2017 08:53:45 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: "John G. Scudder" <jgs@juniper.net>
CC: "draft-ietf-grow-bgp-reject@ietf.org" <draft-ietf-grow-bgp-reject@ietf.org>, Chris Morrow <morrowc@ops-netman.net>, "idr@ietf.org" <idr@ietf.org>, "grow@ietf.org" <grow@ietf.org>
Thread-Topic: [Idr] Review of draft-ietf-grow-bgp-reject-05
Thread-Index: AQHSuETpEi5RDG0LC02mWBjlM+E8lKHNBG8A///EggA=
Date: Wed, 19 Apr 2017 13:53:45 +0000
Message-ID: <FD44B598-060A-406D-B2EC-1AFC177CA9F8@cisco.com>
References: <27BC3D10-48EA-4751-A70A-0753B0437F8F@cisco.com> <8FA9FC06-CA1C-4738-B15A-387E2A2CE275@juniper.net>
In-Reply-To: <8FA9FC06-CA1C-4738-B15A-387E2A2CE275@juniper.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: text/plain; charset="utf-8"
Content-ID: <FAB8757164B4BA45ADB16D7C8C982E1E@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/l8SY6QqQHZqpGZh1Yxxj2jf84sw>
Subject: Re: [Idr] Review of draft-ietf-grow-bgp-reject-05
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 13:53:48 -0000
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From nobody Wed Apr 19 07:03:57 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6BB64129A90; Wed, 19 Apr 2017 07:03:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L_uz9CnmT-OP; Wed, 19 Apr 2017 07:03:54 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id 17CD21287A7; Wed, 19 Apr 2017 07:03:54 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:1597:31b9:6bf0:1f20] (unknown [IPv6:2603:3015:3603:8e00:1597:31b9:6bf0:1f20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id 6BFC5540A63; Wed, 19 Apr 2017 10:03:51 -0400 (EDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <FD44B598-060A-406D-B2EC-1AFC177CA9F8@cisco.com>
Date: Wed, 19 Apr 2017 10:03:35 -0400
Cc: John G Scudder <jgs@juniper.net>, Chris Morrow <morrowc@ops-netman.net>, "idr@ietf.org" <idr@ietf.org>, "grow@ietf.org" <grow@ietf.org>, "draft-ietf-grow-bgp-reject@ietf.org" <draft-ietf-grow-bgp-reject@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <A898C59C-E82D-4423-8BFA-08FDA24132CC@puck.nether.net>
References: <27BC3D10-48EA-4751-A70A-0753B0437F8F@cisco.com> <8FA9FC06-CA1C-4738-B15A-387E2A2CE275@juniper.net> <FD44B598-060A-406D-B2EC-1AFC177CA9F8@cisco.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/3ViMQ4VaDK1m_orXV5rNQydFAAs>
Subject: Re: [Idr] [GROW]  Review of draft-ietf-grow-bgp-reject-05
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 14:03:55 -0000

> On Apr 19, 2017, at 9:53 AM, Alvaro Retana (aretana) =
<aretana@cisco.com> wrote:
>=20
> My bigger issue with 9.1.1 is that it is the first step of the =
decision process =E2=80=93 the intent, as I understand it, is for the =
routes not to even reach that point.

I=E2=80=99m not in agreement here as it=E2=80=99s well within the power =
of an implementation to provide a knob to circumvent these safety knobs. =
 We can=E2=80=99t have people pretending it=E2=80=99s the early 90s =
anymore.  We must have safe implementations and defaults.

Are you saying that IOS-XR is non-compliant with 9.1.1 because it does =
not have =E2=80=9Cbgp unsafe-ebgp-policy=E2=80=9D as the default?  At =
what point does the Cisco implementation make that decision?

We seem to be triangulating on where in the exact decision process =
people are considering a route feasible or ineligible, can you speak to =
your implementation?  That may provide guidance in documenting the =
IOS-XR practice.

- Jared=


From nobody Wed Apr 19 07:16:30 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA2D2129A92 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 07:16:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mrgD3Zg9lFFD for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 07:16:26 -0700 (PDT)
Received: from mail-it0-x230.google.com (mail-it0-x230.google.com [IPv6:2607:f8b0:4001:c0b::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEB73129488 for <idr@ietf.org>; Wed, 19 Apr 2017 07:16:26 -0700 (PDT)
Received: by mail-it0-x230.google.com with SMTP id 193so5895579itm.1 for <idr@ietf.org>; Wed, 19 Apr 2017 07:16:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=zBxt+2xeOuY/0kDtrr/+vbKXVZNX9YJjdkkfi1k0ENY=; b=AccD0OdPxJV3O0VOcBg5YgAc7ikm94vRNVpnchbKX9BLMb4SI3At2IF6AmkKwkF3Fu ZzwPBuToIMn0u5SKQAhZRPfXigew4UaB0iT0WeBsjY1xSQBEu7PD+7OFa7GjugdiLhRI 5KD6+6V/rwpf+9XZ1QJMkq/SaAjMkENI5p71raUlYc7u4QWX6p0j8NSqdZDcGP8MuF53 wjU2fC72tXyTIpW09GdK9nFbIhi2obAXuzjgPsPbjJ4G0d++q85vm9g6NSOzuwjHY7gM D3qxCOd0rrjxFhFuxWeSYLjIXnvoVF+cr7uhsDKru7p4E1uY4qTotywvWfRF/YJB6m2G xZtg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=zBxt+2xeOuY/0kDtrr/+vbKXVZNX9YJjdkkfi1k0ENY=; b=iZD3vhh5bromTws5UG+iV8wglsy8+/uQPDbIF7V5Rk2vEV/L+X21aFOft4FB5d/sc9 VM89spLLpAQLL7NzPXVET40dxFdoZIiSRAZ/hzihqEAwpGE5vr9vvXgITzOflLtWEbPk P7lZ8LVB9Xhe1A4PhgVg5gFZSOnmPM6Zm3f6ouowAb+RIdanCN58+t7TIGv6mc8Xr1pi VoFScXvjgLRNuBwRYZrfnQigG+7gX4P3Y3Q6L/ymPjDh8EjZZJrRYenJJd4sVqQQjcgd qzuhrHfwv5O3FitKrPZPMSITh24rAdTzIRFUw9artUOAhmD9ehwIBZRfvJtERyFEIwls OKxQ==
X-Gm-Message-State: AN3rC/52S7Ub1F1cqF+94aRbkyzne6u711iShPV4Ry5ay0KZ0ku/NpQy 5zTM2T8wqLN+qrPLqrEpeyWwIww6UA==
X-Received: by 10.36.115.12 with SMTP id y12mr3595417itb.24.1492611386075; Wed, 19 Apr 2017 07:16:26 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Wed, 19 Apr 2017 07:16:25 -0700 (PDT)
In-Reply-To: <58F729FF.7000700@foobar.org>
References: <CA+b+ERnHAdrQa1f-b7st3QBjzbFS1zvktkGCAppRuqGkf8Vnhg@mail.gmail.com> <CA+b+ER=E1FV4=-W9jcHG4ih0GeE2O1jDXKNAZhEe+nENEHAiYg@mail.gmail.com> <CA+b+ERkfV4C++arFCBXnyjgkA-FtcqMmd8_9UcbKLWxR32h1EQ@mail.gmail.com> <CA+b+ERkvu296sqD_bi41++RqHiV-f+4cUpb1BPrhE6HsxeueqA@mail.gmail.com> <CA+b+ERk+XP5DvuZStYW=e1uGRWDWE-PiPdwhtkHiVK7hFui7_g@mail.gmail.com> <CA+b+ERmapG68ysZ4=6uDAH=Z+fRaprzgsyQASP4aYD=OTea_Qg@mail.gmail.com> <CA+b+ERkZ-WY5FWiDu_k=1+7tUHEApYj+mMLqZiFzTWGuvHLjGA@mail.gmail.com> <CA+b+ER=MBiFno8CDv9JgpFFmJz4cuDe_tQhm+AHx5njxJy6p6Q@mail.gmail.com> <CA+b+ER=3qy_096Q61FBQgkRSt8j0P1NTQ+EFVit0XEnWvLp6mg@mail.gmail.com> <CA+b+ERmuGSZBcboZDsRo1NDb3dsRozmcEW77KWLyzyjxK8ezww@mail.gmail.com> <20170418203823.GC9688@pfrc.org> <58F729FF.7000700@foobar.org>
From: Robert Raszuk <robert@raszuk.net>
Date: Wed, 19 Apr 2017 16:16:25 +0200
X-Google-Sender-Auth: 1A6d1y2wWTJa-jrUu5D9BUu8BK4
Message-ID: <CA+b+ER=sRJ7+8uHa2gr1Q2gqVN0AVCsH4WSZWJJR-Y7zuBTSZg@mail.gmail.com>
To: Nick Hilliard <nick@foobar.org>
Cc: Jeffrey Haas <jhaas@pfrc.org>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a11444dca74727d054d85ab72
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/u93yh9XX4fbnKdTPC-Jfli26rBE>
Subject: Re: [Idr] RS BFD draft
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 14:16:28 -0000

--001a11444dca74727d054d85ab72
Content-Type: text/plain; charset=UTF-8

Nick,

There could be not so many clients negotiating it with RS as they do not
know that RS supports it :) So why not enable it on RS side and let BGP
capabilities negotiation do the job ?

At least BIRD claims to support it for eBGP in add-paths implementation
report:

CZ.NIC         (iBGP) route reflector / RR client, *(eBGP) route
                server / RS client,* use cases where paths are
                distributed for other purposes than filling FIBs (like
                topology-aware CDNs).



I guess those clients who care to get all eligible paths will take
some actions to enable it on their side sooner then those which do not
care.

Cheers,
R.


On Wed, Apr 19, 2017 at 11:12 AM, Nick Hilliard <nick@foobar.org> wrote:

> Jeffrey Haas wrote:
> > The RS-BFD proposal doesn't preclude other mechanisms for advertising
> > alternate paths.  I'd be interested in hearing about RS operators that
> have
> > any intentions of deploying BGP add-paths[1] or diverse paths.
>
> with RS operator hat on, add-paths is interesting; diverse paths less
> so.  I'd deploy add-paths on the RS side if there were more client
> support out there for it.  Right now, this is thin on the ground.
>
> Nick
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a11444dca74727d054d85ab72
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Nick,</div><div class=3D"gmail_default"=
 style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div=
><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-ser=
if;font-size:small">There could be not so many clients negotiating it with =
RS as they do not know that RS supports it :) So why not enable it on RS si=
de and let BGP capabilities negotiation do the job ?</div><div class=3D"gma=
il_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small=
"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,helveti=
ca,sans-serif;font-size:small">At least BIRD claims to support it for eBGP =
in add-paths implementation report:</div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div =
class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fon=
t-size:small"><pre class=3D"gmail-newpage" style=3D"font-size:13.3333px;mar=
gin-top:0px;margin-bottom:0px;color:rgb(0,0,0)">CZ.NIC         (iBGP) route=
 reflector / RR client, <b>(eBGP) route
                server / RS client,</b> use cases where paths are
                distributed for other purposes than filling FIBs (like
                topology-aware CDNs).</pre><pre class=3D"gmail-newpage" sty=
le=3D"font-size:13.3333px;margin-top:0px;margin-bottom:0px;color:rgb(0,0,0)=
"><br></pre><pre class=3D"gmail-newpage" style=3D"font-size:13.3333px;margi=
n-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><br></pre><pre class=3D"gmail=
-newpage" style=3D"font-size:13.3333px;margin-top:0px;margin-bottom:0px;col=
or:rgb(0,0,0)"><div class=3D"gmail_default" style=3D"color:rgb(34,34,34);fo=
nt-size:small;white-space:normal;font-family:arial,helvetica,sans-serif">I =
guess those clients who care to get all eligible paths will take some actio=
ns to enable it on their side sooner then those which do not care.</div><di=
v class=3D"gmail_default" style=3D"color:rgb(34,34,34);font-size:small;whit=
e-space:normal;font-family:arial,helvetica,sans-serif"><br></div><div class=
=3D"gmail_default" style=3D"color:rgb(34,34,34);font-size:small;white-space=
:normal;font-family:arial,helvetica,sans-serif">Cheers,<br>R.</div></pre></=
div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Wed,=
 Apr 19, 2017 at 11:12 AM, Nick Hilliard <span dir=3D"ltr">&lt;<a href=3D"m=
ailto:nick@foobar.org" target=3D"_blank">nick@foobar.org</a>&gt;</span> wro=
te:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-=
left:1px #ccc solid;padding-left:1ex"><span class=3D"">Jeffrey Haas wrote:<=
br>
&gt; The RS-BFD proposal doesn&#39;t preclude other mechanisms for advertis=
ing<br>
&gt; alternate paths.=C2=A0 I&#39;d be interested in hearing about RS opera=
tors that have<br>
&gt; any intentions of deploying BGP add-paths[1] or diverse paths.<br>
<br>
</span>with RS operator hat on, add-paths is interesting; diverse paths les=
s<br>
so.=C2=A0 I&#39;d deploy add-paths on the RS side if there were more client=
<br>
support out there for it.=C2=A0 Right now, this is thin on the ground.<br>
<span class=3D"HOEnZb"><font color=3D"#888888"><br>
Nick<br>
</font></span><div class=3D"HOEnZb"><div class=3D"h5"><br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--001a11444dca74727d054d85ab72--


From nobody Wed Apr 19 07:31:36 2017
Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 972AE129AAD for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 07:31:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0-8Lx6j4G-Ry for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 07:31:32 -0700 (PDT)
Received: from mobil.space.net (mobil.space.net [195.30.115.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BFA38129649 for <idr@ietf.org>; Wed, 19 Apr 2017 07:31:32 -0700 (PDT)
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id 82145602F3 for <idr@ietf.org>; Wed, 19 Apr 2017 16:31:30 +0200 (CEST)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id 7E7916028E; Wed, 19 Apr 2017 16:31:29 +0200 (CEST)
Received: by moebius4.space.net (Postfix, from userid 1007) id 700BA1C3BA; Wed, 19 Apr 2017 16:31:29 +0200 (CEST)
Date: Wed, 19 Apr 2017 16:31:29 +0200
From: Gert Doering <gert@space.net>
To: Nick Hilliard <nick@foobar.org>
Cc: Jeffrey Haas <jhaas@pfrc.org>, idr wg <idr@ietf.org>
Message-ID: <20170419143129.GQ25069@Space.Net>
References: <CA+b+ERkfV4C++arFCBXnyjgkA-FtcqMmd8_9UcbKLWxR32h1EQ@mail.gmail.com> <CA+b+ERkvu296sqD_bi41++RqHiV-f+4cUpb1BPrhE6HsxeueqA@mail.gmail.com> <CA+b+ERk+XP5DvuZStYW=e1uGRWDWE-PiPdwhtkHiVK7hFui7_g@mail.gmail.com> <CA+b+ERmapG68ysZ4=6uDAH=Z+fRaprzgsyQASP4aYD=OTea_Qg@mail.gmail.com> <CA+b+ERkZ-WY5FWiDu_k=1+7tUHEApYj+mMLqZiFzTWGuvHLjGA@mail.gmail.com> <CA+b+ER=MBiFno8CDv9JgpFFmJz4cuDe_tQhm+AHx5njxJy6p6Q@mail.gmail.com> <CA+b+ER=3qy_096Q61FBQgkRSt8j0P1NTQ+EFVit0XEnWvLp6mg@mail.gmail.com> <CA+b+ERmuGSZBcboZDsRo1NDb3dsRozmcEW77KWLyzyjxK8ezww@mail.gmail.com> <20170418203823.GC9688@pfrc.org> <58F729FF.7000700@foobar.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <58F729FF.7000700@foobar.org>
X-NCC-RegID: de.space
User-Agent: Mutt/1.7.2 (2016-11-26)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/37AwpAD65QxrIyY0Bh3_-TzpYxE>
Subject: Re: [Idr] RS BFD draft
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 14:31:35 -0000

Hi,

On Wed, Apr 19, 2017 at 12:12:31PM +0300, Nick Hilliard wrote:
> Jeffrey Haas wrote:
> > The RS-BFD proposal doesn't preclude other mechanisms for advertising
> > alternate paths.  I'd be interested in hearing about RS operators that have
> > any intentions of deploying BGP add-paths[1] or diverse paths.
> 
> with RS operator hat on, add-paths is interesting; diverse paths less
> so.  I'd deploy add-paths on the RS side if there were more client
> support out there for it.  Right now, this is thin on the ground.

In the context of "unreachable next-hops" (blackhole in the fabric, or
issues with the remote router) add-paths alone isn't helping much, until
router implementations actually do liveliness detection for the next-hop,
falling back to the next path if the peer is not reachable.

Now, how can we get router vendors interested in providing that...?

(I'll happily settle for "if ARP or ND fails, consider the next-hop
unreachable", which is far superior to "just black-hole", and also
superior to "we have a very fancy mechanism that only works if both
sides implement the protocol")

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279


From nobody Wed Apr 19 09:49:52 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B840129B42 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 09:49:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xXfHybdimxe1 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 09:49:48 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0120.outbound.protection.outlook.com [104.47.42.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A8BE129B2A for <idr@ietf.org>; Wed, 19 Apr 2017 09:49:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=XeloOnU5V3aKYPhDT5lCGUTo9rT1jcqNIEXkE/yYXwI=; b=ADSMQ2XLOKbmmEdV2I8wNCX7lIi304KGY+VdZu0UHaxeQ66nWQ85UVolJwk7lLdM+yXKEQwE4B8ZSH1S8Hs4awEW2D2CWzOJ+DlZm8/08xWxdUQ1+LYDJ9JTdWWEfo6yf38LIyx6e3ZC2cLGc6rRXPiCWXOqFWeih+S2kr6SmrU=
Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.33.8] (66.129.241.12) by SN2PR05MB2510.namprd05.prod.outlook.com (10.166.213.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Wed, 19 Apr 2017 16:49:46 +0000
From: "John G. Scudder" <jgs@juniper.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Wed, 19 Apr 2017 12:49:42 -0400
Message-ID: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net>
CC: Hares Susan <shares@ndzh.com>, Alvaro Retana <aretana@cisco.com>
To: <idr@ietf.org>
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR2001CA0028.namprd20.prod.outlook.com (10.172.27.14) To SN2PR05MB2510.namprd05.prod.outlook.com (10.166.213.19)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 8d265e96-5a55-4855-dda6-08d4874416a8
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:SN2PR05MB2510; 
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 3:wUFbV+Zar0kW3ehufWP6pO8rxOTLSQjJWQAlDhKwSlTBsJsSrijkJTQ1PDw8P+MuDjutNZkQe/uX/ms6XM87CNN3ciGtDgWovagJtBLJJtkMH9IyMkeIJuLmYw6YTPj2pf4Lyk/LgBlz3/i3MLKC0eVpoU8giNl9PFjxlzO30SXzb6bxL5hsketvQoqQfWbVu7O3v6bfYzkA2lhiV7kxeay7QPIo4L72f9MB1Unup7ZVJd6iYTsS/8gC0nZahDH//dfVYFiqKSywg/C7ysKrWGC234Gm0AX+iJnlXwSiakS0+OAihOLUvmmrWxVLNOn8VlM6U0euqtGABdg1VxoN9g7GK531MTZlBe+rh9GyULM=; 25:gTwRzFXkZho1Zi2cNSoZzDe+IX7Ou14EuR9PJs/YWxkIqC+MN5bTqYxNaUO1cxIY20c0aEBTEPS5VdYC2YUgDVqYmd9876R22eRJ8vhVcgoJOW4NB5XLgOM2so9bBsrPjVDzZ6ZMnkzX8P+gz9oPB6oZn/ROUr4JbASKVnHs5YlTiVFnO+LFKed4Dbnhna7ljX1EOYKuwdOWCgF+1S2+Y1Kp8fhWy8DQSl9xqwbrGKp8rtXooaozZi7I3AGCVJt/OwUox1HPbr4YSkhR2+sY/ryVCNqKEyndZd12iQHXz3pEdi/0XcnTs+S5i9c2RD9yOY2CavhRoZUsbjW/JYKD+1LEG8V9aK8gQtn4LcvXjg7qdknm21emRr+g2Q+57JlxCB9epOfLSR3B1z/So41BAKGU5KtUWwd6E9EY5jlrjhbcbvtjrjDYwxJcuF9+idFiE1dysl1y4qq1Ryeq3vvUPmG9o8CENlDz7tsEHdGlpSc=
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 31:W3CkxUvo2wxP/QvJ1ZmcAds1MCFYyD1IKiYPQ9OEFlJZGPF+T6a5uSUAVMmZvA7702D035F9jPLUknSoNCDLpo0/ECodqwMNxWRIUl5RHtbmcwagG3gQoJZfFjhu/AT1tKYDUTlIcfDfyTIqlmMvfepP2sY+EH3zA1viHY6aW34jOIj//zBfzP3t3WfKu2KEG6piJNC8+oPyPhiT8PswazEW+HxS1PzTvFhNcad8bwmtaXLXK3p/E858ph1GH9QNiiij7pI/4tqaYwbj0EeXubJl3ZyCGdzzuOKAwqQwNz0=; 20:yfFg44c4TJ+8el9bm+jji224XD7aVNBulN69LiuoZOHooeikF/vjMMCRqSZ5feNSNFDgL7V/OAJcHMcGoPWsDLiqFiQ2leLk/hjLLZa16wiq2WZluB2cG8Sl4kkBxF8RYb6Uzvkfneq4XOkc9TclHtqWJUfIVr8jYKAexJZDouDwqhelqplpHmqOFabNFd8bfHJs5ho0NbMU4qg0mOKn0ZmuOyEYh0hzb9XUNbJvoqi+MiKQZshCb1Usb195aWipR7y1o/dB1v22xHqUeRgl8Ri3Xg4vs7C4QDZpcBh0OrLI7yFfCIKfD631N2bjkvePxOd5I3ypKgAmZhxm6W4veQAiYx+kohhylpaAcuOhZkpMG5twyGyJrdLf7u4beMOoxnuiYCfkzZnsDuCnlmnZbH2Hi0qF3DfKWCoPKEDYBeSfV25XP1HGMER6fuuZKszn7E4e/6ApIQ/NHBbL8yGNA4DxJH4iVal3yyEEZOaSgIOyGWr9L3xfX18b2zO7UUvWt64aNpzApmfa4CKNx0RnVgt4MOZALN2WGx1h0FlgaRaewiVDAUuqrMQaeQ6Z3Pr+ZamchoFnIHXk9m9SKVuFUDwTbol5muY0VtDg/6i1NM8=
X-Microsoft-Antispam-PRVS: <SN2PR05MB2510992F51FA0300075B5A9AAA180@SN2PR05MB2510.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(120809045254105);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(6055026)(6041248)(20161123564025)(20161123555025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123560025)(20161123562025)(6072148); SRVR:SN2PR05MB2510; BCL:0; PCL:0; RULEID:; SRVR:SN2PR05MB2510; 
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 4:qYJhEA5+Lwy3peNwXb5A1FETTH6r65ML8/om+t5V3l/zqEHCq54xPMpef9djRutGjL7DKkytgJeKj6QNrZELoZcKTiBeG/2zfJy28lMvJJZrZliooM/FmNA8AH7EjAreSJWqVAFYhrCDQiUizjDcV3wyXva3V4Hze+hfqbxB3UIf+E7Kje9550EXDSYCOC7+jVQkiRdpbq0a7US0x/un6bDYifVKAz9MAIn6UtlqOfGHvTEjRTTMa+8zxhUGXZ1PI6En6/bIoUjLWorl3cz5p6OGG29UK+xn/1fX2s+AUV/dFS8kSvyWo9A3C53IMcVmRBaSO+UOBlCRHfc+BwjGH7K5dDEZcltbuHM/qtxFqGQolC563s9QMDDb9h34wuu2mS8a7/RKEsi+q4nAM5NqDPJeqTu5JDKGgarqpjJ/XvtZiDnXY5xOujuN1r1BQfRmoLA2edxldayKIZf2J1tRmYnNyrKJ6JpFA8Dz7L67sONp6QPzf4dJB22przLJWaqqRJ/wxlPgUwMMfvrsfgJZbqgYIW3EtMpmO/FY0Fv+czkmhb88fgX0ozz+kwkxIi0/tXCfeIqFq6y5DhT2dobbmOpULe8ChAxgj1/bjObCR83UQt5T2HPv78FceMHXSYNLWm6zmZ7xj98GBlpY8Cn4cZxUXMQNmTBVTHVm/5ahCROd704ExmVEOsyCmIKVcyxFLYIUJjj/qReq2FRp71Ouxs6VdrsCKIWzfUd+36ifj1GEPdv2Ui6+FpmCw1YJo+SSmd9nBfae5pNvuAGEsyDnx8drEBZFEj4bk3gxg2BjBfO4mWjCusyPbFjsA9v5qP8K
X-Forefront-PRVS: 028256169F
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(39850400002)(39860400002)(39840400002)(39450400003)(39410400002)(39400400002)(377424004)(377454003)(345774005)(81166006)(189998001)(2906002)(50466002)(36756003)(66066001)(8676002)(33656002)(50226002)(230783001)(86362001)(42186005)(4326008)(46406003)(5660300001)(8746002)(97756001)(6666003)(6306002)(83716003)(38730400002)(82746002)(54906002)(6916009)(2351001)(90366009)(110136004)(77096006)(25786009)(47776003)(53936002)(6486002)(57306001)(305945005)(3846002)(6116002)(50986999)(23726003)(24704002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN2PR05MB2510; H:[172.29.33.8]; FPR:; SPF:None;  MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; SN2PR05MB2510; 23:hwp3SiSTeOA4ysHu74wvtDxR1g8spiV4/BMJPlYGR?= =?us-ascii?Q?JvICGnzWNpqrh8XsrVwVP+5ZYMtIHG2i7DYqQIpExiEfKG25yc++z+Zz6fe1?= =?us-ascii?Q?QhqF7HIAecpRcFN4P/6Z0UDG9dkNEXpeJFkf+/gR0hGU40OLL8S5Q9S9CzkA?= =?us-ascii?Q?ZN4estE5sT8j7Q2iRXN/91r8dtQtCAEBtZDBPL4ZAst6LiOz0VDUvyjkh7Jd?= =?us-ascii?Q?B6o+D6OLd3QLakt0/9RHeG1CIxH+RFuAiNhBca1FvsxQSqrPRV16mRzjbRJM?= =?us-ascii?Q?oCXFttdojHfoFrMWsJVZpAcH7lCPcWxqaxTBUo3/Gy6Segj41czqmZph/TgV?= =?us-ascii?Q?D0XHa7RB8VY20Ih2SxZjoXeuPC1AotarLginShJtiA+VQYGQ30yhygD24L+t?= =?us-ascii?Q?s8Erh8/dOqpwV1jwTQoLcgvkUZRNsjIS1zokcCnMpiigndAteg+4rM9SMMGS?= =?us-ascii?Q?+CM5gXiyh9E7fXFJPQZ+g7jVGQFDCpj5hWazWIs4puZKThH1VF4242++igGl?= =?us-ascii?Q?bQIv8+udzDxGZ83AMwjJirguy6WuUVV3rDsuwwscIDhZVrddg8PXUpOp4pZO?= =?us-ascii?Q?2yOd9tNTW6OOHXEvpso7M+gcv4rnxutNH7l4P72G8fck8K0+MeR6j20RdSDL?= =?us-ascii?Q?NdjybhY92gElu9VuVWjc2bZPRyuVbTeKN1srCG5PQx/zuULzX1X5Xv0uq1mR?= =?us-ascii?Q?e81fZWWLBp2GPJJaGn3Hkv+Wg0jse9LaAkqSs3i+d8p2q6niSM6pRNFKjAwt?= =?us-ascii?Q?zi38vZV0vb+2kHP7A9+jBzBJtBVGJQwP80Nfcxt1+2rxWjIUF7bjA4iwpHmS?= =?us-ascii?Q?gLhBeYH7P1sxRfDD3MUOAKqpl+O6MtjbEHmGzCUZP9ho7ufYC2Qjo9HJ+I/F?= =?us-ascii?Q?GHHh7cuipDdL3hQ2Lk22maR3Ev3ixdSQOBTw/3qAkApf46ed9r/jZcFsKGCd?= =?us-ascii?Q?wtdm2inGUqQco7jyWbpXSaEWuH5QhG/AtBqtQO9HwQZUJ/CSkK9Ivv+f1SQz?= =?us-ascii?Q?eT06J1rYT9Z2MVFR36CAmO1ZseCQiJCDJExfXTCunLk9E+wDYZk1oWvzF+kG?= =?us-ascii?Q?rcAg3xCUQA/MuJGc6KwsaeVDeKYVebD6rUqrASVibdGx/dhlHxisWZBQirDu?= =?us-ascii?Q?wdkrKVxG8usI4xIsZI4bOFTStYW9Pqfno1P5vV6+L2cprNsWh1rrOKMIQRzp?= =?us-ascii?Q?KpiHePCOnDygL+rcJn9mqluxPBBgxe9SC2EooSBgcOdFHtlL0IwtdkEnXPBY?= =?us-ascii?Q?c7NWFwAm5bKrulXi7H3RGEL3qn8XjDDj1evLRqy?=
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 6: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; 5:KV+HI1O1/m1wtsX1+vzE5FLhAgFqk1BJ80UfPspBXtJDQ7Lt+LtWX1iPhpefC4pFfbXRYiTPIvuNfyf4RGV4EcZry23lZ68vt9ZX+/PWtHUme9XZD3QMviHd5rn3Jven4ji64s0fEXV+l2u0Ux1bpw==; 24:jfpsKwUkbk/Lxu4tbGao28FpMh82ScwFZIYeAp84cwy4Wt+lArOVnqJCC5gGNUXQdlf/pHRW5ae1FRUjhqfiOChKjkG1hp8y+obHGNbOhHI=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 7:B0SWkJz96AThBwCEwgycQ9eZGj3m2i3bcddh5nLGGpCIKDizXMUt++WOqd9RLOd1RYp8t6QZI/HZ0B54Zk56SrlMKJNs1yIZxvyqYgtU45sv2nEYIxcDQFP2ae/Uiq0Qk5PkVxFH4EWsvuVPfBPOSHPYNRZUxqBgT9OjxKnRyorTaH5qhosMiv5Khu2V02yERWaTTQdjHeHm1WWR1NWfm/YV7zo2GRaxdiXnEO4f0lSEfPAvrgGR+c8ADKhkvgk2Yr+sWlIGq1B96YT0X0pOFlA8S+z63X6IlfkrajiWP1lMRke2sADwE4cdR6/d/vAnYZrhGZwZ2gXdN1gxmDDPYQ==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Apr 2017 16:49:46.9480 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR05MB2510
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/nHZ7rF1_M883kJ88yU2yPkYJNVw>
Subject: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 16:49:50 -0000

IDR folks,

As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has =
completed GROW WGLC and is now in IETF LC.

As nobody other than Alvaro noticed (thank you for noticing, Alvaro!) =
draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that =
it mandates what a BGP implementation MUST do. See section 2 of the =
draft for the details. It's short and easy to read.

If we had noticed this earlier, we would have either chosen to home the =
document in IDR, or explicitly made an exception to have GROW do the =
work. Given that we didn't, though, the plan is to continue progressing =
the draft as a GROW document. However:

- As I understand it, the authors will add the Updates: 4271 header in =
addition to potentially taking in other comments from AD review.
- If anyone has a strong objection to the unusual procedure, please say =
so (either on-list, or to the chairs + AD).
- Please send any last call comments to the IETF LC (see below) although =
it's also OK to discuss here on the IDR list of course.

Many IDR participants are also active in GROW and have had their say, =
but if you haven't, now's your chance.

Thanks,

--John

> Begin forwarded message:
>=20
> From: The IESG <iesg-secretary@ietf.org>
> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP =
Route Propagation Behavior Without Policies) to Proposed Standard
> Date: April 18, 2017 at 5:16:05 PM EDT
> To: "IETF-Announce" <ietf-announce@ietf.org>
> Cc: grow-chairs@ietf.org, grow@ietf.org, =
draft-ietf-grow-bgp-reject@ietf.org, christopher.morrow@gmail.com
> Reply-To: ietf@ietf.org
>=20
>=20
> The IESG has received a request from the Global Routing Operations WG
> (grow) to consider the following document:
> - 'Default EBGP Route Propagation Behavior Without Policies'
> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>=20
> The IESG plans to make a decision in the next few weeks, and solicits
> final comments on this action. Please send substantive comments to the
> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments may =
be
> sent to iesg@ietf.org instead. In either case, please retain the
> beginning of the Subject line to allow automated sorting.
>=20
> Abstract
>=20
>  This document defines the default behavior of a BGP speaker when
>  there is no import or export policy associated with an External BGP
>  session.
>=20
>=20
> The file can be obtained via
> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>=20
> IESG discussion can be tracked via
> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>=20
> This IETF LC, which originally concluded on 2017-04-18, is being=20
> extended to allow for additional input to be provided. Ops AD (for =
GROW)=20
> and Routing AD (for IDR) wish to ensure that cross WG discussions have=20=

> had a chance to occur.
>=20
> No IPR declarations have been submitted directly on this I-D.


From nobody Wed Apr 19 10:41:45 2017
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60855129B6D for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 10:37:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nQke5NaUK7ib for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 10:37:25 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1925129B6C for <idr@ietf.org>; Wed, 19 Apr 2017 10:37:25 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id 71458B814DA; Wed, 19 Apr 2017 10:37:11 -0700 (PDT)
To: yakov@juniper.net, tony.li@tony.li, skh@nexthop.com, akatlas@gmail.com, db3546@att.com, aretana@cisco.com, jgs@juniper.net, shares@ndzh.com
X-PHP-Originating-Script: 30:errata_mail_lib.php
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: jgs@juniper.net, idr@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset=UTF-8
Message-Id: <20170419173711.71458B814DA@rfc-editor.org>
Date: Wed, 19 Apr 2017 10:37:11 -0700 (PDT)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/VLlq33sKhjh5Xac8Uiyvmdw_aFY>
X-Mailman-Approved-At: Wed, 19 Apr 2017 10:41:38 -0700
Subject: [Idr] [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 17:37:27 -0000

The following errata report has been submitted for RFC4271,
"A Border Gateway Protocol 4 (BGP-4)".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=4271&eid=5000

--------------------------------------
Type: Technical
Reported by: John Scudder <jgs@juniper.net>

Section: 9.1.1

Original Text
-------------
      If the route is learned from an external peer, then the local BGP
      speaker computes the degree of preference based on preconfigured
      policy information.  If the return value indicates the route is
      ineligible, the route MAY NOT serve as an input to the next phase
      of route selection; otherwise, the return value MUST be used as
      the LOCAL_PREF value in any IBGP readvertisement.


Corrected Text
--------------
      If the route is learned from an external peer, then the local BGP
      speaker computes the degree of preference based on preconfigured
      policy information.  If the return value indicates the route is
      ineligible, the route MUST NOT serve as an input to the next phase
      of route selection; otherwise, the return value MUST be used as
      the LOCAL_PREF value in any IBGP readvertisement.


Notes
-----
The original text uses "MAY NOT" capitalized as if it were an RFC 2119 keyword. However, RFC 2119 does not have any defined meaning for "MAY NOT". If a reader were to interpret this text as suggesting it is optional -- meaning, in effect, "the route MAY serve as an input to the next phase of route selection" -- that would be wrong and potentially problematic.

The minimal correction would be to use lower-case "may not", which makes the proper meaning reasonably clear. However, the English construct "may not" is notoriously ambiguous, therefore the proposed correction is "MUST NOT".

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC4271 (draft-ietf-idr-bgp4-26)
--------------------------------------
Title               : A Border Gateway Protocol 4 (BGP-4)
Publication Date    : January 2006
Author(s)           : Y. Rekhter, Ed., T. Li, Ed., S. Hares, Ed.
Category            : DRAFT STANDARD
Source              : Inter-Domain Routing
Area                : Routing
Stream              : IETF
Verifying Party     : IESG


From nobody Wed Apr 19 10:41:50 2017
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C7BB129B70 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 10:40:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VzDA3WJ_OCbA for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 10:40:56 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B0B59129B69 for <idr@ietf.org>; Wed, 19 Apr 2017 10:40:56 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id 7AA36B814E4; Wed, 19 Apr 2017 10:40:42 -0700 (PDT)
To: yakov@juniper.net, tony.li@tony.li, skh@nexthop.com, akatlas@gmail.com, db3546@att.com, aretana@cisco.com, jgs@juniper.net, shares@ndzh.com
X-PHP-Originating-Script: 30:errata_mail_lib.php
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: jgs@juniper.net, idr@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset=UTF-8
Message-Id: <20170419174042.7AA36B814E4@rfc-editor.org>
Date: Wed, 19 Apr 2017 10:40:42 -0700 (PDT)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/lJ053Z032RJmDPklrdR85j0gZsw>
X-Mailman-Approved-At: Wed, 19 Apr 2017 10:41:38 -0700
Subject: [Idr] [Technical Errata Reported] RFC4271 (5001)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 17:40:58 -0000

The following errata report has been submitted for RFC4271,
"A Border Gateway Protocol 4 (BGP-4)".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=4271&eid=5001

--------------------------------------
Type: Technical
Reported by: John Scudder <jgs@juniper.net>

Section: 5

Original Text
-------------
   BGP implementations MUST recognize all well-known attributes.  Some
   of these attributes are mandatory and MUST be included in every
   UPDATE message that contains NLRI.  Others are discretionary and MAY
   or MAY NOT be sent in a particular UPDATE message.


Corrected Text
--------------
   BGP implementations MUST recognize all well-known attributes.  Some
   of these attributes are mandatory and MUST be included in every
   UPDATE message that contains NLRI.  Others are discretionary and 
   sending them in a particular UPDATE message is OPTIONAL.

Notes
-----
The original text uses "MAY NOT" capitalized as if it were an RFC 2119 keyword. However, RFC 2119 does not have any defined meaning for "MAY NOT". In context, it is unlikely the reader would be at risk of misinterpreting the text, but nonetheless it's a misuse of RFC 2119 terminology and difficult to parse if reading closely.

(The replacement text was suggested by Eric Rosen; thanks.)

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC4271 (draft-ietf-idr-bgp4-26)
--------------------------------------
Title               : A Border Gateway Protocol 4 (BGP-4)
Publication Date    : January 2006
Author(s)           : Y. Rekhter, Ed., T. Li, Ed., S. Hares, Ed.
Category            : DRAFT STANDARD
Source              : Inter-Domain Routing
Area                : Routing
Stream              : IETF
Verifying Party     : IESG


From nobody Wed Apr 19 10:56:22 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45936129B95 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 10:56:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LkuzA9RSDpLC for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 10:56:18 -0700 (PDT)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 423DC129B5C for <idr@ietf.org>; Wed, 19 Apr 2017 10:56:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5280; q=dns/txt; s=iport; t=1492624574; x=1493834174; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=RAyCCTlBe69sDyYKUYXAzSis4uW6Y3Zmbd9gfVwXRto=; b=CseUuoPR9dXK/vNGEgkj48IL7rf/KiA4s7AqTzgZfALtX9PEQiK4ckEx z9wujPe7hqEp0NQWoGxqwsTXhxIOiAy54V+3ZfNrl6TlkzFrBavzVU/xL x05FlpM85ZP7W4bVzg+vsPfNRMBuoSjtUEDY0s46MaqVx5y0Yb0PjC8mK U=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0APAQCco/dY/5RdJa1CGhkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNUYYELB4NgihWnRYIPLIV4AhqDaj8YAQIBAQEBAQEBax0LhRY?= =?us-ascii?q?GIxFFEAIBCBoCJgICAjAVEAIEDgWKGQ4xqXqCJoslAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBHYELhUiBXSuBZIEKgTyBXIRFLoIxBYkzEYgOhGyGcQGJdokFggCFMYo?= =?us-ascii?q?blBABHzgVcGMVGjsBhFQMEIFjdQETh3SBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800"; d="scan'208";a="234925295"
Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Apr 2017 17:56:13 +0000
Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id v3JHuD9C006224 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 19 Apr 2017 17:56:13 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Apr 2017 12:56:12 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Wed, 19 Apr 2017 12:56:12 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Technical Errata Reported] RFC4271 (5000)
Thread-Index: AQHSuTOd8PN01POB30ic6dAk5zAQWaHNCtGA
Date: Wed, 19 Apr 2017 17:56:12 +0000
Message-ID: <88AF5CD0-3DA4-4CD0-877B-39925DC7D5F0@cisco.com>
References: <20170419173711.71458B814DA@rfc-editor.org>
In-Reply-To: <20170419173711.71458B814DA@rfc-editor.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: text/plain; charset="utf-8"
Content-ID: <94AEAB7BE7CFC44B96B3CFF5FE6B050F@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/OoxowKOvWYH8ZKDITCwqIi8WsgE>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 17:56:21 -0000
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From nobody Wed Apr 19 11:00:45 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB389129BA4 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 11:00:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AkCgJXc52giV for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 11:00:41 -0700 (PDT)
Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F5A2129B89 for <idr@ietf.org>; Wed, 19 Apr 2017 11:00:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3568; q=dns/txt; s=iport; t=1492624841; x=1493834441; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=EkHeXdlfX9R99Uov1HxKjX1JYMoLx88wxisboBfWzMQ=; b=AdmkQFXTHgPNh7DDwMq1x46L4VpaLZ1g+dd+WqDkKs9yZbrXQCO7rY8c uWKoi8HDplAGfSAQW/kkIR674AJ6LGgmr5OO6JHVpdU49ewr4BecS746m cWb1Tq3u8tF6tv4mT9gwfLt31emdJSkPpK6d6iVfo44rIxZ64WHnBVyw3 M=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0APAQBBpfdY/5JdJa1CGhkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNUYYELB4NgihWnRYIPLIV4AhqDaj8YAQIBAQEBAQEBax0LhRY?= =?us-ascii?q?GIxFFEAIBCBoCJgICAjAVEAIEDgWKGQ4xqgaCJoskAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBHYELhUiBXSuCboE8gVyBP4MGLoIxBYkzEYgOhGyGcQGSe4IAhTGKG4h?= =?us-ascii?q?siyQBHzgVcGMVGjsBhFQMEIFjdQETh3SBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800"; d="scan'208";a="233098441"
Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Apr 2017 18:00:40 +0000
Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id v3JI0emb018162 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 19 Apr 2017 18:00:40 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Apr 2017 13:00:39 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Wed, 19 Apr 2017 13:00:39 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Technical Errata Reported] RFC4271 (5001)
Thread-Index: AQHSuTQcHT9js/KsJUeWRsw9RvAV8aHNDA4A
Date: Wed, 19 Apr 2017 18:00:39 +0000
Message-ID: <DCAC4E8F-A609-4DCB-BADB-23434A6F0EAC@cisco.com>
References: <20170419174042.7AA36B814E4@rfc-editor.org>
In-Reply-To: <20170419174042.7AA36B814E4@rfc-editor.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: text/plain; charset="utf-8"
Content-ID: <B8312660F310DB45AF8D4A13D24839B2@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/XKzIZofxWQcncg5QVyma4MssxtA>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5001)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 18:00:44 -0000
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From nobody Wed Apr 19 11:35:50 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69520129BF9 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 11:35:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B9ZXVFfTTUn6 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 11:35:47 -0700 (PDT)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0101.outbound.protection.outlook.com [104.47.37.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B2817129BA0 for <idr@ietf.org>; Wed, 19 Apr 2017 11:35:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=jj221qpa+c1romxNC2oQo4eHskHWs5R3vPfwtDCzsPU=; b=Bbl9DrdgZrz/ffYXpskODF69eXg+EShvwlOof/CC7da8m6uBmuiMY4UK0/q3+XZB7rit1Za42lIDvNE9lS4v/jf7brfYx6z+/WbPN1UjzbVVYvp/ux2f5CY7BZlIom/2GoABwmlBWEjAQfs+JjuDtRfHjzpFxQqqU5wyf/MW+UA=
Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.33.8] (66.129.241.12) by CY1PR05MB2507.namprd05.prod.outlook.com (10.167.10.134) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Wed, 19 Apr 2017 18:35:46 +0000
From: "John G. Scudder" <jgs@juniper.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Message-ID: <2D8915A9-0753-44FA-842D-2EA4B5541C2B@juniper.net>
Date: Wed, 19 Apr 2017 14:35:41 -0400
To: <idr@ietf.org>
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR13CA0025.namprd13.prod.outlook.com (10.171.172.11) To CY1PR05MB2507.namprd05.prod.outlook.com (10.167.10.134)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 2144efcc-e458-4d14-c0c6-08d48752e537
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:CY1PR05MB2507; 
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2507; 3:Krhzbls5wMYiFKtqU2mL6Tn6XMCq8XDeDajhKQ3O6/q2ov519S/bTeh4iWEXT3ojeKHcyyJ+qYsm3RSitpuztC2pc82G+8ZCO+bGm61Cq8LadUQDkva/ic0WZSjfxJD+Px4SEJHnQIe6LDxKAg5ys7fu7cGtQhumC/Vct6PgCEwe1eH9z89ZUJ3x1RlxcOeoV6M7y/+z1vSoMZv0wShH7HRYUV7GGk8ymX4aAuLGU1hZVQJrbFNQeXVdAWKVgyzW26a+l+bZskDfOtPHn9PiGmlwd3WPoOh94iFCZ70DimuvWSML3oZ9VQsa7qBIfEpxA6FBtqDAtlXArjdhX0XRGLTaOiU1eNjWVd26MLv7plI=; 25:lAIivb1XcsSZhCvHGzlnYo0zdQ7FTSbCpsjEP6NOb07Aq2RnBWes3CFHqaPpP2G3yWwCVvcGmiIYypsMwwm/8nM2tBav41jKvrKI9jD09hZ/EXkyMZCcVoM3nPLZYzDoCSlYEtGxopJeiTbc0ClKcNUlhZrYKPLpHBBaOMnIrUF44sWLmRb/MlZcV/H9XJi4MMXrluJR+IOdXoq2OtZn1UUvXB3NSSFbVSicV1LuDREMlzbCPlA3VQdaEecRtHEOBNXS6vNBH/1AqpHzQ3UnKbj5Xc/qWhP4AyLBZGNDBKjFaPR7GagMo/1FoczGSeANQ78WbSb/nOaZX9veQH6jxap6hmTFjDp8jPGqQJ/4zS9kGjGCk0Z60K54evDmrZrwPw1lbanmvWzKO0/JbLKIxDewtoVZvpbK9j1UzukEAofljfp44gi2oXO8u/ZoaeZSxQmuX4tKDhX2RoBAuPxDRK8wm50uJLx2JO7AmsXEcDc=
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2507; 31:f67V7PSbz5fRMGqoH4RSV/lQINri757aEhVvaPtVj30uAtiM979K2ssMoRVpJPd+SQEl2G7BLMwmMFXF+zd0GLAiKWhwM2EHd2kkeS1QNZbtSecis4/IjFKZJOzsfvGSVvTGc/StXess8pbP77b8pxgQQiDSgyUK8o+I1I32dGhSqIToWoZ4t35UqkYNi/KLdvOZxCIU/2mJ1sKcYt/bDVtzfK8d5+UvuFD6I6UuA7ccZvVEggPzGqC1M8FIUk5a5yWgBNURYTWDLKlRx5yCAQam1VEoCVJl2h8r1wiPIv4=; 20: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
X-Microsoft-Antispam-PRVS: <CY1PR05MB250766658DA4C50FD0B2658CAA180@CY1PR05MB2507.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(120809045254105);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3002001)(6055026)(6041248)(20161123555025)(20161123562025)(20161123564025)(20161123560025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(6072148); SRVR:CY1PR05MB2507; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2507; 
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2507; 4: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
X-Forefront-PRVS: 028256169F
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(39850400002)(39860400002)(39410400002)(39400400002)(39450400003)(39840400002)(77096006)(36756003)(6306002)(50466002)(50986999)(97756001)(90366009)(6486002)(189998001)(42186005)(6666003)(6916009)(8676002)(66066001)(3846002)(81166006)(8746002)(50226002)(25786009)(6116002)(38730400002)(110136004)(82746002)(83716003)(5660300001)(47776003)(33656002)(23726003)(305945005)(53936002)(86362001)(57306001)(2351001)(2906002)(46406003)(558084003)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2507; H:[172.29.33.8]; FPR:; SPF:None;  MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; CY1PR05MB2507; 23:1DXYN08wZ110gYjTWETV24J4Cw+oosI8nOypiqSAS?= =?us-ascii?Q?L70oMi/6fLAXAvXKtqEX6v+R2GYTTyJdrUz4U9K0P8cYqVnHxBDzpcuNdPXa?= =?us-ascii?Q?IuBWlhSvxBd71lQoTZHpkzkwZ0D1JMHmOjEpO4LHvdJccI2aMzShbo+jrNA/?= =?us-ascii?Q?aocM9/4h0abtSf5KTsu9SbCyO5pyfHCnkskdvpcFxJwwSD3oEXq9NNx4m5Mf?= =?us-ascii?Q?YsH46CZDR1ll5Ytt+QjqRBdyGhccsTIJw0ljMaX6eMHRQPXbiUc+HLkWyANZ?= =?us-ascii?Q?MzUBdlsUiFizx3fbqtraPHeGuwnNqhmUj/IH1H7qsVMeY857SZX4sa2YMT/w?= =?us-ascii?Q?cU5jVH339ZPfYltnVLm5ZZBXBtEVG9BMMp7NM7D8iSMnDuWJmc5MeI1tdd8s?= =?us-ascii?Q?1iQCtK6KlhlM9E1Qlvn2vAG2pMfDkNSoaZzH16ZTxW8PMHYrEJAsvQ2Pax2u?= =?us-ascii?Q?ydTb0Oks/mgDNu660bfmCGONfB0+gptHA0k7vAi9ou0re5XSmxWkuFufa+ia?= =?us-ascii?Q?vW5NRJI7mRTd+8TTAbMo+VjetQTx4AcS2wKm3NuNezAR786k7aZVauld8L00?= =?us-ascii?Q?dYNVambIQ0+M/YMtiMH/92P/plR6M3TG78jFshi9yyGcwg6/WoLX+mSSw7iA?= =?us-ascii?Q?Usv7O/W4FCHWPpwFBzXLaS+vlPCDMB/6mO2iLxTbRe6H40Gw0lIU0DfKePiI?= =?us-ascii?Q?XyBh+mzCrrMHOGaovY+lBj2FB0bAzREGxhaXPpDjJNSglNG56rtCJ/KLcRta?= =?us-ascii?Q?MFnVRdsbc7IdeDLaAlcL1Ii7a5jt3ekDI0njtenkFCPrjhpOkcnktts7w2g1?= =?us-ascii?Q?GG8GP1h9geCCWef0mWwNfXnVVOgOzIn+f/375Ae5D09Ugw2TAmKoxcnpVqnj?= =?us-ascii?Q?7CGTYw8yHndD6/MIHclw/ITIybgJb/N6Zn6W4Mrtip10pwAoHY/dT6Ggaycw?= =?us-ascii?Q?J6EfoJOI/8KERbbb0ezZVlV++5laMy6Hun+8mhTKD0LJhepgh/8pjJT1N0O0?= =?us-ascii?Q?c803K6OCg+Auvu7OjGl6JcuqOl2xF5aUmBswnUPpJQy+U4Oj4Iw3t+Ejwk0O?= =?us-ascii?Q?YVaVBPWoI4CwjXdmiODEcW4X3rx9QiCY98qEVAHcKYlmoMAarnI7IwdAQH9t?= =?us-ascii?Q?Pms2nZI8GLp2vMDQK2RnnRRhmRx6ON5?=
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2507; 6: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; 5:BQkA5QbeIViz5SMnN0Y0Y6mK3TwU5Ae3UPQLfrTLSizDRNPQunewuEecr5iIHsp5EVS3iZqSZ6dcDw3dmrk2Y05zNsM+Jf2nbG36A1F9xxZbYaHeBRWBNxmhHzdBF7f9C4G+hd+fjGJNWgdPPW9fGQ==; 24:ZTBEcuBjKAmHxXq3XQIQtZhKZHCNU7fhanTUXw53d9Wy3e9u6V6Z7ynbgNlo0B1RGIN2fI3q5pNZB4oMpE7haoel+Y3Z/XnoW+DGEaGwiak=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2507; 7:GlmDIVg/8SmNV6oqQUOlk8QKqDXQfv5p2UiKSZiKw+uLEN3qDXaNqaFVn8MKVCuZpl3ix6NUVMD5s2wi5GJ4h3jGKbDaZZU2r71ThbCba68gohqAkylkX2IjZNNy3Ip6Dk5CWMJnXcXow4Y0zf+KrmqkDFCVFdHCqezvL45BJeENL5sssMF2TPjZZ6W0n5REnKZ+uwTwjVzLIsfX5HachWTfMTUUAa1XCkLgMiObfYCLzcvW9RCVKh2AvbaFym+mouAG+6usdQbY2zCK7vEqbwBkOJowWo5VztPV1F8hL+u7N7qRCvDt1td+92lUnPlWF/pCqfOW8dBZeAnXQpFwvg==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Apr 2017 18:35:46.5414 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2507
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/MEYRoXzCEjjXFM3RXkvc5Jpo-lQ>
Subject: [Idr] IETF-98 IDR minutes posted
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 18:35:49 -0000

Minutes from our Chicago meeting are posted: =
https://datatracker.ietf.org/doc/minutes-98-idr/

The server-side tools seem to have "helped" by rewrapping the lines and =
made a complete botch of it, sorry. I'll fix it presently.

--John=


From nobody Wed Apr 19 11:45:33 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02665129BEE; Wed, 19 Apr 2017 11:45:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LlD6CClsjWA1; Wed, 19 Apr 2017 11:45:23 -0700 (PDT)
Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EB3812954E; Wed, 19 Apr 2017 11:45:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2024; q=dns/txt; s=iport; t=1492627523; x=1493837123; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=p+AVeaA3hTAnasw4fvvRUqp+1z3bZ5UUDl97PlgCfiQ=; b=WthQp4LpcCkc7C8tsjLRBmv2+F/O9gt7PVrc6lisxOn1kurWfv2Zdv+S zm66eAVqsoInlOw2VtR2JBRem3Mwo6VVd/YM5wMh/i/Iptk5L7xay6ONO VwcnpGEgy5Xp2v/DK/Pq25KvL72m9UMDYFfBTAEvAAc0Gc/zJRugSiBlL A=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AdAQDjr/dY/4kNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1SBbAeDYIoVkWOVYoIPhiQCGoNqPxgBAgEBAQEBAQFrKIUWAQQ?= =?us-ascii?q?BIxFFBQsCAQgaAiYCAgIwFRACBA4FihEIqkKCJosjAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEegQuFSIFdK4JuhFeDBi6CMQEElj6GcQGSe4IAj0yIbIskAR84gQVjFVU?= =?us-ascii?q?BhlN1h16BDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800"; d="scan'208";a="414057898"
Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 19 Apr 2017 18:45:22 +0000
Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id v3JIjMXB017868 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 19 Apr 2017 18:45:22 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Apr 2017 13:45:21 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Wed, 19 Apr 2017 13:45:22 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: Jared Mauch <jared@puck.nether.net>
CC: John G Scudder <jgs@juniper.net>, Chris Morrow <morrowc@ops-netman.net>, "idr@ietf.org" <idr@ietf.org>, "grow@ietf.org" <grow@ietf.org>, "draft-ietf-grow-bgp-reject@ietf.org" <draft-ietf-grow-bgp-reject@ietf.org>
Thread-Topic: [GROW] [Idr] Review of draft-ietf-grow-bgp-reject-05
Thread-Index: AQHSuETpEi5RDG0LC02mWBjlM+E8lA==
Date: Wed, 19 Apr 2017 18:45:21 +0000
Message-ID: <9BF858F5-5FE3-4A48-96D5-E9852518FDBC@cisco.com>
References: <27BC3D10-48EA-4751-A70A-0753B0437F8F@cisco.com> <8FA9FC06-CA1C-4738-B15A-387E2A2CE275@juniper.net> <FD44B598-060A-406D-B2EC-1AFC177CA9F8@cisco.com> <A898C59C-E82D-4423-8BFA-08FDA24132CC@puck.nether.net>
In-Reply-To: <A898C59C-E82D-4423-8BFA-08FDA24132CC@puck.nether.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: text/plain; charset="utf-8"
Content-ID: <4388572F8952EA458BAACE1DDE6C242D@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/wbXxSgXNaXn0nmVxtYkVZ6DGelo>
Subject: Re: [Idr] [GROW]  Review of draft-ietf-grow-bgp-reject-05
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 18:45:25 -0000

T24gNC8xOS8xNywgMTA6MDMgQU0sICJKYXJlZCBNYXVjaCIgPGphcmVkQHB1Y2submV0aGVyLm5l
dD4gd3JvdGU6DQoNCkphcmVkOg0KDQo+IEFyZSB5b3Ugc2F5aW5nIHRoYXQgSU9TLVhSIGlzIG5v
bi1jb21wbGlhbnQgd2l0aCA5LjEuMSBiZWNhdXNlIGl0IGRvZXMgbm90IGhhdmUg4oCcYmdwIA0K
PiB1bnNhZmUtZWJncC1wb2xpY3nigJ0gYXMgdGhlIGRlZmF1bHQ/ICANCg0KTm8uICBJIHdhc27i
gJl0IHRhbGtpbmcgYWJvdXQgYW55IHNwZWNpZmljIGltcGxlbWVudGF0aW9uLg0KDQpPbmUgb2Yg
dGhlIHJlYXNvbnMgSSBsaWtlIHlvdXIgZG9jdW1lbnQgaXMgdGhlIGZhY3QgdGhhdCByZmM0Mjcx
IGlzIG5vdCBzcGVjaWZpYyBhYm91dCB3aGF0IHNob3VsZCBiZSBkb25lIGlmIHRoZXJlIGlzIG5v
IHBvbGljeSDigJMgaXQganVzdCBzYXlzIHRoYXQgcG9saWN5IG1heSBiZSBhcHBsaWVkLiAgRnJv
bSB0aGF0IHBvaW50IG9mIHZpZXcsIHRoZSBYUiBpbXBsZW1lbnRhdGlvbiBpcyBuZWl0aGVyIGNv
bXBsaWFudCBub3Igbm9uLWNvbXBsaWFudC4NCg0KDQo+IEF0IHdoYXQgcG9pbnQgZG9lcyB0aGUg
Q2lzY28gaW1wbGVtZW50YXRpb24gbWFrZSB0aGF0IGRlY2lzaW9uPw0KPg0KPiBXZSBzZWVtIHRv
IGJlIHRyaWFuZ3VsYXRpbmcgb24gd2hlcmUgaW4gdGhlIGV4YWN0IGRlY2lzaW9uIHByb2Nlc3Mg
cGVvcGxlIGFyZSANCj4gY29uc2lkZXJpbmcgYSByb3V0ZSBmZWFzaWJsZSBvciBpbmVsaWdpYmxl
LCBjYW4geW91IHNwZWFrIHRvIHlvdXIgaW1wbGVtZW50YXRpb24/ICBUaGF0IA0KPiBtYXkgcHJv
dmlkZSBndWlkYW5jZSBpbiBkb2N1bWVudGluZyB0aGUgSU9TLVhSIHByYWN0aWNlLg0KDQpUaGUg
WFIgaW1wbGVtZW50YXRpb24gbWFrZXMgdGhlIGRlY2lzaW9uIHdoaWxlIHByb2Nlc3NpbmcgdGhl
IFVwZGF0ZSBtZXNzYWdlcy4gIFNwZWNpZmljYWxseSwgaXQgZHJvcHMgYWxsIHRoZSByb3V0ZXMg
ZnJvbSBhIHBlZXIgd2l0aG91dCBhbiBpbmNvbWluZyBwb2xpY3kgY29uZmlndXJlZC4gIElPVywg
aXQgYWN0cyBhcyBpZiBhIGRlbnktYWxsIGZpbHRlciBleGlzdGVkLg0KDQpJbiB0aGUgY29uY2Vw
dHVhbCBtb2RlbCBpbiByZmM0MjcxLCB0aGUgcm91dGVzIGFyZSBub3QgZXZlbiBwdXQgaW4gdGhl
IEFkai1SSUItSW4uICANCg0KDQoNCkNvbXBhcmVkIHRvIHRoZSBjdXJyZW50IHRleHQgKGluIC0w
NSksIHRoZXJlIHdvdWxkIGJlIG5vIHJvdXRlcyB0byBtYXJrIGFzIGluZWxpZ2libGUgaW4gOS4x
LjEuICAgVGhlIHRleHQgSSBwcm9wb3NlZCBhbHNvIGFzc3VtZWQgdGhhdCB0aGUgcm91dGVzIHdv
dWxkIGF0IGxlYXN0IGJlIHJlY2VpdmVkL3N0b3JlZC4NCg0KSWYgeW91IHdhbnQgdGhlIHNhbWUg
YmVoYXZpb3IgYXMgWFIgdGhlbiB5b3Ugd291bGQgaGF2ZSB0byBtYWtlIHRoZSBjaGFuZ2UgaW4g
U2VjdGlvbiA5LiAoVVBEQVRFIE1lc3NhZ2UgSGFuZGxpbmcpLg0KDQpBbHZhcm8uDQoNCg==


From nobody Wed Apr 19 11:45:55 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA3A2129C1B for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 11:45:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.619
X-Spam-Level: 
X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NSs2ese9dE94 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 11:45:42 -0700 (PDT)
Received: from relais-inet.orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 55176129C08 for <idr@ietf.org>; Wed, 19 Apr 2017 11:45:37 -0700 (PDT)
Received: from opfednr03.francetelecom.fr (unknown [xx.xx.xx.67]) by opfednr26.francetelecom.fr (ESMTP service) with ESMTP id B4F0620450; Wed, 19 Apr 2017 20:45:35 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.42]) by opfednr03.francetelecom.fr (ESMTP service) with ESMTP id 8A7B91A0059; Wed, 19 Apr 2017 20:45:35 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM41.corporate.adroot.infra.ftgroup ([fe80::c845:f762:8997:ec86%19]) with mapi id 14.03.0319.002; Wed, 19 Apr 2017 20:45:35 +0200
From: <bruno.decraene@orange.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>, "John G. Scudder" <jgs@juniper.net>
CC: "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Technical Errata Reported] RFC4271 (5001)
Thread-Index: AQHSuTQcHT9js/KsJUeWRsw9RvAV8aHNDA4A///0uKA=
Date: Wed, 19 Apr 2017 18:45:34 +0000
Message-ID: <17818_1492627535_58F7B04F_17818_5514_1_53C29892C857584299CBF5D05346208A31CBDD15@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <20170419174042.7AA36B814E4@rfc-editor.org> <DCAC4E8F-A609-4DCB-BADB-23434A6F0EAC@cisco.com>
In-Reply-To: <DCAC4E8F-A609-4DCB-BADB-23434A6F0EAC@cisco.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.3]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/jDF2XMX9d3Yp2VLXV8uyKRyUOMo>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5001)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 18:45:50 -0000
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From nobody Wed Apr 19 11:47:00 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D93D129BF3 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 11:46:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CHI6pkG8_kbp for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 11:46:53 -0700 (PDT)
Received: from mail-wm0-x22b.google.com (mail-wm0-x22b.google.com [IPv6:2a00:1450:400c:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D42EF129C12 for <idr@ietf.org>; Wed, 19 Apr 2017 11:46:31 -0700 (PDT)
Received: by mail-wm0-x22b.google.com with SMTP id w64so87396344wma.0 for <idr@ietf.org>; Wed, 19 Apr 2017 11:46:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=xf9vmvsTI22Of+nusE2RxzqJdmD8ishJB0tXW+hhIiI=; b=NmGgEh734+2A0Xg6i6l3pJF1IU47rgzx4xMmlr5vGNACVHAmQq3/79iQDu5bQUet29 OTs67JLsQl49XjRwrZvCobSoyhnqtsZLQQBw9S0YNXoyiX0Q0TZtR8LgSJF7RzZn3KOk jOj7wbXr1V3HMK8Fv/mNFOLrKgoERMv1kd9KMv++peb6FjfeIim1UZ9MZmTAoUaqrSCV BHsl+0IZrXr/lYvI777uHIFEg18zzXhwLthAG/Np9KujB2BvFTuxECRDKUe436KKeK5F qUb/yd5KqKIXrdZRI5cGUqZEz5Wg6U3VZfY2GmFQIwzyfifV6GrBiBc89i66Hk8HihTx sclQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=xf9vmvsTI22Of+nusE2RxzqJdmD8ishJB0tXW+hhIiI=; b=IF0RtjUWxDBBK6N9uEuYVLDSLOi1Ltcq3qxPKwg758K0il7dWi5npsP46t+8V54XHF ZkFfx8w2VnOfokP5bCUSOmd7cQUTnszBByrvjPxtoKBc4w4EjiJnBmSEOsThoFoJPzLi luZer4aqHALkr/FwhHp83hQZ2JmSxBtnZsN/PaXtOG36Vq0DI9vPo/2jlhVweQtClHnD GXADZzOTbZwaCs7KxvC99ClCR68iAYXOLYT6BJ0dJEx9/wAy4KlNk4nqeJB0cdFcWqoj qE4BXDfCZB5IVD2OhRc8axAqUU+McybzmkZkwCZt3VQQr00AOgha9HgRSjEHeyr6qhyp fTww==
X-Gm-Message-State: AN3rC/7zDFHJT5HXfkjJgRBqQpA5CH7w/uTQNpGZ1qtDvn5oZlvy5hLc 71haM4wuMO6XsGpcUUy8WF8M+RsARQ==
X-Received: by 10.28.182.134 with SMTP id g128mr4230482wmf.22.1492627590343; Wed, 19 Apr 2017 11:46:30 -0700 (PDT)
MIME-Version: 1.0
References: <27BC3D10-48EA-4751-A70A-0753B0437F8F@cisco.com> <8FA9FC06-CA1C-4738-B15A-387E2A2CE275@juniper.net> <FD44B598-060A-406D-B2EC-1AFC177CA9F8@cisco.com> <A898C59C-E82D-4423-8BFA-08FDA24132CC@puck.nether.net> <9BF858F5-5FE3-4A48-96D5-E9852518FDBC@cisco.com>
In-Reply-To: <9BF858F5-5FE3-4A48-96D5-E9852518FDBC@cisco.com>
From: Job Snijders <job@instituut.net>
Date: Wed, 19 Apr 2017 18:46:18 +0000
Message-ID: <CACWOCC-JaHvSyztFo1jtw3bxSFfoMShhTx4KFegbaHbkL4LvuA@mail.gmail.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>, Jared Mauch <jared@puck.nether.net>
Cc: Chris Morrow <morrowc@ops-netman.net>,  "draft-ietf-grow-bgp-reject@ietf.org" <draft-ietf-grow-bgp-reject@ietf.org>, "grow@ietf.org" <grow@ietf.org>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114b0e004e1666054d8971ea
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/P4B5PpRLcC6HxGWHfeGZ-Jlo_A4>
Subject: Re: [Idr] [GROW]  Review of draft-ietf-grow-bgp-reject-05
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 18:46:54 -0000

--001a114b0e004e1666054d8971ea
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

We got it.

On Wed, 19 Apr 2017 at 20:45, Alvaro Retana (aretana) <aretana@cisco.com>
wrote:

> On 4/19/17, 10:03 AM, "Jared Mauch" <jared@puck.nether.net> wrote:
>
> Jared:
>
> > Are you saying that IOS-XR is non-compliant with 9.1.1 because it does
> not have =E2=80=9Cbgp
> > unsafe-ebgp-policy=E2=80=9D as the default?
>
> No.  I wasn=E2=80=99t talking about any specific implementation.
>
> One of the reasons I like your document is the fact that rfc4271 is not
> specific about what should be done if there is no policy =E2=80=93 it jus=
t says
> that policy may be applied.  From that point of view, the XR implementati=
on
> is neither compliant nor non-compliant.
>
>
> > At what point does the Cisco implementation make that decision?
> >
> > We seem to be triangulating on where in the exact decision process
> people are
> > considering a route feasible or ineligible, can you speak to your
> implementation?  That
> > may provide guidance in documenting the IOS-XR practice.
>
> The XR implementation makes the decision while processing the Update
> messages.  Specifically, it drops all the routes from a peer without an
> incoming policy configured.  IOW, it acts as if a deny-all filter existed=
.
>
> In the conceptual model in rfc4271, the routes are not even put in the
> Adj-RIB-In.
>
>
>
> Compared to the current text (in -05), there would be no routes to mark a=
s
> ineligible in 9.1.1.   The text I proposed also assumed that the routes
> would at least be received/stored.
>
> If you want the same behavior as XR then you would have to make the chang=
e
> in Section 9. (UPDATE Message Handling).
>
> Alvaro.
>
> _______________________________________________
> GROW mailing list
> GROW@ietf.org
> https://www.ietf.org/mailman/listinfo/grow
>

--001a114b0e004e1666054d8971ea
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div>We got it.=C2=A0</div><div><br><div class=3D"gmail_quote"><div>On Wed,=
 19 Apr 2017 at 20:45, Alvaro Retana (aretana) &lt;<a href=3D"mailto:aretan=
a@cisco.com">aretana@cisco.com</a>&gt; wrote:<br></div><blockquote class=3D=
"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding=
-left:1ex">On 4/19/17, 10:03 AM, &quot;Jared Mauch&quot; &lt;<a href=3D"mai=
lto:jared@puck.nether.net" target=3D"_blank">jared@puck.nether.net</a>&gt; =
wrote:<br>
<br>
Jared:<br>
<br>
&gt; Are you saying that IOS-XR is non-compliant with 9.1.1 because it does=
 not have =E2=80=9Cbgp<br>
&gt; unsafe-ebgp-policy=E2=80=9D as the default?<br>
<br>
No.=C2=A0 I wasn=E2=80=99t talking about any specific implementation.<br>
<br>
One of the reasons I like your document is the fact that rfc4271 is not spe=
cific about what should be done if there is no policy =E2=80=93 it just say=
s that policy may be applied.=C2=A0 From that point of view, the XR impleme=
ntation is neither compliant nor non-compliant.<br>
<br>
<br>
&gt; At what point does the Cisco implementation make that decision?<br>
&gt;<br>
&gt; We seem to be triangulating on where in the exact decision process peo=
ple are<br>
&gt; considering a route feasible or ineligible, can you speak to your impl=
ementation?=C2=A0 That<br>
&gt; may provide guidance in documenting the IOS-XR practice.<br>
<br>
The XR implementation makes the decision while processing the Update messag=
es.=C2=A0 Specifically, it drops all the routes from a peer without an inco=
ming policy configured.=C2=A0 IOW, it acts as if a deny-all filter existed.=
<br>
<br>
In the conceptual model in rfc4271, the routes are not even put in the Adj-=
RIB-In.<br>
<br>
<br>
<br>
Compared to the current text (in -05), there would be no routes to mark as =
ineligible in 9.1.1.=C2=A0 =C2=A0The text I proposed also assumed that the =
routes would at least be received/stored.<br>
<br>
If you want the same behavior as XR then you would have to make the change =
in Section 9. (UPDATE Message Handling).<br>
<br>
Alvaro.<br>
<br>
_______________________________________________<br>
GROW mailing list<br>
<a href=3D"mailto:GROW@ietf.org" target=3D"_blank">GROW@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/grow" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/listinfo/grow</a><br>
</blockquote></div></div>

--001a114b0e004e1666054d8971ea--


From nobody Wed Apr 19 12:32:26 2017
Return-Path: <acee@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 531C8128C83 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 12:32:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T3OqSoKhfBOC for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 12:32:21 -0700 (PDT)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6FFED1293DA for <idr@ietf.org>; Wed, 19 Apr 2017 12:32:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6188; q=dns/txt; s=iport; t=1492630339; x=1493839939; h=from:to:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=UPpJ2EuCMx3FYzUOxInh2dioBJJspsF1iqif5wI6EiE=; b=D6dQ13SBMzjP5gjdBmQb9RFmKjll3sXSye1B3NwtLTPobQ1Ned64MyHt EuXxHx19gjNCTuV8+1P2UJenAJCmPeO31gIBmmtjQ8rQjSBJnv9M/qG/C j0G91G8y5vutPXFN0vaOt/KlnNYiFjTlzjljtcGG4TyQgO931XADlxGjA 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AdAQDHuvdY/4UNJK1CGhkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNUYYELB4NgihWnRYIPIQuFeByDaj8YAQIBAQEBAQEBayiFFgY?= =?us-ascii?q?BASEROh0BCBoCJgIEJQsVEgQBEooZDjGqGYImiyMBAQEBAQEBAwEBAQEBAQEhg?= =?us-ascii?q?QuHJYIPgQqBPIFcgT+DBoJfBYkzEYgOi10BiXaJBYIAhTGKG5QQAR84FXBjFRo?= =?us-ascii?q?qhGYMEIFjdQETh0qBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800"; d="scan'208";a="234965814"
Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 19 Apr 2017 19:32:18 +0000
Received: from XCH-RTP-001.cisco.com (xch-rtp-001.cisco.com [64.101.220.141]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v3JJWIE6027958 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for <idr@ietf.org>; Wed, 19 Apr 2017 19:32:18 GMT
Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-001.cisco.com (64.101.220.141) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Apr 2017 15:32:17 -0400
Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Wed, 19 Apr 2017 15:32:17 -0400
From: "Acee Lindem (acee)" <acee@cisco.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] [Technical Errata Reported] RFC4271 (5000)
Thread-Index: AQHSuUOnFLbpf9gM10yNeUjw7zuw+Q==
Date: Wed, 19 Apr 2017 19:32:17 +0000
Message-ID: <D51D32F9.A965E%acee@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.116.152.197]
Content-Type: text/plain; charset="utf-8"
Content-ID: <F45ADCFD237AB04D9243F392AC4FF039@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/0mXbZNznT1way7NkyAl-QubaBH8>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 19:32:25 -0000

SGkgQWx2YXJvLCANCg0KSSB3b3VsZCB2b3RlIGZvciBKb2hu4oCZcyBzdWdnZXN0ZWQgb3B0aW9u
IGIuIEFzIEpvaG4gc3RhdGVkLCB0aGlzDQpkaXNhbWJpZ3VhdGVzIHRoZSBzdGF0ZW1lbnQgaW4g
dGhlIGNvbnRleHQgb2YgUkZDIDIxMTnigJlzIGRlZmluaXRpb24gb2YNCuKAnE1BWeKAnS4gRnJv
bSBhbiBpbXBsZW1lbnRhdGlvbiBzdGFuZHBvaW50LCBJIHdvdWxkIHNlZSBhbnkgb3RoZXINCmlu
dGVycHJldGF0aW9uIGFzIGEgYnVnLg0KDQpUaGFua3MsDQpBY2VlIA0KDQoNCg0KT24gNC8xOS8x
NywgMTo1NiBQTSwgIklkciBvbiBiZWhhbGYgb2YgQWx2YXJvIFJldGFuYSAoYXJldGFuYSkiDQo8
aWRyLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGFyZXRhbmFAY2lzY28uY29tPiB3cm90
ZToNCg0KPltDdXR0aW5nIHRoZSBkaXN0cmlidXRpb24gYSBsaXR0bGUuXQ0KPg0KPltKb2huOiB0
aGFua3MgZm9yIGZpbGluZyB0aGlzIHJlcG9ydC5dDQo+DQo+aWRyIFdHOg0KPg0KPkFzIHlvdSBr
bm93LCBjaGFuZ2VzIHRvIHJmYzQyNzEgc2hvdWxkIGJlIGhhbmRsZWQgd2l0aCBjYXJlLiAgQW5k
IHRoaXMNCj5jYXNlIGlzIG5vIGV4Y2VwdGlvbi4NCj4NCj5FdmVuIGlmIOKAnE1BWSBOT1TigJ0g
aXMgbm90IGFuIHJmYzIxMTkga2V5d29yZCBhcyDigJxNQVnigJ0sIOKAnE1VU1QgTk9U4oCdLCBh
bmQNCj5vdGhlcnMgYXJlLCBpdCBkb2VzbuKAmXQgZ2l2ZSBtZSBhIGdyZWF0IGZlZWxpbmcgdG8g
Y2hhbmdlIGl0IGZvciBvbmUgdGhhdA0KPmlzIOKAkyBhbW9uZyBvdGhlciB0aGluZ3MgYmVjYXVz
ZSB0aGUgbWVhbmluZyBvZiDigJxNQVnigJ0gYW5kIOKAnE1VU1TigJ0gaXMgc28NCj5kaWZmZXJl
bnQuICBPZiBjb3Vyc2UsIG1ha2luZyBtZSBmZWVsIGdvb2QgaXMgbm90IHRoZSBwdXJwb3NlIG9m
IHJmYzIxMTnigKYNCj47LSkNCj4NCj5IYXZpbmcgc2FpZCB0aGF0LCBpdCBpcyBpbXBvcnRhbnQg
dGhhdCByZmM0MjcxIGZhaXRoZnVsbHkgcmVwcmVzZW50IHdoYXQNCj50aGUgV0cgaW50ZW5kZWQu
ICBJbiB0aGlzIGNhc2UsIGV2ZW4gdGhvdWdoIEpvaG4gZGlkbuKAmXQgc2F5IGl0DQo+ZXhwbGlj
aXRseSwgSSB3b3VsZCBhZ3JlZSB3aXRoIGhpbSBpbiBjb25zaWRlcmluZyB0aGF0IGltcGxlbWVu
dGVycyBtYXkNCj5oYXZlIGFscmVhZHkgaW50ZXJwcmV0ZWQgdGhlIHRleHQgd2l0aCB0aGUgaW50
ZW50IHRvIG5vdCB1c2UgdGhlIHJvdXRlcw0KPmZ1cnRoZXIuDQo+DQo+SSB3b3VsZCBsaWtlIHRv
IGdldCBpbnB1dCBmcm9tIHRoZSBXRyBhcyB0byB0aGUgYmVzdCB3YXkgdG8gaGFuZGxlIHRoaXMN
Cj5yZXBvcnQuICBJIHdvdWxkIHNwZWNpYWxseSBsaWtlIHRvIGhlYXIgZnJvbSBpbXBsZW1lbnRl
cnMsIGJ1dCBhbGwgaW5wdXQNCj5pcyB3ZWxjb21lLg0KPg0KPlRoZSBvcHRpb25zIGFyZToNCj4N
Cj5hLiBzL01BWSBOT1QvbWF5IG5vdA0KPmIuIHMvTUFZIE5PVC9NVVNUIE5PVA0KPmMuIFJlamVj
dGluZyB0aGUgcmVwb3J0Lg0KPmQuIFNvbWV0aGluZyBlbHNl4oCmDQo+DQo+SSB3aWxsIHdhaXQg
YXQgbGVhc3QgYSB3ZWVrIGJlZm9yZSBwcm9jZWVkaW5nLg0KPg0KPlRoYW5rcyENCj4NCj5BbHZh
cm8uDQo+DQo+DQo+DQo+T24gNC8xOS8xNywgMTozNyBQTSwgIlJGQyBFcnJhdGEgU3lzdGVtIiA8
cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZz4NCj53cm90ZToNCj4NCj5UaGUgZm9sbG93aW5nIGVy
cmF0YSByZXBvcnQgaGFzIGJlZW4gc3VibWl0dGVkIGZvciBSRkM0MjcxLA0KPiJBIEJvcmRlciBH
YXRld2F5IFByb3RvY29sIDQgKEJHUC00KSIuDQo+DQo+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0NCj5Zb3UgbWF5IHJldmlldyB0aGUgcmVwb3J0IGJlbG93IGFuZCBhdDoN
Cj5odHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2VycmF0YV9zZWFyY2gucGhwP3JmYz00MjcxJmVp
ZD01MDAwDQo+DQo+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj5UeXBl
OiBUZWNobmljYWwNCj5SZXBvcnRlZCBieTogSm9obiBTY3VkZGVyIDxqZ3NAanVuaXBlci5uZXQ+
DQo+DQo+U2VjdGlvbjogOS4xLjENCj4NCj5PcmlnaW5hbCBUZXh0DQo+LS0tLS0tLS0tLS0tLQ0K
PiAgICAgIElmIHRoZSByb3V0ZSBpcyBsZWFybmVkIGZyb20gYW4gZXh0ZXJuYWwgcGVlciwgdGhl
biB0aGUgbG9jYWwgQkdQDQo+ICAgICAgc3BlYWtlciBjb21wdXRlcyB0aGUgZGVncmVlIG9mIHBy
ZWZlcmVuY2UgYmFzZWQgb24gcHJlY29uZmlndXJlZA0KPiAgICAgIHBvbGljeSBpbmZvcm1hdGlv
bi4gIElmIHRoZSByZXR1cm4gdmFsdWUgaW5kaWNhdGVzIHRoZSByb3V0ZSBpcw0KPiAgICAgIGlu
ZWxpZ2libGUsIHRoZSByb3V0ZSBNQVkgTk9UIHNlcnZlIGFzIGFuIGlucHV0IHRvIHRoZSBuZXh0
IHBoYXNlDQo+ICAgICAgb2Ygcm91dGUgc2VsZWN0aW9uOyBvdGhlcndpc2UsIHRoZSByZXR1cm4g
dmFsdWUgTVVTVCBiZSB1c2VkIGFzDQo+ICAgICAgdGhlIExPQ0FMX1BSRUYgdmFsdWUgaW4gYW55
IElCR1AgcmVhZHZlcnRpc2VtZW50Lg0KPg0KPg0KPkNvcnJlY3RlZCBUZXh0DQo+LS0tLS0tLS0t
LS0tLS0NCj4gICAgICBJZiB0aGUgcm91dGUgaXMgbGVhcm5lZCBmcm9tIGFuIGV4dGVybmFsIHBl
ZXIsIHRoZW4gdGhlIGxvY2FsIEJHUA0KPiAgICAgIHNwZWFrZXIgY29tcHV0ZXMgdGhlIGRlZ3Jl
ZSBvZiBwcmVmZXJlbmNlIGJhc2VkIG9uIHByZWNvbmZpZ3VyZWQNCj4gICAgICBwb2xpY3kgaW5m
b3JtYXRpb24uICBJZiB0aGUgcmV0dXJuIHZhbHVlIGluZGljYXRlcyB0aGUgcm91dGUgaXMNCj4g
ICAgICBpbmVsaWdpYmxlLCB0aGUgcm91dGUgTVVTVCBOT1Qgc2VydmUgYXMgYW4gaW5wdXQgdG8g
dGhlIG5leHQgcGhhc2UNCj4gICAgICBvZiByb3V0ZSBzZWxlY3Rpb247IG90aGVyd2lzZSwgdGhl
IHJldHVybiB2YWx1ZSBNVVNUIGJlIHVzZWQgYXMNCj4gICAgICB0aGUgTE9DQUxfUFJFRiB2YWx1
ZSBpbiBhbnkgSUJHUCByZWFkdmVydGlzZW1lbnQuDQo+DQo+DQo+Tm90ZXMNCj4tLS0tLQ0KPlRo
ZSBvcmlnaW5hbCB0ZXh0IHVzZXMgIk1BWSBOT1QiIGNhcGl0YWxpemVkIGFzIGlmIGl0IHdlcmUg
YW4gUkZDIDIxMTkNCj5rZXl3b3JkLiBIb3dldmVyLCBSRkMgMjExOSBkb2VzIG5vdCBoYXZlIGFu
eSBkZWZpbmVkIG1lYW5pbmcgZm9yICJNQVkNCj5OT1QiLiBJZiBhIHJlYWRlciB3ZXJlIHRvIGlu
dGVycHJldCB0aGlzIHRleHQgYXMgc3VnZ2VzdGluZyBpdCBpcw0KPm9wdGlvbmFsIC0tIG1lYW5p
bmcsIGluIGVmZmVjdCwgInRoZSByb3V0ZSBNQVkgc2VydmUgYXMgYW4gaW5wdXQgdG8gdGhlDQo+
bmV4dCBwaGFzZSBvZiByb3V0ZSBzZWxlY3Rpb24iIC0tIHRoYXQgd291bGQgYmUgd3JvbmcgYW5k
IHBvdGVudGlhbGx5DQo+cHJvYmxlbWF0aWMuDQo+DQo+VGhlIG1pbmltYWwgY29ycmVjdGlvbiB3
b3VsZCBiZSB0byB1c2UgbG93ZXItY2FzZSAibWF5IG5vdCIsIHdoaWNoIG1ha2VzDQo+dGhlIHBy
b3BlciBtZWFuaW5nIHJlYXNvbmFibHkgY2xlYXIuIEhvd2V2ZXIsIHRoZSBFbmdsaXNoIGNvbnN0
cnVjdCAibWF5DQo+bm90IiBpcyBub3RvcmlvdXNseSBhbWJpZ3VvdXMsIHRoZXJlZm9yZSB0aGUg
cHJvcG9zZWQgY29ycmVjdGlvbiBpcyAiTVVTVA0KPk5PVCIuDQo+DQo+SW5zdHJ1Y3Rpb25zOg0K
Pi0tLS0tLS0tLS0tLS0NCj5UaGlzIGVycmF0dW0gaXMgY3VycmVudGx5IHBvc3RlZCBhcyAiUmVw
b3J0ZWQiLiBJZiBuZWNlc3NhcnksIHBsZWFzZQ0KPnVzZSAiUmVwbHkgQWxsIiB0byBkaXNjdXNz
IHdoZXRoZXIgaXQgc2hvdWxkIGJlIHZlcmlmaWVkIG9yDQo+cmVqZWN0ZWQuIFdoZW4gYSBkZWNp
c2lvbiBpcyByZWFjaGVkLCB0aGUgdmVyaWZ5aW5nIHBhcnR5DQo+Y2FuIGxvZyBpbiB0byBjaGFu
Z2UgdGhlIHN0YXR1cyBhbmQgZWRpdCB0aGUgcmVwb3J0LCBpZiBuZWNlc3NhcnkuDQo+DQo+LS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj5SRkM0MjcxIChkcmFmdC1pZXRm
LWlkci1iZ3A0LTI2KQ0KPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+
VGl0bGUgICAgICAgICAgICAgICA6IEEgQm9yZGVyIEdhdGV3YXkgUHJvdG9jb2wgNCAoQkdQLTQp
DQo+UHVibGljYXRpb24gRGF0ZSAgICA6IEphbnVhcnkgMjAwNg0KPkF1dGhvcihzKSAgICAgICAg
ICAgOiBZLiBSZWtodGVyLCBFZC4sIFQuIExpLCBFZC4sIFMuIEhhcmVzLCBFZC4NCj5DYXRlZ29y
eSAgICAgICAgICAgIDogRFJBRlQgU1RBTkRBUkQNCj5Tb3VyY2UgICAgICAgICAgICAgIDogSW50
ZXItRG9tYWluIFJvdXRpbmcNCj5BcmVhICAgICAgICAgICAgICAgIDogUm91dGluZw0KPlN0cmVh
bSAgICAgICAgICAgICAgOiBJRVRGDQo+VmVyaWZ5aW5nIFBhcnR5ICAgICA6IElFU0cNCj4NCj4N
Cj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPklkciBt
YWlsaW5nIGxpc3QNCj5JZHJAaWV0Zi5vcmcNCj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu
L2xpc3RpbmZvL2lkcg0KDQo=


From nobody Wed Apr 19 12:43:19 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 097A41286B2 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 12:43:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.619
X-Spam-Level: 
X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EtVD3OeXvzMs for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 12:43:16 -0700 (PDT)
Received: from relais-inet.orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B325E129ACD for <idr@ietf.org>; Wed, 19 Apr 2017 12:43:15 -0700 (PDT)
Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 5CB611002BC; Wed, 19 Apr 2017 21:43:14 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.27]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 3FDA44006A; Wed, 19 Apr 2017 21:43:14 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM7C.corporate.adroot.infra.ftgroup ([fe80::8007:17b:c3b4:d68b%19]) with mapi id 14.03.0319.002; Wed, 19 Apr 2017 21:43:14 +0200
From: <bruno.decraene@orange.com>
To: "Acee Lindem (acee)" <acee@cisco.com>, "Alvaro Retana (aretana)" <aretana@cisco.com>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] [Technical Errata Reported] RFC4271 (5000)
Thread-Index: AQHSuUOnFLbpf9gM10yNeUjw7zuw+aHNF0PQ
Date: Wed, 19 Apr 2017 19:43:13 +0000
Message-ID: <28818_1492630994_58F7BDD2_28818_9437_1_53C29892C857584299CBF5D05346208A31CBDFEE@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D51D32F9.A965E%acee@cisco.com>
In-Reply-To: <D51D32F9.A965E%acee@cisco.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.3]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Zt2M93UpHiT6UtYyVoc0V-kfEx8>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 19:43:18 -0000
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=


From nobody Wed Apr 19 12:54:40 2017
Return-Path: <acee@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FFF1128C83; Wed, 19 Apr 2017 12:54:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id piAhVzrmYj9A; Wed, 19 Apr 2017 12:54:32 -0700 (PDT)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C43C0126CF9; Wed, 19 Apr 2017 12:54:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2062; q=dns/txt; s=iport; t=1492631672; x=1493841272; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=Eh18pn4A8GTnM5yZR5kL1CgpPUfTjX1EndHXxNZtxxY=; b=A94gniVdaJufF8jns13UEwX5dajYX8egzvd2ZA9CCFPTUKu5YCYo8r50 5FYB1Z74eMHfLrmnwBKWWew1VIRFFPZ+JkOZCv+vRleCi6BotiEZZOXmk NLjBpwxnyt28JhuBzNT5Pnq1QEXZFIeFT4PaJ/BKrraefjhYfb9ojCILV o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AdAQBXv/dY/4cNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1RhgQsHg2CKFadFgg8hC4V4AhqDaj8YAQIBAQEBAQEBayiFFgI?= =?us-ascii?q?BAwEBIRE3AwsOAgIBCBoCJgICAhkMCxUQAgQBDQWKGQ6qRIImiyMBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEYBQWBBoclgxmEKREBHBeCb4JfBZ0vAZJ7ggCFMYoblBA?= =?us-ascii?q?BHzh9CGMVRIZldYY9gSGBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800"; d="scan'208";a="224581688"
Received: from alln-core-2.cisco.com ([173.36.13.135]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 19 Apr 2017 19:54:30 +0000
Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v3JJsUYD011453 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 19 Apr 2017 19:54:30 GMT
Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Apr 2017 15:54:30 -0400
Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Wed, 19 Apr 2017 15:54:29 -0400
From: "Acee Lindem (acee)" <acee@cisco.com>
To: Loa Andersson <loa@pi.nu>, "mpls@ietf.org" <mpls@ietf.org>, "idr@ietf.org" <idr@ietf.org>, BESS <bess@ietf.org>
CC: "<rtg-ads@ietf.org>" <rtg-ads@ietf.org>, "idr-chairs@ietf.org" <idr-chairs@ietf.org>, "bess-chairs@ietf.org" <bess-chairs@ietf.org>, "mpls-chairs@ietf.org" <mpls-chairs@ietf.org>, "draft-ietf-mpls-rfc3107bis@ietf.org" <draft-ietf-mpls-rfc3107bis@ietf.org>
Thread-Topic: [bess] Working Group Last Call on draft-ietf-mpls-rfc3107bis
Thread-Index: AQHSrT+0pZ+pKED8tkaO8CVLK3IlrKHNMv8A
Date: Wed, 19 Apr 2017 19:54:29 +0000
Message-ID: <D51D37A5.A9694%acee@cisco.com>
References: <93a6a754-0a2e-2053-542c-a4ce8bf9213b@pi.nu>
In-Reply-To: <93a6a754-0a2e-2053-542c-a4ce8bf9213b@pi.nu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.116.152.197]
Content-Type: text/plain; charset="utf-8"
Content-ID: <06BBB64166965B469585A7202AC419F8@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/EajQ_KHP1NlkzSb-3wfCDDun-7M>
Subject: Re: [Idr] [bess] Working Group Last Call on draft-ietf-mpls-rfc3107bis
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 19:54:33 -0000

SGkgTG9hLCBldCBhbCwgDQoNCkkgc3VwcG9ydCBwdWJsaWNhdGlvbiBvZiB0aGlzIGRyYWZ0IGFz
IGEgc3RhbmRhcmRzIHRyYWNrIGRvY3VtZW50LiBJdCBpcw0Kd2VsbC13cml0dGVuIGFuZCBoYW5k
bGVzIHByZXZpb3VzbHkgdW5zcGVjaWZpZWQgZGV0YWlscyBvZiBzaW5nbGUgYW5kDQptdWx0aXBs
ZSBsYWJlbCBCR1AgYWR2ZXJ0aXNlbWVudC4NCg0KVGhhbmtzLA0KQWNlZSANCg0KT24gNC80LzE3
LCA4OjMzIEFNLCAiQkVTUyBvbiBiZWhhbGYgb2YgTG9hIEFuZGVyc3NvbiINCjxiZXNzLWJvdW5j
ZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGxvYUBwaS5udT4gd3JvdGU6DQoNCj5Xb3JraW5nIEdy
b3VwcywNCj4NCj5UaGlzIGlzIHRvIGluaXRpYXRlIGEgdHdvIHdlZWsgd29ya2luZyBncm91cCBs
YXN0IGNhbGwgaW4gZm91ciB3b3JraW5nDQo+Z3JvdXBzIG9uIGRyYWZ0LWlldGYtbXBscy1yZmMz
MTA3YmlzLTAxLg0KPg0KPkFjY29yZGluZyB0byBhZ3JlZW1lbnQgd2hlbiB3ZSBkZWNpZGVkIHRv
IGhvc3QgdGhpcyBkb2N1bWVudCBpbiB0aGUNCj5NUExTIHdvcmtpbmcgZ3JvdXAsIHRoaXMgbGFz
dCBjYWxsIGlzIGFsc28gY29waWVkIHRvIHRoZSBJRFIgYW5kIEJFU1MNCj53b3JraW5nIGdyb3Vw
cy4NCj4NCj5QbGVhc2Ugc2VuZCB5b3VyIGNvbW1lbnRzIHRvIHRoZSBtcGxzIHdnIG1haWxpbmcg
bGlzdCAobXBsc0BpZXRmLm9yZyksDQo+aWYgeW91IGFyZSBub3Qgc3Vic2NyaWJlZCB0byB0aGUg
bXBscyB3ZyBsaXN0LCBzZW5kIHRvICJ5b3VyIG93biINCj53b3JraW5nIGdyb3VwIG1haWxpbmcg
bGlzdCwgYW5kIHdlJ2xsIG1ha2Ugc3VyZSB0aGV5IGFyZSBwb3N0ZWQgdG8gdGhlDQo+TVBMUyB3
ZyBsaXN0Lg0KPg0KPlRoZXJlIGFyZSBubyBJUFIgZGlzY2xvc3VyZXMgYWdhaW5zdCB0aGlzIGRv
Y3VtZW50Lg0KPg0KPkFsbCB0aGUgYXV0aG9ycyBhbmQgY29udHJpYnV0b3JzIGhhdmUgc3RhdGVk
IG9uIHRoZSB3b3JraW5nIGdyb3VwDQo+bWFpbGluZyBsaXN0IHRoYXQgdGhleSBhcmUgbm90IGF3
YXJlIG9mIGFueSBvdGhlciBJUFJzIHRoYXQgcmVsYXRlcw0KPnRvIHRoaXMgZG9jdW1lbnQuDQo+
DQo+VGhpcyB3b3JraW5nIGdyb3VwIGxhc3QgY2FsbCBlbmRzIEFwcmlsIDIwLCAyMDE3Lg0KPg0K
Pg0KPi9Mb2ENCj5NUExTIHdnIGNvLWNoYWlycw0KPi0tIA0KPg0KPg0KPkxvYSBBbmRlcnNzb24g
ICAgICAgICAgICAgICAgICAgICAgICBlbWFpbDogbG9hQG1haWwwMS5odWF3ZWkuY29tDQo+U2Vu
aW9yIE1QTFMgRXhwZXJ0ICAgICAgICAgICAgICAgICAgICAgICAgICBsb2FAcGkubnUNCj5IdWF3
ZWkgVGVjaG5vbG9naWVzIChjb25zdWx0YW50KSAgICAgcGhvbmU6ICs0NiA3MzkgODEgMjEgNjQN
Cj4NCj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPkJF
U1MgbWFpbGluZyBsaXN0DQo+QkVTU0BpZXRmLm9yZw0KPmh0dHBzOi8vd3d3LmlldGYub3JnL21h
aWxtYW4vbGlzdGluZm8vYmVzcw0KDQo=


From nobody Wed Apr 19 13:21:27 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5185129AD8 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 13:21:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hwjREMjfZ5Wj for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 13:21:24 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0135.outbound.protection.outlook.com [104.47.42.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 82108129C4B for <idr@ietf.org>; Wed, 19 Apr 2017 13:21:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=W3/B8Q/jj0TvNKnNTmiyHgtgCxdkkATGvqcjjDpgrbM=; b=N0c3FMkQjoZw7PM8qqwl66MheaKbfbCGzQrSHxY8jJVoovt4yPDdJ0+7t9BBOoGFqG0y/DYT02atXfJ5A3E/OAOgtvlvRPHaqFH3Mm8b73uHIy1GiINseqEseI0UOCn/fYXCen1O58P/yBFxV/g3Z9eVJHLsioVfKF5KxKLxhig=
Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.33.8] (66.129.241.12) by CY1PR05MB2506.namprd05.prod.outlook.com (10.167.10.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Wed, 19 Apr 2017 20:21:22 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <2D8915A9-0753-44FA-842D-2EA4B5541C2B@juniper.net>
Date: Wed, 19 Apr 2017 16:21:18 -0400
Content-Transfer-Encoding: quoted-printable
Message-ID: <1C3E81BC-375B-4754-B14D-849513F05D40@juniper.net>
References: <2D8915A9-0753-44FA-842D-2EA4B5541C2B@juniper.net>
To: <idr@ietf.org>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR13CA0037.namprd13.prod.outlook.com (10.171.172.23) To CY1PR05MB2506.namprd05.prod.outlook.com (10.167.10.27)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 4a45fc07-162e-4fff-496e-08d48761a59e
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:CY1PR05MB2506; 
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 3:4D5YdHWdQttOobkUnoAGsoKXD1ZZRVnUSf2i5Di1jpHG/CEca7oCfVwMBcIXGJTz9SnfsLzpXNRcIaFGbVGA7ZveWtrGC7kwUwOvGeE4BoOPgqx1Hi6ZylFM4FC7OKssl+u4Doc2auToUllAaQw8aaLEfLNkff/RqUtBClsihGXav0VBIIVb0l4od+I760GRaIAf1bpFiKbC4ifP7enac+R7p4LsDrYDBwK8Glsv4Uvcv9fTFjfc9LqESIWScRZr1fc1OG0S15Zz5j0ojtiWqjgjnBeI+ZV59HEQ6dYW3Gt+rFS9gcrQBdx6aVvvE2CkBDWRLS2HPd8Y+jKFs+YViPQLF2f3r+wQG9xbwHuJXHc=; 25:wgu+/hMsc6dkRZ2Zc9CZTLHf3DRp7Og3OHi7OdJeB/boX3DesUWs47+SFObB5HQLOjvEIIxcgDcXNG7zMMzXyz7BGEXzcOr80ZupWZA2SL/K2S7LUfoK5FURICRqQpKCTDJWHTXdcCxfnp9VZbt5egkPwRsIsQLz2cy2AAhUjvUfPLDkVi2zwRAUeT7WC+cTjaHWZ8nGWjBtayn0xiS/Resh0ohaekohBiEhqme3QJLk/xP99Rj1KDTD7dFeUSsHWhyYm60HKDRTEi631ZzWgt6cCuJzgcSeKCRXocUiq6eUHBWmmLoZfKaQc12RgxdX/91I+BYvElkMuCbf8iOgQDMdROaqo5znsHjH+B4cmknNMyPAeAMxXHWAdX5+9nZW4T4YVURerTlmfYZhb3YCHaqAwX7qQhkQro6SuJ0vi157i728NmzKsjWsSxmNy5XKKz5qv/37I0UiDB0jW8ZWDy8ukTG9S3J2sAIUUbAjngE=
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 31:grj8C3VPPJKqGwwNOe4Jic0GQKT2qW0P4JTWJm2SM1DpkPWCBVI6O+qlCQztTY8pUCALjyMB0TBETM6TuCTFt2YOJMSn49XQiRorLkRg+UjfpKyyTpE+uF+ZMXSZi8z90edEEbdVRlSTj964/O4EyALcV85sfdbL/U2ruiqCR2JxgULSoOJXQrnYTfvtNJ0X9DYvfmiWWnpkOGlcKCyKX3pTocMEFWk4Hx+OkPOGMfzcztlnA01jvGINSkScNlNs9qQvUCTncwBpUIiyX/lzx7NqEouKWjlv98emlOZ7G/c=; 20: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
X-Microsoft-Antispam-PRVS: <CY1PR05MB2506561B3C4A15F0555C388BAA180@CY1PR05MB2506.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(120809045254105)(138986009662008);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(93006095)(93001095)(6055026)(6041248)(20161123560025)(20161123562025)(20161123555025)(20161123564025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(6072148); SRVR:CY1PR05MB2506; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2506; 
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 4: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
X-Forefront-PRVS: 028256169F
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(39850400002)(39400400002)(39840400002)(39410400002)(39450400003)(39860400002)(24454002)(377454003)(53936002)(7736002)(97756001)(46406003)(189998001)(8746002)(305945005)(6306002)(50226002)(81166006)(8676002)(90366009)(33656002)(86362001)(42186005)(229853002)(6486002)(36756003)(77096006)(50466002)(2950100002)(83716003)(6916009)(82746002)(6666003)(47776003)(2351001)(38730400002)(5660300001)(57306001)(50986999)(6116002)(76176999)(2906002)(110136004)(66066001)(23726003)(3846002)(6246003)(25786009)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2506; H:[172.29.33.8]; FPR:; SPF:None;  MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; CY1PR05MB2506; 23:tZCcD0iVSO3CRC0SG/Rnqe6PXQS3+P2+be5vaGdjv?= =?us-ascii?Q?MIk2MLVdzXEV9joXHJYnkHWtz2Je5p1mxpTsMJjYQFDM5F4bgaVsoWz29vjq?= =?us-ascii?Q?VdQKaMcBEIuBDTNSWQ1qpzJKXwHXzQpqSu2yYdGPfiv9WqRT2tWlRD87VWgZ?= =?us-ascii?Q?RQbPNNXQoqt3RHOjYoyT4zk4KOnfYkqQI7/z4trfRYTCu4eq8GYOKfN3goZl?= =?us-ascii?Q?aUAMy79AymhL6rxniv5bdxxQ91cpvsMiC5GETrKqdcFPkaqBJisMuf/gXYeI?= =?us-ascii?Q?HJBnUyyL3/tgP29QJlaYbxYIy7DBnvXjKiamS00ftG59vnPD7lI5/8GoTT4h?= =?us-ascii?Q?EgRoiPr3Xl3Vy3c9Ie9JVUGMqe5U8q/nk5Emi4ex4Q1es+dSQSxeBbIvxxYC?= =?us-ascii?Q?v7Kx8Ne/urWrYpl/EvbGQTOpOcKgMiK4juZVFR5GqcxbfqmxuEHJ8p2ayBTt?= =?us-ascii?Q?YC3qlGc9R5El5TBl2c84jsB09rI7K+0bO5CHVsqN1TuHQ0c4qZRNxS14hqMX?= =?us-ascii?Q?Q7WpVGaoCStnHYae7tZucC0xmY2p8qBvs2e0hNtVAyqCBmtb0lpTUerztIRg?= =?us-ascii?Q?ABfIOnBfqS4CA1BxvlzogzbbKu/ZorLx3CgI2PGPK7SyhOS0JUXqM/fU8Tf+?= =?us-ascii?Q?2+2OxVn/1K2SHDUNwBFKQGHN4UM5Jm9Ke6HVo1DFcGuSatweh70F7vztU8hU?= =?us-ascii?Q?ktPFRjxrnh5ydDHsW3Tnktm+Fn3WRO67IeGB6DmGyQz1Qg7nRVFSxwJFZMgN?= =?us-ascii?Q?I01MpkFOZ8MMnYuK9WoRZ+OObwLs9/Z3SXlpRNW4TBIK+OUrqJjIeHrBrIkx?= =?us-ascii?Q?b0D+R9bV+hwOcGybNwFqpyd78aAWbB2dyb8FyzuLfmmjyN7TTpJ7INuNKMz7?= =?us-ascii?Q?ryIDsZCg5MMGHiA9NennCucsjqBtLEOqT0XmXeT8wd4Sqkag3WPb7bKngSom?= =?us-ascii?Q?Hom330TWRe4l97YwvSDWDePwiuut+CkFLTR4KEwvG+v+1B3lsbO4ief1gfPd?= =?us-ascii?Q?sErz99Q7PnMJhY7CUWXXMsk1RgEjLbBLgZ1gru5OB3ZOEbhg4En7bl0g2obF?= =?us-ascii?Q?1xGtfkUMTQic+ppBYQMDbMczs1R8DsHfn5s5xtS8yir6St0M66ywF2GW6I5f?= =?us-ascii?Q?t3wNf2whLB6zl46/OjoPRg4ed82qGvi8rUDFcXpmZJ96oxqzJBKfh3SQ/PUw?= =?us-ascii?Q?1ATIbRPntyPX2E/JxAFanAHa6aU6ilZ6RoXnt8xORz1FkL6VaKK2Ry0p84dm?= =?us-ascii?Q?EHH5qjz++68ulc1Dm9WnJdAKpzWLM+K4u9JDuun?=
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 6: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; 5:QE75HvVKhyZhKtWMl/3+qwq4toTpXSMgRUovlcmNbVKyNkpBQVGovjHYAmdXcPFMpZAtPmnBeTEck6qfxZ9gczBbgzG0W0VPRahQXGLHdKRIQ2OajhsCz4s496gqukHUlyPcvF5ItKdSlqrhKNPP3A==; 24:6lCwsItfivyCUT6YmpHBQkjkgq88S7ztkrEt4qUEt5zoBCNPjBF7baun4lBlgjAR3uTXLx050Nllugegt+wFiE9qTdrZf5S4DIjfP7gjkzg=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 7:dhuYQduPE3Fqg26Zr3/NASD6y5sEweLMnuimw6fTYFpMBofDtYTh/Xm5ks0FEMP00Z5p6UYnryXEZULn8dTrlOBtzLm/D+fVPzXsv5S14djlV+veRAoVfA3I1GaDYZw9PDDB6OMhexxi6rnnBW33OCsc/3rLNVhGr/bhL0CZAwYv8optRVPci5Tep4yCxatRTNHOZ0xtuORsVfhZDd+WP5b7sC32gadAKphKAg5/MyfIFYKhlr2whxj7Asm0dSHFs+ysub7Xewd4tvEn1hfNAMslFHeO/Ogc3luFw79QMOj7k9dZ0xtDdFcMsPkGwX+9roZ6Uvk9FNL67x416+jvjA==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Apr 2017 20:21:22.2731 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2506
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/LfvVxNemj4uEJUcbVfIMIEkfhyY>
Subject: Re: [Idr] IETF-98 IDR minutes posted
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 20:21:26 -0000

On Apr 19, 2017, at 2:35 PM, John G. Scudder <jgs@juniper.net> wrote:
>=20
> Minutes from our Chicago meeting are posted: =
https://datatracker.ietf.org/doc/minutes-98-idr/
>=20
> The server-side tools seem to have "helped" by rewrapping the lines =
and made a complete botch of it, sorry. I'll fix it presently.

The minutes have been de-uglified.=20

--John=


From nobody Wed Apr 19 13:43:45 2017
Return-Path: <keyur@arrcus.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 898A012D0C3 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 13:43:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=netorgft1331857.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uvLHg_7ojIMF for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 13:43:42 -0700 (PDT)
Received: from dispatch1-us1.ppe-hosted.com (dispatch1-us1.ppe-hosted.com [67.231.154.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 67135129C73 for <idr@ietf.org>; Wed, 19 Apr 2017 13:43:42 -0700 (PDT)
Received: from pure.maildistiller.com (unknown [10.110.50.29]) by dispatch1-us1.ppe-hosted.com (Proofpoint Essentials ESMTP Server) with ESMTP id C263F8009A; Wed, 19 Apr 2017 20:43:39 +0000 (UTC)
X-Virus-Scanned: Proofpoint Essentials engine
Received: from mx5-us1.ppe-hosted.com (unknown [10.110.49.251]) by pure.maildistiller.com (Proofpoint Essentials ESMTP Server) with ESMTPS id 792F560051; Wed, 19 Apr 2017 20:43:39 +0000 (UTC)
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01lp0119.outbound.protection.outlook.com [207.46.163.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mx5-us1.ppe-hosted.com (Proofpoint Essentials ESMTP Server) with ESMTPS id 26763600094; Wed, 19 Apr 2017 20:43:35 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=NETORGFT1331857.onmicrosoft.com; s=selector1-arrcus-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=M6Ng+pgzybfErSobqpGz3M9tyt9aCUFnQ6jXCsCWGb0=; b=ZmTCE9RoVi2UpYTSVWdK2I5g66cxQ1vbMlIViipLM5Qakme7k+ZGS2icEEBP4c9+3X0bkkAQO2P/oCsm/1uySsxQhqLnbXUai0CFOEzG53yGCVASVZHdTg3g0jpVwoQOrLfDKQOanBF8z8Hd02kf+wp/x9055E0jbYqeGu7lTI8=
Received: from BY2PR18MB0262.namprd18.prod.outlook.com (10.163.72.152) by BY2PR18MB0263.namprd18.prod.outlook.com (10.163.72.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10; Wed, 19 Apr 2017 20:43:33 +0000
Received: from BY2PR18MB0262.namprd18.prod.outlook.com ([10.163.72.152]) by BY2PR18MB0262.namprd18.prod.outlook.com ([10.163.72.152]) with mapi id 15.01.1034.018; Wed, 19 Apr 2017 20:43:33 +0000
From: Keyur Patel <keyur@arrcus.com>
To: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>
CC: Hares Susan <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuSz+QxMnaaMdpE6dWAZuvCqOqKHMs4OA
Date: Wed, 19 Apr 2017 20:43:33 +0000
Message-ID: <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net>
In-Reply-To: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=arrcus.com;
x-originating-ip: [96.68.143.133]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BY2PR18MB0263; 7:mWc1uI7R2NboellcKuQMgb1MJXSlKM+GEX2/oXqThlCsgdrznnLStgGXyCPXBW9p2qFpdl+bvZNyL8okVILi2UFhYk7l3hjTECpABWs8oX4uyHwtM8EftLO/MM0X/ZQQbjnRO/fYY09IYqQRoMpEfI2PEewIfkxUTxh2PGfRpERkGEqV42evx/c5mC1QiKCBLsAF2YSz7PazpXHvSmAiObJ3wo2bJSHSB2iLfcDzMP0HIt7oZjRfCh8BjUJ9+xrdLiSbXnJ2N0/dQfnBTghspOIijgD2GSEyhPKdy7pqBVRvsNvcfgNQVB6ReYaXjaaV8Rej7caspmGBrHihWClv7Q==
x-ms-office365-filtering-correlation-id: 65b85065-5607-4a07-f914-08d48764beb2
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(201703131423075); SRVR:BY2PR18MB0263; 
x-microsoft-antispam-prvs: <BY2PR18MB0263C96A7049FAA59C132AB8C1180@BY2PR18MB0263.namprd18.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(120809045254105)(138986009662008);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(3002001)(10201501046)(6041248)(201703131423075)(201702281528075)(201703061421075)(20161123562025)(20161123560025)(2016111802025)(20161123555025)(20161123564025)(6072148)(6043046); SRVR:BY2PR18MB0263; BCL:0; PCL:0; RULEID:; SRVR:BY2PR18MB0263; 
x-forefront-prvs: 028256169F
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(39830400002)(39400400002)(39410400002)(39450400003)(377454003)(24454002)(377424004)(33656002)(122556002)(83716003)(2906002)(86362001)(5660300001)(345774005)(53936002)(7736002)(305945005)(229853002)(25786009)(4326008)(6246003)(6116002)(82746002)(102836003)(3846002)(53546009)(81166006)(50986999)(54356999)(76176999)(8936002)(8676002)(2900100001)(189998001)(66066001)(6512007)(6486002)(77096006)(6506006)(2950100002)(2501003)(8666007)(99286003)(3660700001)(38730400002)(6306002)(6436002)(3280700002)(36756003)(24704002); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR18MB0263; H:BY2PR18MB0262.namprd18.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <4F368CDE8CCB6644B9909FE5599F1AB6@namprd18.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: arrcus.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Apr 2017 20:43:33.0270 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 697b3529-5c2b-40cf-a019-193eb78f6820
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR18MB0263
X-MDID: 1492634619-Zsh5X3IBnxvi
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/9Ig0aDsynUFK5wPKm7OnPz74iJw>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 20:43:44 -0000
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==


From nobody Wed Apr 19 13:52:28 2017
Return-Path: <gdawra@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F294412D0C3; Wed, 19 Apr 2017 13:47:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OOtEBCnYG9l2; Wed, 19 Apr 2017 13:47:51 -0700 (PDT)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EFF46129BCC; Wed, 19 Apr 2017 13:47:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2768; q=dns/txt; s=iport; t=1492634871; x=1493844471; h=from:to:cc:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=9D3UCdXkf5Tz+PWvMIoUzgbmzCwYZxSmllEPZ7wmk2Y=; b=aSmtOj5UJx7kZIa0JxdgmWSkDqOPwo/89icoYbYwiMX0xZq7G2Iq6j8x 02C+LfB3Mt/Eb+kbRKbPkfHgqx7ofivDDoL9ysQbmkAAq1wERAyr37CBH tPqne5YrZo8sg6qCXWk40h8Ob/qr5J0AK3tIM9Hk2KZtks8ncuCpeBcQM A=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AHAgDGzPdY/49dJa1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1RhgQsHg2CKFZFClgOCDyELhXgcg2s/GAECAQEBAQEBAWsohRY?= =?us-ascii?q?CAQMBASERNwMLDgQBCBoCJgIEGQwLFRIEAQ0FihkOqkOCJoskAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBGAUFgQaFSIFdKwuCY4QpEQEcF4JvLoIxBZY+hnEBknuCAIU?= =?us-ascii?q?xihuUEAEfOH0IYxVEEQGGU3WGPYEhgQ0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800"; d="scan'208";a="412620727"
Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Apr 2017 20:47:30 +0000
Received: from XCH-RTP-012.cisco.com (xch-rtp-012.cisco.com [64.101.220.152]) by rcdn-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id v3JKlUjQ000958 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 19 Apr 2017 20:47:30 GMT
Received: from xch-rtp-012.cisco.com (64.101.220.152) by XCH-RTP-012.cisco.com (64.101.220.152) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Apr 2017 16:47:29 -0400
Received: from xch-rtp-012.cisco.com ([64.101.220.152]) by XCH-RTP-012.cisco.com ([64.101.220.152]) with mapi id 15.00.1210.000; Wed, 19 Apr 2017 16:47:29 -0400
From: "Gaurav Dawra (gdawra)" <gdawra@cisco.com>
To: "Acee Lindem (acee)" <acee@cisco.com>, Loa Andersson <loa@pi.nu>, "mpls@ietf.org" <mpls@ietf.org>, "idr@ietf.org" <idr@ietf.org>, BESS <bess@ietf.org>
CC: "<rtg-ads@ietf.org>" <rtg-ads@ietf.org>, "idr-chairs@ietf.org" <idr-chairs@ietf.org>, "bess-chairs@ietf.org" <bess-chairs@ietf.org>, "mpls-chairs@ietf.org" <mpls-chairs@ietf.org>, "draft-ietf-mpls-rfc3107bis@ietf.org" <draft-ietf-mpls-rfc3107bis@ietf.org>
Thread-Topic: [Idr] [bess] Working Group Last Call on draft-ietf-mpls-rfc3107bis
Thread-Index: AQHSuU4oZy7oQxkWrEWxCTKxQwoEPg==
Date: Wed, 19 Apr 2017 20:47:29 +0000
Message-ID: <5398C64D-3794-43FD-8118-B63202F67958@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.20.0.170309
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.154.161.210]
Content-Type: text/plain; charset="utf-8"
Content-ID: <7EB1E9DEE5094042A6B289FEAC3C4FE0@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/_XV7fr7ql_pzWqWUD6t3pUxnfxA>
X-Mailman-Approved-At: Wed, 19 Apr 2017 13:52:26 -0700
Subject: Re: [Idr] [bess] Working Group Last Call on draft-ietf-mpls-rfc3107bis
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 20:47:53 -0000

U3VwcG9ydCB0aGUgcHVibGljYXRpb24uDQoNClJlZ2FyZHMsDQogDQpHYXVyYXYNCg0KT24gNC8x
OS8xNywgMTI6NTQgUE0sICJJZHIgb24gYmVoYWxmIG9mIEFjZWUgTGluZGVtIChhY2VlKSIgPGlk
ci1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBhY2VlQGNpc2NvLmNvbT4gd3JvdGU6DQoN
CiAgICBIaSBMb2EsIGV0IGFsLCANCiAgICANCiAgICBJIHN1cHBvcnQgcHVibGljYXRpb24gb2Yg
dGhpcyBkcmFmdCBhcyBhIHN0YW5kYXJkcyB0cmFjayBkb2N1bWVudC4gSXQgaXMNCiAgICB3ZWxs
LXdyaXR0ZW4gYW5kIGhhbmRsZXMgcHJldmlvdXNseSB1bnNwZWNpZmllZCBkZXRhaWxzIG9mIHNp
bmdsZSBhbmQNCiAgICBtdWx0aXBsZSBsYWJlbCBCR1AgYWR2ZXJ0aXNlbWVudC4NCiAgICANCiAg
ICBUaGFua3MsDQogICAgQWNlZSANCiAgICANCiAgICBPbiA0LzQvMTcsIDg6MzMgQU0sICJCRVNT
IG9uIGJlaGFsZiBvZiBMb2EgQW5kZXJzc29uIg0KICAgIDxiZXNzLWJvdW5jZXNAaWV0Zi5vcmcg
b24gYmVoYWxmIG9mIGxvYUBwaS5udT4gd3JvdGU6DQogICAgDQogICAgPldvcmtpbmcgR3JvdXBz
LA0KICAgID4NCiAgICA+VGhpcyBpcyB0byBpbml0aWF0ZSBhIHR3byB3ZWVrIHdvcmtpbmcgZ3Jv
dXAgbGFzdCBjYWxsIGluIGZvdXIgd29ya2luZw0KICAgID5ncm91cHMgb24gZHJhZnQtaWV0Zi1t
cGxzLXJmYzMxMDdiaXMtMDEuDQogICAgPg0KICAgID5BY2NvcmRpbmcgdG8gYWdyZWVtZW50IHdo
ZW4gd2UgZGVjaWRlZCB0byBob3N0IHRoaXMgZG9jdW1lbnQgaW4gdGhlDQogICAgPk1QTFMgd29y
a2luZyBncm91cCwgdGhpcyBsYXN0IGNhbGwgaXMgYWxzbyBjb3BpZWQgdG8gdGhlIElEUiBhbmQg
QkVTUw0KICAgID53b3JraW5nIGdyb3Vwcy4NCiAgICA+DQogICAgPlBsZWFzZSBzZW5kIHlvdXIg
Y29tbWVudHMgdG8gdGhlIG1wbHMgd2cgbWFpbGluZyBsaXN0IChtcGxzQGlldGYub3JnKSwNCiAg
ICA+aWYgeW91IGFyZSBub3Qgc3Vic2NyaWJlZCB0byB0aGUgbXBscyB3ZyBsaXN0LCBzZW5kIHRv
ICJ5b3VyIG93biINCiAgICA+d29ya2luZyBncm91cCBtYWlsaW5nIGxpc3QsIGFuZCB3ZSdsbCBt
YWtlIHN1cmUgdGhleSBhcmUgcG9zdGVkIHRvIHRoZQ0KICAgID5NUExTIHdnIGxpc3QuDQogICAg
Pg0KICAgID5UaGVyZSBhcmUgbm8gSVBSIGRpc2Nsb3N1cmVzIGFnYWluc3QgdGhpcyBkb2N1bWVu
dC4NCiAgICA+DQogICAgPkFsbCB0aGUgYXV0aG9ycyBhbmQgY29udHJpYnV0b3JzIGhhdmUgc3Rh
dGVkIG9uIHRoZSB3b3JraW5nIGdyb3VwDQogICAgPm1haWxpbmcgbGlzdCB0aGF0IHRoZXkgYXJl
IG5vdCBhd2FyZSBvZiBhbnkgb3RoZXIgSVBScyB0aGF0IHJlbGF0ZXMNCiAgICA+dG8gdGhpcyBk
b2N1bWVudC4NCiAgICA+DQogICAgPlRoaXMgd29ya2luZyBncm91cCBsYXN0IGNhbGwgZW5kcyBB
cHJpbCAyMCwgMjAxNy4NCiAgICA+DQogICAgPg0KICAgID4vTG9hDQogICAgPk1QTFMgd2cgY28t
Y2hhaXJzDQogICAgPi0tIA0KICAgID4NCiAgICA+DQogICAgPkxvYSBBbmRlcnNzb24gICAgICAg
ICAgICAgICAgICAgICAgICBlbWFpbDogbG9hQG1haWwwMS5odWF3ZWkuY29tDQogICAgPlNlbmlv
ciBNUExTIEV4cGVydCAgICAgICAgICAgICAgICAgICAgICAgICAgbG9hQHBpLm51DQogICAgPkh1
YXdlaSBUZWNobm9sb2dpZXMgKGNvbnN1bHRhbnQpICAgICBwaG9uZTogKzQ2IDczOSA4MSAyMSA2
NA0KICAgID4NCiAgICA+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX18NCiAgICA+QkVTUyBtYWlsaW5nIGxpc3QNCiAgICA+QkVTU0BpZXRmLm9yZw0KICAgID5o
dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Jlc3MNCiAgICANCiAgICBfX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIElkciBtYWls
aW5nIGxpc3QNCiAgICBJZHJAaWV0Zi5vcmcNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls
bWFuL2xpc3RpbmZvL2lkcg0KICAgIA0KDQo=


From nobody Wed Apr 19 13:58:47 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8817312E852 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 13:58:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id go9m15V1kTU3 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 13:58:42 -0700 (PDT)
Received: from mail-io0-x232.google.com (mail-io0-x232.google.com [IPv6:2607:f8b0:4001:c06::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6EA512E05D for <idr@ietf.org>; Wed, 19 Apr 2017 13:58:42 -0700 (PDT)
Received: by mail-io0-x232.google.com with SMTP id k87so37318203ioi.0 for <idr@ietf.org>; Wed, 19 Apr 2017 13:58:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=AyXkPzsg+PdUunH1sKa/a3EBgqce0/AbC5+jG3x0cgY=; b=V7A7uQ0k0Ax6vCl1xLc7cFDtg63j6nJVv5y0l+aB/VdZlAixFd1I6BIwARX7HhHA11 dMsek6lIPNxEYtvXB7EkfWQp237ZZjWazo4zAeld32mRlN57nV1MNOCXw5J/THi9TykT JcsU4GlRmgJdgHU0pyaVNQQsfg15QcmK/rysHjifv3U19ISsump9QY1/ZLAT98b1hJW9 xPxSMMnpvDjPE/m7RtxswcL/z+dRGjO9E9JmkvsCgX5YOmHXhXLNWvpCkrapW1Cqg3mK HqTb8xVZMOPHoJQkbmVptuspl1uQ0R0De3yJA9Al44xH6Zw2cQUwUZr/YDaPd0vLZq0g ScIg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=AyXkPzsg+PdUunH1sKa/a3EBgqce0/AbC5+jG3x0cgY=; b=g0NLTgffvq2TBKgPP2d3cErPtYy2NSNa8ZEmxqcEzhzc+dkMcXlWth1BROydtLB7fR HKFX3tEr1mPrkOJhf73QFWEemgVetvi+LXrziC9+gejyQ57b4ID1s89tqA5+a+w4t6hC szH8Uw7AcpffXlZdSSF/3uv9pLqD7PpGnN+XQqL7/47IDx7y5JXrPYNzL1wx/RTJ3BR4 nlhVQspRJRNyQKXU4xdupOhLZPAg26EtM3yAXB9hTNsKVpr1ipv+JYPX/kcmPpNH1Pzg tE3TiQKcKV9bGbr48/wSJcAee66Vcq+jFjxEfniOQ7wJeYd7paDWAXOsY6m92A3bAv9x OCfQ==
X-Gm-Message-State: AN3rC/6jO+xt8wE/wSyORJID4JBV6sRoxcTy4nC7khWD7LHCVjGmjS8l N4PR8PtIlo+VmaFh7LRXf17xaMv6fA==
X-Received: by 10.36.219.195 with SMTP id c186mr22624605itg.25.1492635521899;  Wed, 19 Apr 2017 13:58:41 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Wed, 19 Apr 2017 13:58:41 -0700 (PDT)
In-Reply-To: <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Wed, 19 Apr 2017 22:58:41 +0200
X-Google-Sender-Auth: U3R3rhR6FralJMfaf0YVL--Sy8U
Message-ID: <CA+b+ERkSEHtnL9=jdu8qPw48DFrs4LCK-h-zkmkC7q2n8e6kog@mail.gmail.com>
To: Keyur Patel <keyur@arrcus.com>
Cc: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Type: multipart/alternative; boundary=001a114f5cce0ff744054d8b4a39
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/c4zBk8BpqzyyBqiKoR-fiogzxII>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 20:58:45 -0000

--001a114f5cce0ff744054d8b4a39
Content-Type: text/plain; charset=UTF-8

As discussed offline with authors I would also suggest to reconsider if
such Standards Track RFC should really be applicable to all AFIs and SAFIs
as it is today. I would suggest to keep it only applicable to 1/1 and 2/1.

For other AFI/SAFIs it will result in empty policy as it is hard to predict
what filters flow-spec or RT constrained (as just two examples) may send
you ahead of time.

For other SAFIs say safi 128 for Inter-AS EBGP the required filtering may
already be present in forms of rt-table-map filtering which would not
necessarily be part of per neighbor eBGP inbound import policy but may
exist depending on the option either globally or per VRF.

Last the draft does not specify if BGP Origin Validation is to be
considered as such inbound policy or not.

Kind regards,
Robert.

On Wed, Apr 19, 2017 at 10:43 PM, Keyur Patel <keyur@arrcus.com> wrote:

> Thank you John for bringing it on IDR.
>
> As an update to RFC4271, I am not sure if I agree with the EBGP policy
> configuration. There are lot of DC networks (for example) that use EBGP
> within their CLOS. This extension may not be applicable in such networks.
>
> I would request authors to consider refining text to include appropriate
> EBGP use cases and not make it generic for EBGP sessions (defined in 4271).
>
> Regards,
> Keyur
>
>
> On 4/19/17, 9:49 AM, "Idr on behalf of John G. Scudder" <
> idr-bounces@ietf.org on behalf of jgs@juniper.net> wrote:
>
>     IDR folks,
>
>     As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has
> completed GROW WGLC and is now in IETF LC.
>
>     As nobody other than Alvaro noticed (thank you for noticing, Alvaro!)
> draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that it
> mandates what a BGP implementation MUST do. See section 2 of the draft for
> the details. It's short and easy to read.
>
>     If we had noticed this earlier, we would have either chosen to home
> the document in IDR, or explicitly made an exception to have GROW do the
> work. Given that we didn't, though, the plan is to continue progressing the
> draft as a GROW document. However:
>
>     - As I understand it, the authors will add the Updates: 4271 header in
> addition to potentially taking in other comments from AD review.
>     - If anyone has a strong objection to the unusual procedure, please
> say so (either on-list, or to the chairs + AD).
>     - Please send any last call comments to the IETF LC (see below)
> although it's also OK to discuss here on the IDR list of course.
>
>     Many IDR participants are also active in GROW and have had their say,
> but if you haven't, now's your chance.
>
>     Thanks,
>
>     --John
>
>     > Begin forwarded message:
>     >
>     > From: The IESG <iesg-secretary@ietf.org>
>     > Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default
> EBGP Route Propagation Behavior Without Policies) to Proposed Standard
>     > Date: April 18, 2017 at 5:16:05 PM EDT
>     > To: "IETF-Announce" <ietf-announce@ietf.org>
>     > Cc: grow-chairs@ietf.org, grow@ietf.org, draft-ietf-grow-bgp-reject@
> ietf.org, christopher.morrow@gmail.com
>     > Reply-To: ietf@ietf.org
>     >
>     >
>     > The IESG has received a request from the Global Routing Operations WG
>     > (grow) to consider the following document:
>     > - 'Default EBGP Route Propagation Behavior Without Policies'
>     > <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>     >
>     > The IESG plans to make a decision in the next few weeks, and solicits
>     > final comments on this action. Please send substantive comments to
> the
>     > ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments
> may be
>     > sent to iesg@ietf.org instead. In either case, please retain the
>     > beginning of the Subject line to allow automated sorting.
>     >
>     > Abstract
>     >
>     >  This document defines the default behavior of a BGP speaker when
>     >  there is no import or export policy associated with an External BGP
>     >  session.
>     >
>     >
>     > The file can be obtained via
>     > https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>     >
>     > IESG discussion can be tracked via
>     > https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>     >
>     > This IETF LC, which originally concluded on 2017-04-18, is being
>     > extended to allow for additional input to be provided. Ops AD (for
> GROW)
>     > and Routing AD (for IDR) wish to ensure that cross WG discussions
> have
>     > had a chance to occur.
>     >
>     > No IPR declarations have been submitted directly on this I-D.
>
>     _______________________________________________
>     Idr mailing list
>     Idr@ietf.org
>     https://www.ietf.org/mailman/listinfo/idr
>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a114f5cce0ff744054d8b4a39
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small">As discuss=
ed offline with authors I would also suggest to reconsider if such Standard=
s Track RFC should really be applicable to all AFIs and SAFIs as it is toda=
y. I would suggest to keep it only applicable to 1/1 and 2/1.=C2=A0</div><d=
iv class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;=
font-size:small"><br></div><div class=3D"gmail_default" style=3D"font-famil=
y:arial,helvetica,sans-serif;font-size:small">For other AFI/SAFIs it will r=
esult in empty policy as it is hard to predict what filters flow-spec or RT=
 constrained (as just two examples) may send you ahead of time.=C2=A0</div>=
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small"><br></div><div class=3D"gmail_default" style=3D"font-fam=
ily:arial,helvetica,sans-serif;font-size:small">For other SAFIs say safi 12=
8 for Inter-AS EBGP the required filtering may already be present in forms =
of rt-table-map filtering which would not necessarily be part of per neighb=
or eBGP inbound import policy but may exist depending on the option either =
globally or per VRF.</div><div class=3D"gmail_default" style=3D"font-family=
:arial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_=
default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">L=
ast the draft does not specify if BGP Origin Validation is to be considered=
 as such inbound policy or not.=C2=A0</div><div class=3D"gmail_default" sty=
le=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><di=
v class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;f=
ont-size:small">Kind regards,</div><div class=3D"gmail_default" style=3D"fo=
nt-family:arial,helvetica,sans-serif;font-size:small">Robert.</div></div><d=
iv class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Wed, Apr 19, 201=
7 at 10:43 PM, Keyur Patel <span dir=3D"ltr">&lt;<a href=3D"mailto:keyur@ar=
rcus.com" target=3D"_blank">keyur@arrcus.com</a>&gt;</span> wrote:<br><bloc=
kquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #cc=
c solid;padding-left:1ex">Thank you John for bringing it on IDR.<br>
<br>
As an update to RFC4271, I am not sure if I agree with the EBGP policy conf=
iguration. There are lot of DC networks (for example) that use EBGP within =
their CLOS. This extension may not be applicable in such networks.<br>
<br>
I would request authors to consider refining text to include appropriate EB=
GP use cases and not make it generic for EBGP sessions (defined in 4271).<b=
r>
<br>
Regards,<br>
Keyur<br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
<br>
On 4/19/17, 9:49 AM, &quot;Idr on behalf of John G. Scudder&quot; &lt;<a hr=
ef=3D"mailto:idr-bounces@ietf.org">idr-bounces@ietf.org</a> on behalf of <a=
 href=3D"mailto:jgs@juniper.net">jgs@juniper.net</a>&gt; wrote:<br>
<br>
=C2=A0 =C2=A0 IDR folks,<br>
<br>
=C2=A0 =C2=A0 As many of you have already noticed, draft-ietf-grow-bgp-reje=
ct-05 has completed GROW WGLC and is now in IETF LC.<br>
<br>
=C2=A0 =C2=A0 As nobody other than Alvaro noticed (thank you for noticing, =
Alvaro!) draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in=
 that it mandates what a BGP implementation MUST do. See section 2 of the d=
raft for the details. It&#39;s short and easy to read.<br>
<br>
=C2=A0 =C2=A0 If we had noticed this earlier, we would have either chosen t=
o home the document in IDR, or explicitly made an exception to have GROW do=
 the work. Given that we didn&#39;t, though, the plan is to continue progre=
ssing the draft as a GROW document. However:<br>
<br>
=C2=A0 =C2=A0 - As I understand it, the authors will add the Updates: 4271 =
header in addition to potentially taking in other comments from AD review.<=
br>
=C2=A0 =C2=A0 - If anyone has a strong objection to the unusual procedure, =
please say so (either on-list, or to the chairs + AD).<br>
=C2=A0 =C2=A0 - Please send any last call comments to the IETF LC (see belo=
w) although it&#39;s also OK to discuss here on the IDR list of course.<br>
<br>
=C2=A0 =C2=A0 Many IDR participants are also active in GROW and have had th=
eir say, but if you haven&#39;t, now&#39;s your chance.<br>
<br>
=C2=A0 =C2=A0 Thanks,<br>
<br>
=C2=A0 =C2=A0 --John<br>
<br>
=C2=A0 =C2=A0 &gt; Begin forwarded message:<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; From: The IESG &lt;<a href=3D"mailto:iesg-secretary@ietf=
.org">iesg-secretary@ietf.org</a>&gt;<br>
=C2=A0 =C2=A0 &gt; Subject: Last Call: &lt;draft-ietf-grow-bgp-reject-<wbr>=
05.txt&gt; (Default EBGP Route Propagation Behavior Without Policies) to Pr=
oposed Standard<br>
=C2=A0 =C2=A0 &gt; Date: April 18, 2017 at 5:16:05 PM EDT<br>
=C2=A0 =C2=A0 &gt; To: &quot;IETF-Announce&quot; &lt;<a href=3D"mailto:ietf=
-announce@ietf.org">ietf-announce@ietf.org</a>&gt;<br>
=C2=A0 =C2=A0 &gt; Cc: <a href=3D"mailto:grow-chairs@ietf.org">grow-chairs@=
ietf.org</a>, <a href=3D"mailto:grow@ietf.org">grow@ietf.org</a>, <a href=
=3D"mailto:draft-ietf-grow-bgp-reject@ietf.org">draft-ietf-grow-bgp-reject@=
<wbr>ietf.org</a>, <a href=3D"mailto:christopher.morrow@gmail.com">christop=
her.morrow@gmail.com</a><br>
=C2=A0 =C2=A0 &gt; Reply-To: <a href=3D"mailto:ietf@ietf.org">ietf@ietf.org=
</a><br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; The IESG has received a request from the Global Routing =
Operations WG<br>
=C2=A0 =C2=A0 &gt; (grow) to consider the following document:<br>
=C2=A0 =C2=A0 &gt; - &#39;Default EBGP Route Propagation Behavior Without P=
olicies&#39;<br>
=C2=A0 =C2=A0 &gt; &lt;draft-ietf-grow-bgp-reject-<wbr>05.txt&gt; as Propos=
ed Standard<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; The IESG plans to make a decision in the next few weeks,=
 and solicits<br>
=C2=A0 =C2=A0 &gt; final comments on this action. Please send substantive c=
omments to the<br>
=C2=A0 =C2=A0 &gt; <a href=3D"mailto:ietf@ietf.org">ietf@ietf.org</a> maili=
ng lists by 2017-05-02. Exceptionally, comments may be<br>
=C2=A0 =C2=A0 &gt; sent to <a href=3D"mailto:iesg@ietf.org">iesg@ietf.org</=
a> instead. In either case, please retain the<br>
=C2=A0 =C2=A0 &gt; beginning of the Subject line to allow automated sorting=
.<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; Abstract<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt;=C2=A0 This document defines the default behavior of a BG=
P speaker when<br>
=C2=A0 =C2=A0 &gt;=C2=A0 there is no import or export policy associated wit=
h an External BGP<br>
=C2=A0 =C2=A0 &gt;=C2=A0 session.<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; The file can be obtained via<br>
=C2=A0 =C2=A0 &gt; <a href=3D"https://datatracker.ietf.org/doc/draft-ietf-g=
row-bgp-reject/" rel=3D"noreferrer" target=3D"_blank">https://datatracker.i=
etf.org/<wbr>doc/draft-ietf-grow-bgp-<wbr>reject/</a><br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; IESG discussion can be tracked via<br>
=C2=A0 =C2=A0 &gt; <a href=3D"https://datatracker.ietf.org/doc/draft-ietf-g=
row-bgp-reject/ballot/" rel=3D"noreferrer" target=3D"_blank">https://datatr=
acker.ietf.org/<wbr>doc/draft-ietf-grow-bgp-<wbr>reject/ballot/</a><br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; This IETF LC, which originally concluded on 2017-04-18, =
is being<br>
=C2=A0 =C2=A0 &gt; extended to allow for additional input to be provided. O=
ps AD (for GROW)<br>
=C2=A0 =C2=A0 &gt; and Routing AD (for IDR) wish to ensure that cross WG di=
scussions have<br>
=C2=A0 =C2=A0 &gt; had a chance to occur.<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; No IPR declarations have been submitted directly on this=
 I-D.<br>
<br>
=C2=A0 =C2=A0 ______________________________<wbr>_________________<br>
=C2=A0 =C2=A0 Idr mailing list<br>
=C2=A0 =C2=A0 <a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
=C2=A0 =C2=A0 <a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"=
noreferrer" target=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/id=
r</a><br>
<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--001a114f5cce0ff744054d8b4a39--


From nobody Wed Apr 19 13:59:06 2017
Return-Path: <acee@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 125B112EA7A for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 13:58:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nzv9LQlQEE2I for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 13:58:52 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 698D112E05D for <idr@ietf.org>; Wed, 19 Apr 2017 13:58:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6240; q=dns/txt; s=iport; t=1492635532; x=1493845132; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=hHVPBlcdIqOLT/StWHSUAPUA9n3BdoxbTF/cpjSlmfE=; b=DdoxLA5dnukNGXeHFSqb7kOP5+9ju+3n8ium3NhZfOuWlnpxZ1/2FF7W gOvUeNPrBpvJ786t21RZ0m+DpHmY77pcb7QcU9MW5xLdbMcuEwDtFDYT3 r5S+DOwJJVc7DwGBZOIwY9KnctfoaWbXEorjk0pMCxw8fGEQblamvO33G 8=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AeAQBvzvdY/4YNJK1WBhkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNUYYELB4NgihWRY4gejUSCDyELhXgCGoNrPxgBAgEBAQEBAQF?= =?us-ascii?q?rKIUVAQEBAQMBASEROgsQAgEIEQMBAgECAh8HAgICHwYLFAEICAIEAQ0FigEDF?= =?us-ascii?q?Q6qR4ImhzgNg18BAQEBAQEBAQEBAQEBAQEBAQEBAQEYBYELhyQBgxmCUYF4Dia?= =?us-ascii?q?CYIJAHwWcdDsBhxCHI4RIggCFMYNhhjqIbIIhiQMBHziBBWMVRIUbgUkBdYdeg?= =?us-ascii?q?Q0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800"; d="scan'208";a="414800449"
Received: from alln-core-12.cisco.com ([173.36.13.134]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 19 Apr 2017 20:58:51 +0000
Received: from XCH-RTP-014.cisco.com (xch-rtp-014.cisco.com [64.101.220.154]) by alln-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id v3JKwp5d008263 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 19 Apr 2017 20:58:51 GMT
Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-014.cisco.com (64.101.220.154) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Apr 2017 16:58:50 -0400
Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Wed, 19 Apr 2017 16:58:50 -0400
From: "Acee Lindem (acee)" <acee@cisco.com>
To: Keyur Patel <keyur@arrcus.com>, "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>
CC: Hares Susan <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuSz+QxMnaaMdpE6dWAZuvCqOqKHMs4OAgAB5mwA=
Date: Wed, 19 Apr 2017 20:58:50 +0000
Message-ID: <D51D46A7.A9732%acee@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com>
In-Reply-To: <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.116.152.197]
Content-Type: text/plain; charset="utf-8"
Content-ID: <0271DC8DF63FDF46BBDD2EA14D559F39@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/kxxgIp6RDRlYUyDzDq59Ql6XlO0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 20:59:05 -0000

SSB3b3VsZCBhZ3JlZSB3aXRoIEtleXVyLCBGb3IgYmV0dGVyIG9yIHdvcnNlLCBvdXIgQ2lzY28g
TlgtT1MgQkdQDQppbXBsZW1lbnRhdGlvbiBkb2VzIG5vdCByZXF1aXJlIGNvbmZpZ3VyYXRpb24g
b2YgYSBwZWVyIHBvbGljeS4NCg0KSW4gZmFjdCwgdGhpcyByZXF1aXJlbWVudCBpcyBjb250cmFy
eSB0byBzb21lIG9mIHRoZSBhdXRvLWRpc2NvdmVyeQ0KbWVjaGFuaXNtcyB3ZSBhcmUgZXhwbG9y
aW5nIHdoZXJlIG9ubHkga25vd2xlZGdlIG9mIHRoZSBtdXR1YWwgYWRkcmVzcw0KZmFtaWxpZXMg
aXMgcmVxdWlyZWQuDQoNClRoYW5rcywNCkFjZWUgDQoNCk9uIDQvMTkvMTcsIDQ6NDMgUE0sICJJ
ZHIgb24gYmVoYWxmIG9mIEtleXVyIFBhdGVsIiA8aWRyLWJvdW5jZXNAaWV0Zi5vcmcNCm9uIGJl
aGFsZiBvZiBrZXl1ckBhcnJjdXMuY29tPiB3cm90ZToNCg0KPlRoYW5rIHlvdSBKb2huIGZvciBi
cmluZ2luZyBpdCBvbiBJRFIuDQo+DQo+QXMgYW4gdXBkYXRlIHRvIFJGQzQyNzEsIEkgYW0gbm90
IHN1cmUgaWYgSSBhZ3JlZSB3aXRoIHRoZSBFQkdQIHBvbGljeQ0KPmNvbmZpZ3VyYXRpb24uIFRo
ZXJlIGFyZSBsb3Qgb2YgREMgbmV0d29ya3MgKGZvciBleGFtcGxlKSB0aGF0IHVzZSBFQkdQDQo+
d2l0aGluIHRoZWlyIENMT1MuIFRoaXMgZXh0ZW5zaW9uIG1heSBub3QgYmUgYXBwbGljYWJsZSBp
biBzdWNoIG5ldHdvcmtzLg0KPg0KPkkgd291bGQgcmVxdWVzdCBhdXRob3JzIHRvIGNvbnNpZGVy
IHJlZmluaW5nIHRleHQgdG8gaW5jbHVkZSBhcHByb3ByaWF0ZQ0KPkVCR1AgdXNlIGNhc2VzIGFu
ZCBub3QgbWFrZSBpdCBnZW5lcmljIGZvciBFQkdQIHNlc3Npb25zIChkZWZpbmVkIGluDQo+NDI3
MSkuDQo+DQo+UmVnYXJkcywNCj5LZXl1cg0KPg0KPg0KPk9uIDQvMTkvMTcsIDk6NDkgQU0sICJJ
ZHIgb24gYmVoYWxmIG9mIEpvaG4gRy4gU2N1ZGRlciINCj48aWRyLWJvdW5jZXNAaWV0Zi5vcmcg
b24gYmVoYWxmIG9mIGpnc0BqdW5pcGVyLm5ldD4gd3JvdGU6DQo+DQo+ICAgIElEUiBmb2xrcywN
Cj4gICAgDQo+ICAgIEFzIG1hbnkgb2YgeW91IGhhdmUgYWxyZWFkeSBub3RpY2VkLCBkcmFmdC1p
ZXRmLWdyb3ctYmdwLXJlamVjdC0wNQ0KPmhhcyBjb21wbGV0ZWQgR1JPVyBXR0xDIGFuZCBpcyBu
b3cgaW4gSUVURiBMQy4NCj4gICAgDQo+ICAgIEFzIG5vYm9keSBvdGhlciB0aGFuIEFsdmFybyBu
b3RpY2VkICh0aGFuayB5b3UgZm9yIG5vdGljaW5nLCBBbHZhcm8hKQ0KPmRyYWZ0LWlldGYtZ3Jv
dy1iZ3AtcmVqZWN0LTA1IHJlcHJlc2VudHMgYW4gdXBkYXRlIHRvIFJGQyA0MjcxLCBpbiB0aGF0
DQo+aXQgbWFuZGF0ZXMgd2hhdCBhIEJHUCBpbXBsZW1lbnRhdGlvbiBNVVNUIGRvLiBTZWUgc2Vj
dGlvbiAyIG9mIHRoZSBkcmFmdA0KPmZvciB0aGUgZGV0YWlscy4gSXQncyBzaG9ydCBhbmQgZWFz
eSB0byByZWFkLg0KPiAgICANCj4gICAgSWYgd2UgaGFkIG5vdGljZWQgdGhpcyBlYXJsaWVyLCB3
ZSB3b3VsZCBoYXZlIGVpdGhlciBjaG9zZW4gdG8gaG9tZQ0KPnRoZSBkb2N1bWVudCBpbiBJRFIs
IG9yIGV4cGxpY2l0bHkgbWFkZSBhbiBleGNlcHRpb24gdG8gaGF2ZSBHUk9XIGRvIHRoZQ0KPndv
cmsuIEdpdmVuIHRoYXQgd2UgZGlkbid0LCB0aG91Z2gsIHRoZSBwbGFuIGlzIHRvIGNvbnRpbnVl
IHByb2dyZXNzaW5nDQo+dGhlIGRyYWZ0IGFzIGEgR1JPVyBkb2N1bWVudC4gSG93ZXZlcjoNCj4g
ICAgDQo+ICAgIC0gQXMgSSB1bmRlcnN0YW5kIGl0LCB0aGUgYXV0aG9ycyB3aWxsIGFkZCB0aGUg
VXBkYXRlczogNDI3MSBoZWFkZXINCj5pbiBhZGRpdGlvbiB0byBwb3RlbnRpYWxseSB0YWtpbmcg
aW4gb3RoZXIgY29tbWVudHMgZnJvbSBBRCByZXZpZXcuDQo+ICAgIC0gSWYgYW55b25lIGhhcyBh
IHN0cm9uZyBvYmplY3Rpb24gdG8gdGhlIHVudXN1YWwgcHJvY2VkdXJlLCBwbGVhc2UNCj5zYXkg
c28gKGVpdGhlciBvbi1saXN0LCBvciB0byB0aGUgY2hhaXJzICsgQUQpLg0KPiAgICAtIFBsZWFz
ZSBzZW5kIGFueSBsYXN0IGNhbGwgY29tbWVudHMgdG8gdGhlIElFVEYgTEMgKHNlZSBiZWxvdykN
Cj5hbHRob3VnaCBpdCdzIGFsc28gT0sgdG8gZGlzY3VzcyBoZXJlIG9uIHRoZSBJRFIgbGlzdCBv
ZiBjb3Vyc2UuDQo+ICAgIA0KPiAgICBNYW55IElEUiBwYXJ0aWNpcGFudHMgYXJlIGFsc28gYWN0
aXZlIGluIEdST1cgYW5kIGhhdmUgaGFkIHRoZWlyIHNheSwNCj5idXQgaWYgeW91IGhhdmVuJ3Qs
IG5vdydzIHlvdXIgY2hhbmNlLg0KPiAgICANCj4gICAgVGhhbmtzLA0KPiAgICANCj4gICAgLS1K
b2huDQo+ICAgIA0KPiAgICA+IEJlZ2luIGZvcndhcmRlZCBtZXNzYWdlOg0KPiAgICA+IA0KPiAg
ICA+IEZyb206IFRoZSBJRVNHIDxpZXNnLXNlY3JldGFyeUBpZXRmLm9yZz4NCj4gICAgPiBTdWJq
ZWN0OiBMYXN0IENhbGw6IDxkcmFmdC1pZXRmLWdyb3ctYmdwLXJlamVjdC0wNS50eHQ+IChEZWZh
dWx0DQo+RUJHUCBSb3V0ZSBQcm9wYWdhdGlvbiBCZWhhdmlvciBXaXRob3V0IFBvbGljaWVzKSB0
byBQcm9wb3NlZCBTdGFuZGFyZA0KPiAgICA+IERhdGU6IEFwcmlsIDE4LCAyMDE3IGF0IDU6MTY6
MDUgUE0gRURUDQo+ICAgID4gVG86ICJJRVRGLUFubm91bmNlIiA8aWV0Zi1hbm5vdW5jZUBpZXRm
Lm9yZz4NCj4gICAgPiBDYzogZ3Jvdy1jaGFpcnNAaWV0Zi5vcmcsIGdyb3dAaWV0Zi5vcmcsDQo+
ZHJhZnQtaWV0Zi1ncm93LWJncC1yZWplY3RAaWV0Zi5vcmcsIGNocmlzdG9waGVyLm1vcnJvd0Bn
bWFpbC5jb20NCj4gICAgPiBSZXBseS1UbzogaWV0ZkBpZXRmLm9yZw0KPiAgICA+IA0KPiAgICA+
IA0KPiAgICA+IFRoZSBJRVNHIGhhcyByZWNlaXZlZCBhIHJlcXVlc3QgZnJvbSB0aGUgR2xvYmFs
IFJvdXRpbmcgT3BlcmF0aW9ucw0KPldHDQo+ICAgID4gKGdyb3cpIHRvIGNvbnNpZGVyIHRoZSBm
b2xsb3dpbmcgZG9jdW1lbnQ6DQo+ICAgID4gLSAnRGVmYXVsdCBFQkdQIFJvdXRlIFByb3BhZ2F0
aW9uIEJlaGF2aW9yIFdpdGhvdXQgUG9saWNpZXMnDQo+ICAgID4gPGRyYWZ0LWlldGYtZ3Jvdy1i
Z3AtcmVqZWN0LTA1LnR4dD4gYXMgUHJvcG9zZWQgU3RhbmRhcmQNCj4gICAgPiANCj4gICAgPiBU
aGUgSUVTRyBwbGFucyB0byBtYWtlIGEgZGVjaXNpb24gaW4gdGhlIG5leHQgZmV3IHdlZWtzLCBh
bmQNCj5zb2xpY2l0cw0KPiAgICA+IGZpbmFsIGNvbW1lbnRzIG9uIHRoaXMgYWN0aW9uLiBQbGVh
c2Ugc2VuZCBzdWJzdGFudGl2ZSBjb21tZW50cyB0bw0KPnRoZQ0KPiAgICA+IGlldGZAaWV0Zi5v
cmcgbWFpbGluZyBsaXN0cyBieSAyMDE3LTA1LTAyLiBFeGNlcHRpb25hbGx5LCBjb21tZW50cw0K
Pm1heSBiZQ0KPiAgICA+IHNlbnQgdG8gaWVzZ0BpZXRmLm9yZyBpbnN0ZWFkLiBJbiBlaXRoZXIg
Y2FzZSwgcGxlYXNlIHJldGFpbiB0aGUNCj4gICAgPiBiZWdpbm5pbmcgb2YgdGhlIFN1YmplY3Qg
bGluZSB0byBhbGxvdyBhdXRvbWF0ZWQgc29ydGluZy4NCj4gICAgPiANCj4gICAgPiBBYnN0cmFj
dA0KPiAgICA+IA0KPiAgICA+ICBUaGlzIGRvY3VtZW50IGRlZmluZXMgdGhlIGRlZmF1bHQgYmVo
YXZpb3Igb2YgYSBCR1Agc3BlYWtlciB3aGVuDQo+ICAgID4gIHRoZXJlIGlzIG5vIGltcG9ydCBv
ciBleHBvcnQgcG9saWN5IGFzc29jaWF0ZWQgd2l0aCBhbiBFeHRlcm5hbCBCR1ANCj4gICAgPiAg
c2Vzc2lvbi4NCj4gICAgPiANCj4gICAgPiANCj4gICAgPiBUaGUgZmlsZSBjYW4gYmUgb2J0YWlu
ZWQgdmlhDQo+ICAgID4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0
Zi1ncm93LWJncC1yZWplY3QvDQo+ICAgID4gDQo+ICAgID4gSUVTRyBkaXNjdXNzaW9uIGNhbiBi
ZSB0cmFja2VkIHZpYQ0KPiAgICA+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2Ry
YWZ0LWlldGYtZ3Jvdy1iZ3AtcmVqZWN0L2JhbGxvdC8NCj4gICAgPiANCj4gICAgPiBUaGlzIElF
VEYgTEMsIHdoaWNoIG9yaWdpbmFsbHkgY29uY2x1ZGVkIG9uIDIwMTctMDQtMTgsIGlzIGJlaW5n
DQo+ICAgID4gZXh0ZW5kZWQgdG8gYWxsb3cgZm9yIGFkZGl0aW9uYWwgaW5wdXQgdG8gYmUgcHJv
dmlkZWQuIE9wcyBBRCAoZm9yDQo+R1JPVykgDQo+ICAgID4gYW5kIFJvdXRpbmcgQUQgKGZvciBJ
RFIpIHdpc2ggdG8gZW5zdXJlIHRoYXQgY3Jvc3MgV0cgZGlzY3Vzc2lvbnMNCj5oYXZlIA0KPiAg
ICA+IGhhZCBhIGNoYW5jZSB0byBvY2N1ci4NCj4gICAgPiANCj4gICAgPiBObyBJUFIgZGVjbGFy
YXRpb25zIGhhdmUgYmVlbiBzdWJtaXR0ZWQgZGlyZWN0bHkgb24gdGhpcyBJLUQuDQo+ICAgIA0K
PiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiAg
ICBJZHIgbWFpbGluZyBsaXN0DQo+ICAgIElkckBpZXRmLm9yZw0KPiAgICBodHRwczovL3d3dy5p
ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2lkcg0KPiAgICANCj4NCj5fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPklkciBtYWlsaW5nIGxpc3QNCj5JZHJA
aWV0Zi5vcmcNCj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2lkcg0KDQo=


From nobody Wed Apr 19 14:08:52 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDD9A12E852 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 14:08:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YHxe8aXS1ACF for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 14:08:48 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id 60869129BE0 for <idr@ietf.org>; Wed, 19 Apr 2017 14:08:48 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:34ee:4c74:5736:da2c] (unknown [IPv6:2603:3015:3603:8e00:34ee:4c74:5736:da2c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id 1EAB1540A90; Wed, 19 Apr 2017 17:08:44 -0400 (EDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (1.0)
From: Jared Mauch <jared@puck.nether.net>
X-Mailer: iPhone Mail (14E304)
In-Reply-To: <D51D46A7.A9732%acee@cisco.com>
Date: Wed, 19 Apr 2017 17:08:43 -0400
Cc: Keyur Patel <keyur@arrcus.com>, "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Transfer-Encoding: 7bit
Message-Id: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com>
To: "Acee Lindem (acee)" <acee@cisco.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/1_2hpGcWqG-zBNeYliykk_CIMZc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 21:08:51 -0000

If someone sets insecure mode they can  e as promiscuous as they want.  

That mode can have a very low bar IMO. 

Jared Mauch

> On Apr 19, 2017, at 4:58 PM, Acee Lindem (acee) <acee@cisco.com> wrote:
> 
> I would agree with Keyur, For better or worse, our Cisco NX-OS BGP
> implementation does not require configuration of a peer policy.
> 
> In fact, this requirement is contrary to some of the auto-discovery
> mechanisms we are exploring where only knowledge of the mutual address
> families is required.
> 
> Thanks,
> Acee 
> 
> On 4/19/17, 4:43 PM, "Idr on behalf of Keyur Patel" <idr-bounces@ietf.org
> on behalf of keyur@arrcus.com> wrote:
> 
>> Thank you John for bringing it on IDR.
>> 
>> As an update to RFC4271, I am not sure if I agree with the EBGP policy
>> configuration. There are lot of DC networks (for example) that use EBGP
>> within their CLOS. This extension may not be applicable in such networks.
>> 
>> I would request authors to consider refining text to include appropriate
>> EBGP use cases and not make it generic for EBGP sessions (defined in
>> 4271).
>> 
>> Regards,
>> Keyur
>> 
>> 
>> On 4/19/17, 9:49 AM, "Idr on behalf of John G. Scudder"
>> <idr-bounces@ietf.org on behalf of jgs@juniper.net> wrote:
>> 
>>   IDR folks,
>> 
>>   As many of you have already noticed, draft-ietf-grow-bgp-reject-05
>> has completed GROW WGLC and is now in IETF LC.
>> 
>>   As nobody other than Alvaro noticed (thank you for noticing, Alvaro!)
>> draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that
>> it mandates what a BGP implementation MUST do. See section 2 of the draft
>> for the details. It's short and easy to read.
>> 
>>   If we had noticed this earlier, we would have either chosen to home
>> the document in IDR, or explicitly made an exception to have GROW do the
>> work. Given that we didn't, though, the plan is to continue progressing
>> the draft as a GROW document. However:
>> 
>>   - As I understand it, the authors will add the Updates: 4271 header
>> in addition to potentially taking in other comments from AD review.
>>   - If anyone has a strong objection to the unusual procedure, please
>> say so (either on-list, or to the chairs + AD).
>>   - Please send any last call comments to the IETF LC (see below)
>> although it's also OK to discuss here on the IDR list of course.
>> 
>>   Many IDR participants are also active in GROW and have had their say,
>> but if you haven't, now's your chance.
>> 
>>   Thanks,
>> 
>>   --John
>> 
>>> Begin forwarded message:
>>> 
>>> From: The IESG <iesg-secretary@ietf.org>
>>> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default
>> EBGP Route Propagation Behavior Without Policies) to Proposed Standard
>>> Date: April 18, 2017 at 5:16:05 PM EDT
>>> To: "IETF-Announce" <ietf-announce@ietf.org>
>>> Cc: grow-chairs@ietf.org, grow@ietf.org,
>> draft-ietf-grow-bgp-reject@ietf.org, christopher.morrow@gmail.com
>>> Reply-To: ietf@ietf.org
>>> 
>>> 
>>> The IESG has received a request from the Global Routing Operations
>> WG
>>> (grow) to consider the following document:
>>> - 'Default EBGP Route Propagation Behavior Without Policies'
>>> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>>> 
>>> The IESG plans to make a decision in the next few weeks, and
>> solicits
>>> final comments on this action. Please send substantive comments to
>> the
>>> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments
>> may be
>>> sent to iesg@ietf.org instead. In either case, please retain the
>>> beginning of the Subject line to allow automated sorting.
>>> 
>>> Abstract
>>> 
>>> This document defines the default behavior of a BGP speaker when
>>> there is no import or export policy associated with an External BGP
>>> session.
>>> 
>>> 
>>> The file can be obtained via
>>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>>> 
>>> IESG discussion can be tracked via
>>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>>> 
>>> This IETF LC, which originally concluded on 2017-04-18, is being
>>> extended to allow for additional input to be provided. Ops AD (for
>> GROW) 
>>> and Routing AD (for IDR) wish to ensure that cross WG discussions
>> have 
>>> had a chance to occur.
>>> 
>>> No IPR declarations have been submitted directly on this I-D.
>> 
>>   _______________________________________________
>>   Idr mailing list
>>   Idr@ietf.org
>>   https://www.ietf.org/mailman/listinfo/idr
>> 
>> 
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr


From nobody Wed Apr 19 14:18:07 2017
Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B39F312EA93 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 14:18:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nhV8GtVmbLIK for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 14:18:03 -0700 (PDT)
Received: from mobil.space.net (mobil.space.net [IPv6:2001:608:2:81::67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C3371129ABE for <idr@ietf.org>; Wed, 19 Apr 2017 14:18:03 -0700 (PDT)
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id F061760635 for <idr@ietf.org>; Wed, 19 Apr 2017 23:18:01 +0200 (CEST)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id AB873602B6; Wed, 19 Apr 2017 23:18:01 +0200 (CEST)
Received: by moebius4.space.net (Postfix, from userid 1007) id 9CC9823A66; Wed, 19 Apr 2017 23:18:01 +0200 (CEST)
Date: Wed, 19 Apr 2017 23:18:01 +0200
From: Gert Doering <gert@space.net>
To: Jared Mauch <jared@puck.nether.net>
Cc: "Acee Lindem (acee)" <acee@cisco.com>, Keyur Patel <keyur@arrcus.com>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170419211801.GW25069@Space.Net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net>
X-NCC-RegID: de.space
User-Agent: Mutt/1.7.2 (2016-11-26)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/fy69vuHJmURa7Um82CHNGeBOxsw>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 21:18:06 -0000

Hi,

On Wed, Apr 19, 2017 at 05:08:43PM -0400, Jared Mauch wrote:
> If someone sets insecure mode they can  e as promiscuous as they want.  
> 
> That mode can have a very low bar IMO. 

This.

If you want "permit any in, any out", nothing in this draft prevents
doing so - but the *default* needs to be "nothing in, nothing out,
unless at least one switch is turned to change that" (= policy configured,
or "I want this to be open" configured).

Gert Doering
        -- Operator, occasional BGP trainer, network hygiene preacher
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279


From nobody Wed Apr 19 15:12:54 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 183A012944D for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 15:12:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.619
X-Spam-Level: 
X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KHCQ0txes-SV for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 15:12:50 -0700 (PDT)
Received: from relais-inet.orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE21D129BBF for <idr@ietf.org>; Wed, 19 Apr 2017 15:12:49 -0700 (PDT)
Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar20.francetelecom.fr (ESMTP service) with ESMTP id 9C3F2120653; Thu, 20 Apr 2017 00:12:48 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.72]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 7CC73C005C; Thu, 20 Apr 2017 00:12:48 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541%19]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 00:12:48 +0200
From: <bruno.decraene@orange.com>
To: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuSz83ZOTfNxQXEupYB1KLWck6qHNOHCw
Date: Wed, 19 Apr 2017 22:12:48 +0000
Message-ID: <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net>
In-Reply-To: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.3]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/aE0qAHnXPem6kqAF5T2YYeenadw>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 22:12:53 -0000

Thanks John for bringing this in IDR.

I admit that I was not following this subject so my comments might be redun=
dant or even stupid.

1) Am I missing something or would this break all existing EBGP sessions de=
ployed with no policy?
If so this would definitely not be deployment friendly. Especially for BGP/=
MPLS VPN networks using EBGP for PE-CE routing and which have little use of=
 filtering policies.

2) BTW, what is exactly eligible as an "import policy"? e.g.
- is an explicit policy capping the number of received routes eligible as a=
n "import policy"?=20
- is Route Target filtering (either automatic or manual) a routing policy?

Same question of "export policy". e.g.
Is an expert policy tagging community eligible?


3) From the introduction
"   There are BGP routing security issues that need to be addressed to
   make the Internet more stable. [...]  This document provides guidance to=
 BGP [RFC4271]
   implementers to improve the default level of Internet routing
   security."

Does this mean that this proposition should be restricted to Internet routi=
ng? (while BGP is used for many others applications)

4) Alternatively, there could be a (capability) signaling during the OPEN o=
f the EBGP session. With one end requesting this behavior to its peer. (or =
alternatively it's peer advertising the presence of a policy and the receiv=
er taking its own decision).

Possibly, some of the requirements may already be addressed by configuring =
a policy limiting the number of routes acceptable from a peer/customers, an=
d closing the EBGP sessions when this limit is reached. This seems this wou=
ld catch customers/peers advertising the full routing by mistake/misconfigu=
ration.

Thanks
Regards,
--Bruno

> From John G. Scudder  > Sent: Wednesday, April 19, 2017 6:50 PM
>=20
 > IDR folks,
 >=20
 > As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has c=
ompleted GROW
 > WGLC and is now in IETF LC.
 >=20
 > As nobody other than Alvaro noticed (thank you for noticing, Alvaro!) dr=
aft-ietf-grow-bgp-
 > reject-05 represents an update to RFC 4271, in that it mandates what a B=
GP implementation
 > MUST do. See section 2 of the draft for the details. It's short and easy=
 to read.
 >=20
 > If we had noticed this earlier, we would have either chosen to home the =
document in IDR,
 > or explicitly made an exception to have GROW do the work. Given that we =
didn't, though,
 > the plan is to continue progressing the draft as a GROW document. Howeve=
r:
 >=20
 > - As I understand it, the authors will add the Updates: 4271 header in a=
ddition to potentially
 > taking in other comments from AD review.
 > - If anyone has a strong objection to the unusual procedure, please say =
so (either on-list, or
 > to the chairs + AD).
 > - Please send any last call comments to the IETF LC (see below) although=
 it's also OK to
 > discuss here on the IDR list of course.
 >=20
 > Many IDR participants are also active in GROW and have had their say, bu=
t if you haven't,
 > now's your chance.
 >=20
 > Thanks,
 >=20
 > --John
 >=20
 > > Begin forwarded message:
 > >
 > > From: The IESG <iesg-secretary@ietf.org>
 > > Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP =
Route Propagation
 > Behavior Without Policies) to Proposed Standard
 > > Date: April 18, 2017 at 5:16:05 PM EDT
 > > To: "IETF-Announce" <ietf-announce@ietf.org>
 > > Cc: grow-chairs@ietf.org, grow@ietf.org, draft-ietf-grow-bgp-reject@ie=
tf.org,
 > christopher.morrow@gmail.com
 > > Reply-To: ietf@ietf.org
 > >
 > >
 > > The IESG has received a request from the Global Routing Operations WG
 > > (grow) to consider the following document:
 > > - 'Default EBGP Route Propagation Behavior Without Policies'
 > > <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
 > >
 > > The IESG plans to make a decision in the next few weeks, and solicits
 > > final comments on this action. Please send substantive comments to the
 > > ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments may=
 be
 > > sent to iesg@ietf.org instead. In either case, please retain the
 > > beginning of the Subject line to allow automated sorting.
 > >
 > > Abstract
 > >
 > >  This document defines the default behavior of a BGP speaker when
 > >  there is no import or export policy associated with an External BGP
 > >  session.
 > >
 > >
 > > The file can be obtained via
 > > https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
 > >
 > > IESG discussion can be tracked via
 > > https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
 > >
 > > This IETF LC, which originally concluded on 2017-04-18, is being
 > > extended to allow for additional input to be provided. Ops AD (for GRO=
W)
 > > and Routing AD (for IDR) wish to ensure that cross WG discussions have
 > > had a chance to occur.
 > >
 > > No IPR declarations have been submitted directly on this I-D.
 >=20
 > _______________________________________________
 > Idr mailing list
 > Idr@ietf.org
 > https://www.ietf.org/mailman/listinfo/idr

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Wed Apr 19 15:16:27 2017
Return-Path: <keyur@arrcus.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34EF012950A for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 15:16:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=netorgft1331857.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Q8EMbRxO8WX for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 15:16:24 -0700 (PDT)
Received: from dispatch1-us1.ppe-hosted.com (dispatch1-us1.ppe-hosted.com [67.231.154.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DD75129BCE for <idr@ietf.org>; Wed, 19 Apr 2017 15:16:24 -0700 (PDT)
Received: from pure.maildistiller.com (unknown [10.110.50.29]) by dispatch1-us1.ppe-hosted.com (Proofpoint Essentials ESMTP Server) with ESMTP id 8F48660059; Wed, 19 Apr 2017 22:16:21 +0000 (UTC)
X-Virus-Scanned: Proofpoint Essentials engine
Received: from mx2-us4.ppe-hosted.com (unknown [10.110.49.251]) by pure.maildistiller.com (Proofpoint Essentials ESMTP Server) with ESMTPS id B50788004C; Wed, 19 Apr 2017 22:16:20 +0000 (UTC)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01lp0177.outbound.protection.outlook.com [216.32.181.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mx2-us4.ppe-hosted.com (Proofpoint Essentials ESMTP Server) with ESMTPS id BF3B420077; Wed, 19 Apr 2017 22:16:16 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=NETORGFT1331857.onmicrosoft.com; s=selector1-arrcus-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=E0aeMM4zijWosLn6lf60D3mdMgutgEQSoGIPCgZ0KM8=; b=NDxseR5i1+jcuxQ53vlTf9WtYnnkN1wdwYofECeVBC2QG2gKaH24/tbhI8GP9DtJcArnvxIT/6roPERfVpzH7VzcB+wiQA9mO0gtaWxTF4rMwtK+ySXAkbZpSUY0oTZjWoagHAd/QXjKCqtR439QoCgUcCi1XRBIKy91YziQHrI=
Received: from BY2PR18MB0262.namprd18.prod.outlook.com (10.163.72.152) by BY2PR18MB0262.namprd18.prod.outlook.com (10.163.72.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10; Wed, 19 Apr 2017 22:16:14 +0000
Received: from BY2PR18MB0262.namprd18.prod.outlook.com ([10.163.72.152]) by BY2PR18MB0262.namprd18.prod.outlook.com ([10.163.72.152]) with mapi id 15.01.1034.018; Wed, 19 Apr 2017 22:16:14 +0000
From: Keyur Patel <keyur@arrcus.com>
To: Jared Mauch <jared@puck.nether.net>, "Acee Lindem (acee)" <acee@cisco.com>
CC: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, "Hares Susan" <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuSz+QxMnaaMdpE6dWAZuvCqOqKHMs4OAgAB5mwCAAALIgP//nYOA
Date: Wed, 19 Apr 2017 22:16:14 +0000
Message-ID: <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net>
In-Reply-To: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: puck.nether.net; dkim=none (message not signed) header.d=none; puck.nether.net; dmarc=none action=none header.from=arrcus.com; 
x-originating-ip: [2601:646:8981:c940:c9b1:9b87:e733:11bc]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BY2PR18MB0262; 7:khmgdwAl3PsRKdZBXADi6jzW3lg1ZHXTsMqhCKaW43DHrwcoxB83sTPQx04AolrEpLFikUAoWTTMK/rb1aY6DsKgqNknvf9e6BgJKgK+E16CBQu4EsM/EBgEDke9DESJr/pLC+9D2Y8wKv9kk+A1QzBsROxl0vpWy7uiSWdWimB6wCV4naMeMVmWRlYa5ss96xJqmMi+9D9t0ZKZQqcwXw/ttcsaay8WdMsTcmzkM2VsKoFCdDRqZrQuq1iKxMkPoP1v3R1x913TkH5di9/IWLJbfGckQW8EaMKwIkkAbko4KVojeErjHNW0PaaAULBtIhkNmVUNngYhhpvFEKhjjg==
x-ms-office365-filtering-correlation-id: 49851048-868d-49b2-5e5c-08d48771b16d
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(201703131423075); SRVR:BY2PR18MB0262; 
x-microsoft-antispam-prvs: <BY2PR18MB0262BEB59CB63C38B71C4812C1180@BY2PR18MB0262.namprd18.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(124276396282122)(120809045254105)(138986009662008)(95692535739014)(62015456732948);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(2002001)(6041248)(201703131423075)(201702281528075)(201703061421075)(20161123562025)(20161123560025)(2016111802025)(20161123555025)(20161123564025)(6072148)(6043046); SRVR:BY2PR18MB0262; BCL:0; PCL:0; RULEID:; SRVR:BY2PR18MB0262; 
x-forefront-prvs: 028256169F
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(39450400003)(39400400002)(39830400002)(39410400002)(377454003)(377424004)(24454002)(6436002)(8676002)(83716003)(53546009)(8666007)(4326008)(38730400002)(53936002)(230783001)(6486002)(7736002)(2900100001)(345774005)(25786009)(189998001)(77096006)(6506006)(82746002)(3660700001)(3280700002)(122556002)(5660300001)(99286003)(6512007)(6246003)(8936002)(2906002)(229853002)(33656002)(54906002)(6306002)(6116002)(102836003)(50986999)(86362001)(81166006)(2950100002)(93886004)(305945005)(76176999)(54356999)(36756003)(50929005)(24704002); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR18MB0262; H:BY2PR18MB0262.namprd18.prod.outlook.com; FPR:; SPF:None; MLV:nov; PTR:InfoNoRecords; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <212D199497048A418C741DE91566CDE8@namprd18.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: arrcus.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Apr 2017 22:16:14.2680 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 697b3529-5c2b-40cf-a019-193eb78f6820
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR18MB0262
X-MDID: 1492640181-wjcy6zXU7syw
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/jVl0tG_Eaucxjp58GyD2X65TlNc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 22:16:26 -0000
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From nobody Wed Apr 19 15:26:06 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B626129BCE for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 15:26:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LufryWGVVcg6 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 15:26:02 -0700 (PDT)
Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F57E127A97 for <idr@ietf.org>; Wed, 19 Apr 2017 15:26:02 -0700 (PDT)
Received: by mail-io0-x22a.google.com with SMTP id k87so40486315ioi.0 for <idr@ietf.org>; Wed, 19 Apr 2017 15:26:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=DMOxUZBxLgCDlsKrpJNHZ9FxZ68QqN09PcLcDEQAZqg=; b=ouDYs2PF10HKHs02eEDipSS21KhDkINRLoaz7AgxtdwdzZSRI3EpowFSC21J9dODq+ EXFEfvpB2ZpT5DmCcG1C1i8+sbHWO8rRzsrtoRrJ02lXUj5c1NTTAkFGzqluj/rnlHKF EP9NnHGT85SSmGU8M4UEX75Bc/CCUWaDdNdHmFYNNs6buQ8odn5Ji/8N8e7dxjocSu7c l8ttlM6gG+CrX/wBnC93X1Q0SjCC04yLJQLRh+Lv7Iy9OCDfEDyePy/zlj+0RcMcOdUM SUbHNAeIDAMkLsWhCI51Gcgc9Js0eI5UjzD0+tgVQ69oXylcA2sHGw65k2Xl75eNO+Wy AKfg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=DMOxUZBxLgCDlsKrpJNHZ9FxZ68QqN09PcLcDEQAZqg=; b=rwNd3+Z9o8gJc/GImEPI1nkJeExqQoytzyBAV7UYZ2WAUuddGxN8coVUmXcdw9A0O0 BZdREtYSkprbW0ss9tAdEgsK42DDz+QpeRGStB2RTf0aQhIkENCZQlQlmFHcxUpoHf3N f1/dyQLqQnD6dGk2zBInZNh2z7GqoTT+33OQsoS4/zIvw/xu3bjc1GFOPoAPuaOunwf9 HY3LO0KK52C1/yu92hf6Yp1C53cPjKSaMahh8YdUvVosvacqrAqumVEAMTtQ4kuqVeqn ABegW6xWE3SL8t4EDJMpkOyJ65TjLfEsT1RA8GL+RorSBrFnRuP2GD2IW/nepfI4+DvF n7yA==
X-Gm-Message-State: AN3rC/7kGZhovLCM/DnkKdZBcfyloWB3coK3yshamTdLj5QAKA09nl16 ywymv9UvnTOQdwg5BDGBZFFBpxBBOw==
X-Received: by 10.36.46.81 with SMTP id i78mr355262ita.39.1492640761331; Wed, 19 Apr 2017 15:26:01 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Wed, 19 Apr 2017 15:26:00 -0700 (PDT)
In-Reply-To: <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 20 Apr 2017 00:26:00 +0200
X-Google-Sender-Auth: eC7WqvDzCut51HllT7GZKHVnzKQ
Message-ID: <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com>
To: Keyur Patel <keyur@arrcus.com>
Cc: Jared Mauch <jared@puck.nether.net>, "Acee Lindem (acee)" <acee@cisco.com>, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114a93ce5b4754054d8c821f
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/4Tm1pnjwkzyr5cckvlpKVgVQARc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 22:26:05 -0000

--001a114a93ce5b4754054d8c821f
Content-Type: text/plain; charset=UTF-8

Keyur,

You can not set "insecure mode" before you reload the OS as current OS does
not have such knob. Unless you delay the deployment across N releases and
enforce sequenced upgrade.

The only way to prevent massive reachability failure upon reload due to
complete silent bgp prefix drop is to configure inbound policy for all EBGP
sessions before the reload and run with new image.

Of course this is all assuming that someone will read carefully the release
notes :)

If they do not the troubleshooting of this will be really painful ! CE will
see EBGP session as UP, will get all the routes and will send his routes.
CE will have no clue if PE dropped or accepted his routes. Likewise on the
other end .. Only imagine a network which has 10s of thousands of VPN CEs
as Bruno mentioned and their provider not following all releases CEs are
running.

At least doing it as part of OPEN msg will be immediately indicated to both
ends.

//R


On Thu, Apr 20, 2017 at 12:16 AM, Keyur Patel <keyur@arrcus.com> wrote:

> And that would be good enough if that would allow exemptions of DC
> networks and any other networks that may need exemption.
>
> In that case I support the publication.
>
> Regards,
> Keyur
>
> On 4/19/17, 2:08 PM, "Jared Mauch" <jared@puck.nether.net> wrote:
>
>     If someone sets insecure mode they can  e as promiscuous as they want.
>
>     That mode can have a very low bar IMO.
>
>     Jared Mauch
>
>     > On Apr 19, 2017, at 4:58 PM, Acee Lindem (acee) <acee@cisco.com>
> wrote:
>     >
>     > I would agree with Keyur, For better or worse, our Cisco NX-OS BGP
>     > implementation does not require configuration of a peer policy.
>     >
>     > In fact, this requirement is contrary to some of the auto-discovery
>     > mechanisms we are exploring where only knowledge of the mutual
> address
>     > families is required.
>     >
>     > Thanks,
>     > Acee
>     >
>     > On 4/19/17, 4:43 PM, "Idr on behalf of Keyur Patel" <
> idr-bounces@ietf.org
>     > on behalf of keyur@arrcus.com> wrote:
>     >
>     >> Thank you John for bringing it on IDR.
>     >>
>     >> As an update to RFC4271, I am not sure if I agree with the EBGP
> policy
>     >> configuration. There are lot of DC networks (for example) that use
> EBGP
>     >> within their CLOS. This extension may not be applicable in such
> networks.
>     >>
>     >> I would request authors to consider refining text to include
> appropriate
>     >> EBGP use cases and not make it generic for EBGP sessions (defined in
>     >> 4271).
>     >>
>     >> Regards,
>     >> Keyur
>     >>
>     >>
>     >> On 4/19/17, 9:49 AM, "Idr on behalf of John G. Scudder"
>     >> <idr-bounces@ietf.org on behalf of jgs@juniper.net> wrote:
>     >>
>     >>   IDR folks,
>     >>
>     >>   As many of you have already noticed, draft-ietf-grow-bgp-reject-05
>     >> has completed GROW WGLC and is now in IETF LC.
>     >>
>     >>   As nobody other than Alvaro noticed (thank you for noticing,
> Alvaro!)
>     >> draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in
> that
>     >> it mandates what a BGP implementation MUST do. See section 2 of the
> draft
>     >> for the details. It's short and easy to read.
>     >>
>     >>   If we had noticed this earlier, we would have either chosen to
> home
>     >> the document in IDR, or explicitly made an exception to have GROW
> do the
>     >> work. Given that we didn't, though, the plan is to continue
> progressing
>     >> the draft as a GROW document. However:
>     >>
>     >>   - As I understand it, the authors will add the Updates: 4271
> header
>     >> in addition to potentially taking in other comments from AD review.
>     >>   - If anyone has a strong objection to the unusual procedure,
> please
>     >> say so (either on-list, or to the chairs + AD).
>     >>   - Please send any last call comments to the IETF LC (see below)
>     >> although it's also OK to discuss here on the IDR list of course.
>     >>
>     >>   Many IDR participants are also active in GROW and have had their
> say,
>     >> but if you haven't, now's your chance.
>     >>
>     >>   Thanks,
>     >>
>     >>   --John
>     >>
>     >>> Begin forwarded message:
>     >>>
>     >>> From: The IESG <iesg-secretary@ietf.org>
>     >>> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default
>     >> EBGP Route Propagation Behavior Without Policies) to Proposed
> Standard
>     >>> Date: April 18, 2017 at 5:16:05 PM EDT
>     >>> To: "IETF-Announce" <ietf-announce@ietf.org>
>     >>> Cc: grow-chairs@ietf.org, grow@ietf.org,
>     >> draft-ietf-grow-bgp-reject@ietf.org, christopher.morrow@gmail.com
>     >>> Reply-To: ietf@ietf.org
>     >>>
>     >>>
>     >>> The IESG has received a request from the Global Routing Operations
>     >> WG
>     >>> (grow) to consider the following document:
>     >>> - 'Default EBGP Route Propagation Behavior Without Policies'
>     >>> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>     >>>
>     >>> The IESG plans to make a decision in the next few weeks, and
>     >> solicits
>     >>> final comments on this action. Please send substantive comments to
>     >> the
>     >>> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments
>     >> may be
>     >>> sent to iesg@ietf.org instead. In either case, please retain the
>     >>> beginning of the Subject line to allow automated sorting.
>     >>>
>     >>> Abstract
>     >>>
>     >>> This document defines the default behavior of a BGP speaker when
>     >>> there is no import or export policy associated with an External BGP
>     >>> session.
>     >>>
>     >>>
>     >>> The file can be obtained via
>     >>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>     >>>
>     >>> IESG discussion can be tracked via
>     >>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-
> reject/ballot/
>     >>>
>     >>> This IETF LC, which originally concluded on 2017-04-18, is being
>     >>> extended to allow for additional input to be provided. Ops AD (for
>     >> GROW)
>     >>> and Routing AD (for IDR) wish to ensure that cross WG discussions
>     >> have
>     >>> had a chance to occur.
>     >>>
>     >>> No IPR declarations have been submitted directly on this I-D.
>     >>
>     >>   _______________________________________________
>     >>   Idr mailing list
>     >>   Idr@ietf.org
>     >>   https://www.ietf.org/mailman/listinfo/idr
>     >>
>     >>
>     >> _______________________________________________
>     >> Idr mailing list
>     >> Idr@ietf.org
>     >> https://www.ietf.org/mailman/listinfo/idr
>     >
>     > _______________________________________________
>     > Idr mailing list
>     > Idr@ietf.org
>     > https://www.ietf.org/mailman/listinfo/idr
>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a114a93ce5b4754054d8c821f
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Keyur,</div><div class=3D"gmail_default=
" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></di=
v><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-se=
rif;font-size:small">You can not set &quot;insecure mode&quot; before you r=
eload the OS as current OS does not have such knob. Unless you delay the de=
ployment across N releases and enforce sequenced upgrade.</div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,=
helvetica,sans-serif;font-size:small">The only way to prevent massive reach=
ability failure upon reload due to complete silent bgp prefix drop is to co=
nfigure inbound policy for all EBGP sessions before the reload and run with=
 new image.=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:ar=
ial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_def=
ault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">Of c=
ourse this is all assuming that someone will read carefully the release not=
es :)=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small">If they do=
 not the troubleshooting of this will be really painful ! CE will see EBGP =
session as UP, will get all the routes and will send his routes. CE will ha=
ve no clue if PE dropped or accepted his routes. Likewise on the other end =
.. Only imagine a network which has 10s of thousands of VPN CEs as Bruno me=
ntioned and their provider not following all releases CEs are running.=C2=
=A0</div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,=
sans-serif;font-size:small"><br></div><div class=3D"gmail_default" style=3D=
"font-family:arial,helvetica,sans-serif;font-size:small">At least doing it =
as part of OPEN msg will be immediately indicated to both ends.=C2=A0</div>=
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small"><br></div><div class=3D"gmail_default" style=3D"font-fam=
ily:arial,helvetica,sans-serif;font-size:small">//R</div><div class=3D"gmai=
l_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"=
><br></div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">=
On Thu, Apr 20, 2017 at 12:16 AM, Keyur Patel <span dir=3D"ltr">&lt;<a href=
=3D"mailto:keyur@arrcus.com" target=3D"_blank">keyur@arrcus.com</a>&gt;</sp=
an> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;=
border-left:1px #ccc solid;padding-left:1ex">And that would be good enough =
if that would allow exemptions of DC networks and any other networks that m=
ay need exemption.<br>
<br>
In that case I support the publication.<br>
<br>
Regards,<br>
Keyur<br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
On 4/19/17, 2:08 PM, &quot;Jared Mauch&quot; &lt;<a href=3D"mailto:jared@pu=
ck.nether.net">jared@puck.nether.net</a>&gt; wrote:<br>
<br>
=C2=A0 =C2=A0 If someone sets insecure mode they can=C2=A0 e as promiscuous=
 as they want.<br>
<br>
=C2=A0 =C2=A0 That mode can have a very low bar IMO.<br>
<br>
=C2=A0 =C2=A0 Jared Mauch<br>
<br>
=C2=A0 =C2=A0 &gt; On Apr 19, 2017, at 4:58 PM, Acee Lindem (acee) &lt;<a h=
ref=3D"mailto:acee@cisco.com">acee@cisco.com</a>&gt; wrote:<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; I would agree with Keyur, For better or worse, our Cisco=
 NX-OS BGP<br>
=C2=A0 =C2=A0 &gt; implementation does not require configuration of a peer =
policy.<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; In fact, this requirement is contrary to some of the aut=
o-discovery<br>
=C2=A0 =C2=A0 &gt; mechanisms we are exploring where only knowledge of the =
mutual address<br>
=C2=A0 =C2=A0 &gt; families is required.<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; Thanks,<br>
=C2=A0 =C2=A0 &gt; Acee<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; On 4/19/17, 4:43 PM, &quot;Idr on behalf of Keyur Patel&=
quot; &lt;<a href=3D"mailto:idr-bounces@ietf.org">idr-bounces@ietf.org</a><=
br>
=C2=A0 =C2=A0 &gt; on behalf of <a href=3D"mailto:keyur@arrcus.com">keyur@a=
rrcus.com</a>&gt; wrote:<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt;&gt; Thank you John for bringing it on IDR.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt; As an update to RFC4271, I am not sure if I agree wi=
th the EBGP policy<br>
=C2=A0 =C2=A0 &gt;&gt; configuration. There are lot of DC networks (for exa=
mple) that use EBGP<br>
=C2=A0 =C2=A0 &gt;&gt; within their CLOS. This extension may not be applica=
ble in such networks.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt; I would request authors to consider refining text to=
 include appropriate<br>
=C2=A0 =C2=A0 &gt;&gt; EBGP use cases and not make it generic for EBGP sess=
ions (defined in<br>
=C2=A0 =C2=A0 &gt;&gt; 4271).<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt; Regards,<br>
=C2=A0 =C2=A0 &gt;&gt; Keyur<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt; On 4/19/17, 9:49 AM, &quot;Idr on behalf of John G. =
Scudder&quot;<br>
=C2=A0 =C2=A0 &gt;&gt; &lt;<a href=3D"mailto:idr-bounces@ietf.org">idr-boun=
ces@ietf.org</a> on behalf of <a href=3D"mailto:jgs@juniper.net">jgs@junipe=
r.net</a>&gt; wrote:<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0IDR folks,<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0As many of you have already noticed, dra=
ft-ietf-grow-bgp-reject-05<br>
=C2=A0 =C2=A0 &gt;&gt; has completed GROW WGLC and is now in IETF LC.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0As nobody other than Alvaro noticed (tha=
nk you for noticing, Alvaro!)<br>
=C2=A0 =C2=A0 &gt;&gt; draft-ietf-grow-bgp-reject-05 represents an update t=
o RFC 4271, in that<br>
=C2=A0 =C2=A0 &gt;&gt; it mandates what a BGP implementation MUST do. See s=
ection 2 of the draft<br>
=C2=A0 =C2=A0 &gt;&gt; for the details. It&#39;s short and easy to read.<br=
>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0If we had noticed this earlier, we would=
 have either chosen to home<br>
=C2=A0 =C2=A0 &gt;&gt; the document in IDR, or explicitly made an exception=
 to have GROW do the<br>
=C2=A0 =C2=A0 &gt;&gt; work. Given that we didn&#39;t, though, the plan is =
to continue progressing<br>
=C2=A0 =C2=A0 &gt;&gt; the draft as a GROW document. However:<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0- As I understand it, the authors will a=
dd the Updates: 4271 header<br>
=C2=A0 =C2=A0 &gt;&gt; in addition to potentially taking in other comments =
from AD review.<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0- If anyone has a strong objection to th=
e unusual procedure, please<br>
=C2=A0 =C2=A0 &gt;&gt; say so (either on-list, or to the chairs + AD).<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0- Please send any last call comments to =
the IETF LC (see below)<br>
=C2=A0 =C2=A0 &gt;&gt; although it&#39;s also OK to discuss here on the IDR=
 list of course.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0Many IDR participants are also active in=
 GROW and have had their say,<br>
=C2=A0 =C2=A0 &gt;&gt; but if you haven&#39;t, now&#39;s your chance.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0Thanks,<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0--John<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Begin forwarded message:<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; From: The IESG &lt;<a href=3D"mailto:iesg-secret=
ary@ietf.org">iesg-secretary@ietf.org</a>&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Subject: Last Call: &lt;draft-ietf-grow-bgp-reje=
ct-<wbr>05.txt&gt; (Default<br>
=C2=A0 =C2=A0 &gt;&gt; EBGP Route Propagation Behavior Without Policies) to=
 Proposed Standard<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Date: April 18, 2017 at 5:16:05 PM EDT<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; To: &quot;IETF-Announce&quot; &lt;<a href=3D"mai=
lto:ietf-announce@ietf.org">ietf-announce@ietf.org</a>&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Cc: <a href=3D"mailto:grow-chairs@ietf.org">grow=
-chairs@ietf.org</a>, <a href=3D"mailto:grow@ietf.org">grow@ietf.org</a>,<b=
r>
=C2=A0 =C2=A0 &gt;&gt; <a href=3D"mailto:draft-ietf-grow-bgp-reject@ietf.or=
g">draft-ietf-grow-bgp-reject@<wbr>ietf.org</a>, <a href=3D"mailto:christop=
her.morrow@gmail.com">christopher.morrow@gmail.com</a><br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Reply-To: <a href=3D"mailto:ietf@ietf.org">ietf@=
ietf.org</a><br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; The IESG has received a request from the Global =
Routing Operations<br>
=C2=A0 =C2=A0 &gt;&gt; WG<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; (grow) to consider the following document:<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; - &#39;Default EBGP Route Propagation Behavior W=
ithout Policies&#39;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; &lt;draft-ietf-grow-bgp-reject-<wbr>05.txt&gt; a=
s Proposed Standard<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; The IESG plans to make a decision in the next fe=
w weeks, and<br>
=C2=A0 =C2=A0 &gt;&gt; solicits<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; final comments on this action. Please send subst=
antive comments to<br>
=C2=A0 =C2=A0 &gt;&gt; the<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; <a href=3D"mailto:ietf@ietf.org">ietf@ietf.org</=
a> mailing lists by 2017-05-02. Exceptionally, comments<br>
=C2=A0 =C2=A0 &gt;&gt; may be<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; sent to <a href=3D"mailto:iesg@ietf.org">iesg@ie=
tf.org</a> instead. In either case, please retain the<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; beginning of the Subject line to allow automated=
 sorting.<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Abstract<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; This document defines the default behavior of a =
BGP speaker when<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; there is no import or export policy associated w=
ith an External BGP<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; session.<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; The file can be obtained via<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; <a href=3D"https://datatracker.ietf.org/doc/draf=
t-ietf-grow-bgp-reject/" rel=3D"noreferrer" target=3D"_blank">https://datat=
racker.ietf.org/<wbr>doc/draft-ietf-grow-bgp-<wbr>reject/</a><br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; IESG discussion can be tracked via<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; <a href=3D"https://datatracker.ietf.org/doc/draf=
t-ietf-grow-bgp-reject/ballot/" rel=3D"noreferrer" target=3D"_blank">https:=
//datatracker.ietf.org/<wbr>doc/draft-ietf-grow-bgp-<wbr>reject/ballot/</a>=
<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; This IETF LC, which originally concluded on 2017=
-04-18, is being<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; extended to allow for additional input to be pro=
vided. Ops AD (for<br>
=C2=A0 =C2=A0 &gt;&gt; GROW)<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; and Routing AD (for IDR) wish to ensure that cro=
ss WG discussions<br>
=C2=A0 =C2=A0 &gt;&gt; have<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; had a chance to occur.<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; No IPR declarations have been submitted directly=
 on this I-D.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0______________________________<wbr>_____=
____________<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0Idr mailing list<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0<a href=3D"mailto:Idr@ietf.org">Idr@ietf=
.org</a><br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0<a href=3D"https://www.ietf.org/mailman/=
listinfo/idr" rel=3D"noreferrer" target=3D"_blank">https://www.ietf.org/mai=
lman/<wbr>listinfo/idr</a><br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt; ______________________________<wbr>_________________=
<br>
=C2=A0 =C2=A0 &gt;&gt; Idr mailing list<br>
=C2=A0 =C2=A0 &gt;&gt; <a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
=C2=A0 =C2=A0 &gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/idr=
" rel=3D"noreferrer" target=3D"_blank">https://www.ietf.org/mailman/<wbr>li=
stinfo/idr</a><br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; ______________________________<wbr>_________________<br>
=C2=A0 =C2=A0 &gt; Idr mailing list<br>
=C2=A0 =C2=A0 &gt; <a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
=C2=A0 =C2=A0 &gt; <a href=3D"https://www.ietf.org/mailman/listinfo/idr" re=
l=3D"noreferrer" target=3D"_blank">https://www.ietf.org/mailman/<wbr>listin=
fo/idr</a><br>
<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--001a114a93ce5b4754054d8c821f--


From nobody Wed Apr 19 15:53:52 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90EBF129B66 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 15:53:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 64ogaMLlOgdM for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 15:53:48 -0700 (PDT)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99F721273E2 for <idr@ietf.org>; Wed, 19 Apr 2017 15:53:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3797; q=dns/txt; s=iport; t=1492642428; x=1493852028; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=VvYXf6j1pybuxQQE4QjJy9stW2opugFGpEHuuPnsGU8=; b=FBp95JxEfodmzr+yNbZqEi3Y52Ll0sKPh5BPPh0P0av7O0AQnL3s6Xf1 XXrrTR+YnlCqYhn7qLXoztqs+2/S/IKMplQGJ3dvA39cxBkOZEyUiPWJM AwzARGmN2bTe0sRRCMkR0vPV9aITZG9s2N7la7KxZXCaGDpRgotNlcwxE M=;
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800"; d="scan'208";a="232883848"
Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Apr 2017 22:53:48 +0000
Received: from [10.41.56.53] ([10.41.56.53]) by rcdn-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v3JMrkA6021235; Wed, 19 Apr 2017 22:53:47 GMT
To: "John G. Scudder" <jgs@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net>
Cc: idr@ietf.org, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com>
Date: Wed, 19 Apr 2017 15:53:46 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Ic0od7qB_dXKxTopyx3J2onpffQ>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 22:53:51 -0000

Hi, Folks:

The document defines or changes the "default behavior" for EBGP.  However, the default
behavior for a particular code base or release was set long time ago, and in some cases
more than 20 years ago. To avoid breaking existing deployment in this case, the default
behavior in the code can not be changed (with or without this document). Then it becomes
a deployment practice for the policies to be configured.

So it seems to me that "Standard Track" may not be the right classification for this
document.  "Deployment recommendation or Practice" might be more appropriate.

Thanks.  -- Enke

On 4/19/17 9:49 AM, John G. Scudder wrote:
> IDR folks,
> 
> As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has completed GROW WGLC and is now in IETF LC.
> 
> As nobody other than Alvaro noticed (thank you for noticing, Alvaro!) draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that it mandates what a BGP implementation MUST do. See section 2 of the draft for the details. It's short and easy to read.
> 
> If we had noticed this earlier, we would have either chosen to home the document in IDR, or explicitly made an exception to have GROW do the work. Given that we didn't, though, the plan is to continue progressing the draft as a GROW document. However:
> 
> - As I understand it, the authors will add the Updates: 4271 header in addition to potentially taking in other comments from AD review.
> - If anyone has a strong objection to the unusual procedure, please say so (either on-list, or to the chairs + AD).
> - Please send any last call comments to the IETF LC (see below) although it's also OK to discuss here on the IDR list of course.
> 
> Many IDR participants are also active in GROW and have had their say, but if you haven't, now's your chance.
> 
> Thanks,
> 
> --John
> 
>> Begin forwarded message:
>>
>> From: The IESG <iesg-secretary@ietf.org>
>> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
>> Date: April 18, 2017 at 5:16:05 PM EDT
>> To: "IETF-Announce" <ietf-announce@ietf.org>
>> Cc: grow-chairs@ietf.org, grow@ietf.org, draft-ietf-grow-bgp-reject@ietf.org, christopher.morrow@gmail.com
>> Reply-To: ietf@ietf.org
>>
>>
>> The IESG has received a request from the Global Routing Operations WG
>> (grow) to consider the following document:
>> - 'Default EBGP Route Propagation Behavior Without Policies'
>> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>>
>> The IESG plans to make a decision in the next few weeks, and solicits
>> final comments on this action. Please send substantive comments to the
>> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments may be
>> sent to iesg@ietf.org instead. In either case, please retain the
>> beginning of the Subject line to allow automated sorting.
>>
>> Abstract
>>
>>  This document defines the default behavior of a BGP speaker when
>>  there is no import or export policy associated with an External BGP
>>  session.
>>
>>
>> The file can be obtained via
>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>>
>> IESG discussion can be tracked via
>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>>
>> This IETF LC, which originally concluded on 2017-04-18, is being 
>> extended to allow for additional input to be provided. Ops AD (for GROW) 
>> and Routing AD (for IDR) wish to ensure that cross WG discussions have 
>> had a chance to occur.
>>
>> No IPR declarations have been submitted directly on this I-D.
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
> 


From nobody Wed Apr 19 16:13:37 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D6E7128792 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:13:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AAlBVdGyRsK5 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:13:34 -0700 (PDT)
Received: from mail-io0-x22d.google.com (mail-io0-x22d.google.com [IPv6:2607:f8b0:4001:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CA0F1273E2 for <idr@ietf.org>; Wed, 19 Apr 2017 16:13:34 -0700 (PDT)
Received: by mail-io0-x22d.google.com with SMTP id o22so45058502iod.3 for <idr@ietf.org>; Wed, 19 Apr 2017 16:13:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=qWugX5H9tJMv8c1cbjpy9lSzrpCnuiXhHfca4AyZ2tA=; b=alievQD1QpQMkz3QkBfJspAFqrX+ibSbtuXSBwwTmywJCSwEMBoadPmIkFsg3qMoR2 F07eYLCkIPeb5yxilGYG+0Nk9YFta+uYfdMwWhDmSRmAQIZqvbLlqvVt1AmG/rKeBCcu lMxIt5DauNYRNwls/2h71n5Q9S6Ls0UBkr4d8n9MHfOAD0Ork/9MIj8W9nxRYvdoGKDp N44pkeAS9Y+yZOb1sCeogfT3bl31iLJPBze5aU2P3aZHPNppFMKSDDmyJuq/sY3deCCJ u99k1sNkk8UT2M1bypfRDKegOQ9ECEPAyxr9reuHnmwY6Ew1emD/k0EbdGwBpCb+Nlu+ +nAg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=qWugX5H9tJMv8c1cbjpy9lSzrpCnuiXhHfca4AyZ2tA=; b=rgksoOIsCoZdNinlY7BE7ODUV19Fy+o6h39az7WfKJS1Ul5sp/COMvUmiXD2cQsRbt XbLg84jHm+yeCSAQRr6Ot7jiv59Z2KA97496jhI00om8h3M15UP59W7BpixGRfSPiebb qQZtaSheZlMeT9jHSyQtNs5vAr8clX4D1aFIwgElKnh88Epohi5LCi4D507MXdNOjDAt xrfTl3qZGtS828Q1EKvilA8aaGKbpKyQETOopv//ZSSIMfqy94ygqpZV40EHJ2nBZX2S d2c3qAKwltBqAv4IKjEJ4u1y0TJdspVgj8iUDWNpOQqGVjiP+clA0iqE8QrTs4IOKZEC 0gcA==
X-Gm-Message-State: AN3rC/6ACOcnVeQnAd/lg1Q+qLhNpi0d58C+nWgkh6aUSJsiSSxKJGdi pXsYo76hdK8hpgcl6RTkvoChOTj+XA==
X-Received: by 10.107.140.10 with SMTP id o10mr6659357iod.139.1492643613201; Wed, 19 Apr 2017 16:13:33 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Wed, 19 Apr 2017 16:13:32 -0700 (PDT)
In-Reply-To: <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 20 Apr 2017 01:13:32 +0200
X-Google-Sender-Auth: ucVs_1vU0DcvbTD9ltNnvVlUs2o
Message-ID: <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com>
To: Enke Chen <enkechen@cisco.com>
Cc: "John G. Scudder" <jgs@juniper.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Type: multipart/alternative; boundary=94eb2c06084c575bc3054d8d2c46
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/agvqOyLZ-6Cm-THSezQHnOGu44w>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 23:13:36 -0000

--94eb2c06084c575bc3054d8d2c46
Content-Type: text/plain; charset=UTF-8

Hi Enke,

100% agreed. I said the same to authors offline earlier today as well.

Every time you define a new AFI/SAFI one can make such AFI/SAFI mandatory
to have an inbound policy or not.

If authors would go that far and define new AFI/SAFI for IPv4 and IPv6
unicast so be it. The defaults there may be changed by such spec :) And
once accepted such new AFI/SAFI may share the routes with 1/1 & 2/1 for
IBGP propagation too.

Making it a Standards Track doc for all SAFIs MP-BGP is used today seems
like a pretty bad idea.

And as far as deployment practice we already have BCP document on this for
a while ... See section 6.3.1 of BCP194

REF: https://tools.ietf.org/html/bcp194#section-6.3.1

Cheers,
R.


On Thu, Apr 20, 2017 at 12:53 AM, Enke Chen <enkechen@cisco.com> wrote:

> Hi, Folks:
>
> The document defines or changes the "default behavior" for EBGP.  However,
> the default
> behavior for a particular code base or release was set long time ago, and
> in some cases
> more than 20 years ago. To avoid breaking existing deployment in this
> case, the default
> behavior in the code can not be changed (with or without this document).
> Then it becomes
> a deployment practice for the policies to be configured.
>
> So it seems to me that "Standard Track" may not be the right
> classification for this
> document.  "Deployment recommendation or Practice" might be more
> appropriate.
>
> Thanks.  -- Enke
>
> On 4/19/17 9:49 AM, John G. Scudder wrote:
> > IDR folks,
> >
> > As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has
> completed GROW WGLC and is now in IETF LC.
> >
> > As nobody other than Alvaro noticed (thank you for noticing, Alvaro!)
> draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that it
> mandates what a BGP implementation MUST do. See section 2 of the draft for
> the details. It's short and easy to read.
> >
> > If we had noticed this earlier, we would have either chosen to home the
> document in IDR, or explicitly made an exception to have GROW do the work.
> Given that we didn't, though, the plan is to continue progressing the draft
> as a GROW document. However:
> >
> > - As I understand it, the authors will add the Updates: 4271 header in
> addition to potentially taking in other comments from AD review.
> > - If anyone has a strong objection to the unusual procedure, please say
> so (either on-list, or to the chairs + AD).
> > - Please send any last call comments to the IETF LC (see below) although
> it's also OK to discuss here on the IDR list of course.
> >
> > Many IDR participants are also active in GROW and have had their say,
> but if you haven't, now's your chance.
> >
> > Thanks,
> >
> > --John
> >
> >> Begin forwarded message:
> >>
> >> From: The IESG <iesg-secretary@ietf.org>
> >> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP
> Route Propagation Behavior Without Policies) to Proposed Standard
> >> Date: April 18, 2017 at 5:16:05 PM EDT
> >> To: "IETF-Announce" <ietf-announce@ietf.org>
> >> Cc: grow-chairs@ietf.org, grow@ietf.org, draft-ietf-grow-bgp-reject@
> ietf.org, christopher.morrow@gmail.com
> >> Reply-To: ietf@ietf.org
> >>
> >>
> >> The IESG has received a request from the Global Routing Operations WG
> >> (grow) to consider the following document:
> >> - 'Default EBGP Route Propagation Behavior Without Policies'
> >> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
> >>
> >> The IESG plans to make a decision in the next few weeks, and solicits
> >> final comments on this action. Please send substantive comments to the
> >> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments may
> be
> >> sent to iesg@ietf.org instead. In either case, please retain the
> >> beginning of the Subject line to allow automated sorting.
> >>
> >> Abstract
> >>
> >>  This document defines the default behavior of a BGP speaker when
> >>  there is no import or export policy associated with an External BGP
> >>  session.
> >>
> >>
> >> The file can be obtained via
> >> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
> >>
> >> IESG discussion can be tracked via
> >> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
> >>
> >> This IETF LC, which originally concluded on 2017-04-18, is being
> >> extended to allow for additional input to be provided. Ops AD (for GROW)
> >> and Routing AD (for IDR) wish to ensure that cross WG discussions have
> >> had a chance to occur.
> >>
> >> No IPR declarations have been submitted directly on this I-D.
> >
> > _______________________________________________
> > Idr mailing list
> > Idr@ietf.org
> > https://www.ietf.org/mailman/listinfo/idr
> >
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--94eb2c06084c575bc3054d8d2c46
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Hi Enke,</div><div class=3D"gmail_defau=
lt" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></=
div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-=
serif;font-size:small">100% agreed. I said the same to authors offline earl=
ier today as well.</div><div class=3D"gmail_default" style=3D"font-family:a=
rial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_de=
fault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">Eve=
ry time you define a new AFI/SAFI one can make such AFI/SAFI mandatory to h=
ave an inbound policy or not.</div><div class=3D"gmail_default" style=3D"fo=
nt-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small">If authors would go that far and define new AFI/SAFI for IPv4 and =
IPv6 unicast so be it. The defaults there may be changed by such spec :) An=
d once accepted such new AFI/SAFI may share the routes with 1/1 &amp; 2/1 f=
or IBGP propagation too.=C2=A0</div><div class=3D"gmail_default" style=3D"f=
ont-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small">Making it a Standards Track doc for all SAFIs MP-BGP is used today=
 seems like a pretty bad idea.=C2=A0</div><div class=3D"gmail_default" styl=
e=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div=
 class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fo=
nt-size:small">And as far as deployment practice we already have BCP docume=
nt on this for a while ... See section 6.3.1 of BCP194</div><div class=3D"g=
mail_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:sma=
ll"><br></div><div class=3D"gmail_default"><font face=3D"arial, helvetica, =
sans-serif">REF:=C2=A0<a href=3D"https://tools.ietf.org/html/bcp194#section=
-6.3.1">https://tools.ietf.org/html/bcp194#section-6.3.1</a></font><br></di=
v><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-se=
rif;font-size:small"><br></div><div class=3D"gmail_default" style=3D"font-f=
amily:arial,helvetica,sans-serif;font-size:small">Cheers,<br>R.</div><div c=
lass=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font=
-size:small"><br></div></div><div class=3D"gmail_extra"><br><div class=3D"g=
mail_quote">On Thu, Apr 20, 2017 at 12:53 AM, Enke Chen <span dir=3D"ltr">&=
lt;<a href=3D"mailto:enkechen@cisco.com" target=3D"_blank">enkechen@cisco.c=
om</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"marg=
in:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi, Folks:<br>
<br>
The document defines or changes the &quot;default behavior&quot; for EBGP.=
=C2=A0 However, the default<br>
behavior for a particular code base or release was set long time ago, and i=
n some cases<br>
more than 20 years ago. To avoid breaking existing deployment in this case,=
 the default<br>
behavior in the code can not be changed (with or without this document). Th=
en it becomes<br>
a deployment practice for the policies to be configured.<br>
<br>
So it seems to me that &quot;Standard Track&quot; may not be the right clas=
sification for this<br>
document.=C2=A0 &quot;Deployment recommendation or Practice&quot; might be =
more appropriate.<br>
<br>
Thanks.=C2=A0 -- Enke<br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
On 4/19/17 9:49 AM, John G. Scudder wrote:<br>
&gt; IDR folks,<br>
&gt;<br>
&gt; As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has=
 completed GROW WGLC and is now in IETF LC.<br>
&gt;<br>
&gt; As nobody other than Alvaro noticed (thank you for noticing, Alvaro!) =
draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that it =
mandates what a BGP implementation MUST do. See section 2 of the draft for =
the details. It&#39;s short and easy to read.<br>
&gt;<br>
&gt; If we had noticed this earlier, we would have either chosen to home th=
e document in IDR, or explicitly made an exception to have GROW do the work=
. Given that we didn&#39;t, though, the plan is to continue progressing the=
 draft as a GROW document. However:<br>
&gt;<br>
&gt; - As I understand it, the authors will add the Updates: 4271 header in=
 addition to potentially taking in other comments from AD review.<br>
&gt; - If anyone has a strong objection to the unusual procedure, please sa=
y so (either on-list, or to the chairs + AD).<br>
&gt; - Please send any last call comments to the IETF LC (see below) althou=
gh it&#39;s also OK to discuss here on the IDR list of course.<br>
&gt;<br>
&gt; Many IDR participants are also active in GROW and have had their say, =
but if you haven&#39;t, now&#39;s your chance.<br>
&gt;<br>
&gt; Thanks,<br>
&gt;<br>
&gt; --John<br>
&gt;<br>
&gt;&gt; Begin forwarded message:<br>
&gt;&gt;<br>
&gt;&gt; From: The IESG &lt;<a href=3D"mailto:iesg-secretary@ietf.org">iesg=
-secretary@ietf.org</a>&gt;<br>
&gt;&gt; Subject: Last Call: &lt;draft-ietf-grow-bgp-reject-<wbr>05.txt&gt;=
 (Default EBGP Route Propagation Behavior Without Policies) to Proposed Sta=
ndard<br>
&gt;&gt; Date: April 18, 2017 at 5:16:05 PM EDT<br>
&gt;&gt; To: &quot;IETF-Announce&quot; &lt;<a href=3D"mailto:ietf-announce@=
ietf.org">ietf-announce@ietf.org</a>&gt;<br>
&gt;&gt; Cc: <a href=3D"mailto:grow-chairs@ietf.org">grow-chairs@ietf.org</=
a>, <a href=3D"mailto:grow@ietf.org">grow@ietf.org</a>, <a href=3D"mailto:d=
raft-ietf-grow-bgp-reject@ietf.org">draft-ietf-grow-bgp-reject@<wbr>ietf.or=
g</a>, <a href=3D"mailto:christopher.morrow@gmail.com">christopher.morrow@g=
mail.com</a><br>
&gt;&gt; Reply-To: <a href=3D"mailto:ietf@ietf.org">ietf@ietf.org</a><br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; The IESG has received a request from the Global Routing Operations=
 WG<br>
&gt;&gt; (grow) to consider the following document:<br>
&gt;&gt; - &#39;Default EBGP Route Propagation Behavior Without Policies&#3=
9;<br>
&gt;&gt; &lt;draft-ietf-grow-bgp-reject-<wbr>05.txt&gt; as Proposed Standar=
d<br>
&gt;&gt;<br>
&gt;&gt; The IESG plans to make a decision in the next few weeks, and solic=
its<br>
&gt;&gt; final comments on this action. Please send substantive comments to=
 the<br>
&gt;&gt; <a href=3D"mailto:ietf@ietf.org">ietf@ietf.org</a> mailing lists b=
y 2017-05-02. Exceptionally, comments may be<br>
&gt;&gt; sent to <a href=3D"mailto:iesg@ietf.org">iesg@ietf.org</a> instead=
. In either case, please retain the<br>
&gt;&gt; beginning of the Subject line to allow automated sorting.<br>
&gt;&gt;<br>
&gt;&gt; Abstract<br>
&gt;&gt;<br>
&gt;&gt;=C2=A0 This document defines the default behavior of a BGP speaker =
when<br>
&gt;&gt;=C2=A0 there is no import or export policy associated with an Exter=
nal BGP<br>
&gt;&gt;=C2=A0 session.<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; The file can be obtained via<br>
&gt;&gt; <a href=3D"https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-re=
ject/" rel=3D"noreferrer" target=3D"_blank">https://datatracker.ietf.org/<w=
br>doc/draft-ietf-grow-bgp-<wbr>reject/</a><br>
&gt;&gt;<br>
&gt;&gt; IESG discussion can be tracked via<br>
&gt;&gt; <a href=3D"https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-re=
ject/ballot/" rel=3D"noreferrer" target=3D"_blank">https://datatracker.ietf=
.org/<wbr>doc/draft-ietf-grow-bgp-<wbr>reject/ballot/</a><br>
&gt;&gt;<br>
&gt;&gt; This IETF LC, which originally concluded on 2017-04-18, is being<b=
r>
&gt;&gt; extended to allow for additional input to be provided. Ops AD (for=
 GROW)<br>
&gt;&gt; and Routing AD (for IDR) wish to ensure that cross WG discussions =
have<br>
&gt;&gt; had a chance to occur.<br>
&gt;&gt;<br>
&gt;&gt; No IPR declarations have been submitted directly on this I-D.<br>
&gt;<br>
&gt; ______________________________<wbr>_________________<br>
&gt; Idr mailing list<br>
&gt; <a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferre=
r" target=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
&gt;<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--94eb2c06084c575bc3054d8d2c46--


From nobody Wed Apr 19 16:18:29 2017
Return-Path: <acee@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 280931293E3 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:18:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.521
X-Spam-Level: 
X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zBRcbNtOY0uC for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:18:24 -0700 (PDT)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3999B128792 for <idr@ietf.org>; Wed, 19 Apr 2017 16:18:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=22557; q=dns/txt; s=iport; t=1492643904; x=1493853504; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=GdIJC5JmWErhBGmdzfi3tgjEhBP9CqXK9c4DRAwS2pQ=; b=aaSoTmU0318v6RdpTELvo6WEpm6Rq7+bhLcEuBEQFtaqRPVOh5ikOBR5 bEdjkXAgL/O1TPJimjMhccroOaxDm95PGG6fb2BzO0BTanDhP96jSi6LS +sP9ZuJcf4frirUCCxGUkDiqNnhF5klRGVJ/nLnLTe32rAti0MwEbRCai I=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AhAQBz7/dY/4UNJK1WBhkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYJuZmGBCweDYIoVkWJwhy6ID4U1gg8hAQqFeAIag2s/GAECAQE?= =?us-ascii?q?BAQEBAWsohRUBAQEBAwEBIUsLEAIBCBEDAQIBIwQDAgICHwYLFAkIAgQBDQWKA?= =?us-ascii?q?QMVDqpagiaHMg2DXwEBAQEBAQEBAQEBAQEBAQEBAQEBARgFiDCCZTSCUYF4LoJ?= =?us-ascii?q?mgkAfBZx0OwGHEIcjhEiCAIUxg2GGOohsgiGJAwEfOIEFYxVEhC05HBmBSnUBA?= =?us-ascii?q?YdcgQ0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800";  d="scan'208,217";a="224645062"
Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 19 Apr 2017 23:18:21 +0000
Received: from XCH-RTP-005.cisco.com (xch-rtp-005.cisco.com [64.101.220.145]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v3JNILGI017806 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 19 Apr 2017 23:18:21 GMT
Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-005.cisco.com (64.101.220.145) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Apr 2017 19:18:21 -0400
Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Wed, 19 Apr 2017 19:18:20 -0400
From: "Acee Lindem (acee)" <acee@cisco.com>
To: Robert Raszuk <robert@raszuk.net>, "Enke Chen (enkechen)" <enkechen@cisco.com>
CC: Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuV/NQxMnaaMdpE6dWAZuvCqOqKHNlW4A//++RoA=
Date: Wed, 19 Apr 2017 23:18:20 +0000
Message-ID: <D51D67E4.A9782%acee@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com>
In-Reply-To: <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.116.152.197]
Content-Type: multipart/alternative; boundary="_000_D51D67E4A9782aceeciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/_ONW-gfUKjXZjR996aNYXQpAFFI>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 23:18:27 -0000

--_000_D51D67E4A9782aceeciscocom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_D51D67E4A9782aceeciscocom_
Content-Type: text/html; charset="utf-8"
Content-ID: <A32D1A94C586EB4987FEAE67767560B9@emea.cisco.com>
Content-Transfer-Encoding: base64
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=

--_000_D51D67E4A9782aceeciscocom_--


From nobody Wed Apr 19 16:25:12 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95C09128792 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:25:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DXZ4GdrUT9lo for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:25:09 -0700 (PDT)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0113.outbound.protection.outlook.com [104.47.34.113]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D65E9127337 for <idr@ietf.org>; Wed, 19 Apr 2017 16:25:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=jHzMkZULEr80sGCDagONCvih4Fp+7gP70es+AWAEHBI=; b=iMyLrjjEdW0VAGfz7JIh8hiXJOQhrj0YX0hp/SGoI+4cbdZOVidYlUsuMxMRwJ2VPacCfAf1ArY1PEoX15e+MEwlNL2XJIN3xF8LtUXgAnzrJxXe8iIGdp+bg+uaLQUFY5/PKfBg7XOk2BhNKiJLn6tM4c/ub1CHZk6Tk9SycYM=
Received: from CY1PR05MB2507.namprd05.prod.outlook.com (10.167.10.134) by CY1PR05MB2508.namprd05.prod.outlook.com (10.167.10.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Wed, 19 Apr 2017 23:25:09 +0000
Received: from CY1PR05MB2507.namprd05.prod.outlook.com ([10.167.10.134]) by CY1PR05MB2507.namprd05.prod.outlook.com ([10.167.10.134]) with mapi id 15.01.1047.008; Wed, 19 Apr 2017 23:25:08 +0000
From: John Scudder <jgs@juniper.net>
To: "Acee Lindem (acee)" <acee@cisco.com>
CC: "Enke Chen (enkechen)" <enkechen@cisco.com>, idr wg <idr@ietf.org>, "Hares Susan" <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuWQvp3Q+amjrFUC5PeWc81WgJg==
Date: Wed, 19 Apr 2017 23:25:08 +0000
Message-ID: <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com>
In-Reply-To: <D51D67E4.A9782%acee@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=juniper.net;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [75.151.14.9]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CY1PR05MB2508; 7:EV09x2q9uDqU6jY4cA/523Lqfdc/Li++Gd5lFRx2EDLksoR/zX/POWqWl1yOfDUfNSHEU02goGAjpaL1B0VZ1o+KO8MFSjAQVUqzSlzzv0P5+ElKUMrzLZ8AuLlBfj2a/CSZefcGig68u0TzPbO1y3XHuFNaxnongQA5PyaTRv6kKLZw8+dhOp+sXvBaOz1+7oWXhaE7SEtc2NU1El9wLSoPCxlQ0elnCF3fZa/ZkoT24LE315PVKMqRQU3yfGybM4hr8YvIPsUC21O5TrX1A0jUJqUOfWMoaTng0T+jFuv2ueOaWVfmuq9Z4bFKUs0M/aHiKWjfKTjXQBPSVgvaRQ==
x-ms-office365-filtering-correlation-id: d18c24ba-6690-4593-6841-08d4877b51cd
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081)(201702281549075); SRVR:CY1PR05MB2508; 
x-microsoft-antispam-prvs: <CY1PR05MB25088CE51DFA8B9383E8F3D4AA180@CY1PR05MB2508.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(95692535739014);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041248)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123562025)(20161123560025)(20161123555025)(20161123564025)(6072148); SRVR:CY1PR05MB2508; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2508; 
x-forefront-prvs: 028256169F
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39840400002)(39860400002)(39450400003)(39410400002)(39400400002)(39850400002)(377454003)(24454002)(2900100001)(5660300001)(6436002)(6506006)(33656002)(7736002)(77096006)(86362001)(230783001)(93886004)(54356999)(81166006)(76176999)(50986999)(6116002)(3846002)(102836003)(305945005)(8676002)(8936002)(189998001)(25786009)(2950100002)(4326008)(6246003)(110136004)(38730400002)(2906002)(3660700001)(3280700002)(54906002)(229853002)(53936002)(6512007)(99286003)(6916009)(66066001)(36756003)(122556002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2508; H:CY1PR05MB2507.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <5DD65FE86683E846BCF77A6973783323@junipernetworks.onmicrosoft.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Apr 2017 23:25:08.7083 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2508
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/AUyUjB9bTfGOhF0I549AsyFQPVg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 23:25:12 -0000

KEFzIGFuIGluZGl2aWR1YWwgY29udHJpYnV0b3IpDQoNCk9uIEFwciAxOSwgMjAxNywgYXQgNzox
OCBQTSwgQWNlZSBMaW5kZW0gKGFjZWUpIDxhY2VlQGNpc2NvLmNvbT4gd3JvdGU6DQo+IHRoZSBk
cmFmdCBpcyBjb25zcGljdW91c2x5IG1pc3NpbmcgYSDigJxCYWNrd2FyZHMgQ29tcGF0aWJpbGl0
eeKAnSBzZWN0aW9uLg0KDQpTZXJpb3VzbHk/ICJCYWNrd2FyZHMgY29tcGF0aWJpbGl0eSIgaW4g
dGhpcyBjYXNlIGlzICJjb25maWd1cmUgeW91ciByb3V0ZXIgdG8gZG8gd2hhdCBpdCB1c2VkIHRv
IiwgcmlnaHQ/IFdlIG5lZWQgYSBzZWN0aW9uIHRvIHNheSB0aGF0Pw0KDQpJIG11c3QgYmUgbWlz
c2luZyBzb21ldGhpbmcuIA0KDQpBbHNvLCB0byBFbmtlJ3MgIndlIGNhbid0IGV2ZXIgY2hhbmdl
IG91ciBkZWZhdWx0cyIgcG9pbnQgLS0gdGhlcmUgYXJlIG1hbnkgUkZDcy4gU29tZSB5b3UgcHJv
YmFibHkgY29tcGx5IHdpdGguIFNvbWUgeW91IHByb2JhYmx5IGRvbid0LiBIb3cgd291bGQgdGhp
cyBiZSBkaWZmZXJlbnQsIGFzc3VtaW5nIHlvdSBlbGVjdCBub3QgdG8gY2hhbmdlIHlvdXIgaW1w
bGVtZW50YXRpb24gdG8gY29tcGx5Pw0KDQpUaGFua3MsDQoNCi0tSm9obg==


From nobody Wed Apr 19 16:25:36 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55448127337 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:25:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NQMwElIZBuyL for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:25:32 -0700 (PDT)
Received: from mail-io0-x22b.google.com (mail-io0-x22b.google.com [IPv6:2607:f8b0:4001:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87C6912EAAD for <idr@ietf.org>; Wed, 19 Apr 2017 16:25:32 -0700 (PDT)
Received: by mail-io0-x22b.google.com with SMTP id k87so42615593ioi.0 for <idr@ietf.org>; Wed, 19 Apr 2017 16:25:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=mELnYg84Oc82Ia5FG3e5ukE0rk4L+TGxKbtM3XKeYW4=; b=BxU4eTv1e2ktHm6+2mWGH5GBPZmqYwx6aFdsXAOS/7rqJh/d4bXhyIuO838LCxmm01 apnxqDKSE05TZiD2psyTnJkazW0htQ9XI3AjhRpiiQpHwxx5SJ2qa8KBdYdFZ45A5x4Q 0ULeViJhzvIIJQOu4IYyNBeA6mAMJQxnFQbKwr+sPcjz9L8qDKLq8No4XLI2GqwmPwel 6f3elDH3ukBqrYOhnpb83kPm0SBmuCDVQWm7RgXciZgCfr9jRSAt2vvt7vs3LdKIEk6q sD6gkExBdVGd5lZKOIJ52BXJZ96sKGdrf2x2LKEOfJH81KET2NPIwkGGbyH2y/VR9zfQ WR+A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=mELnYg84Oc82Ia5FG3e5ukE0rk4L+TGxKbtM3XKeYW4=; b=snOlicktlbmL2jciu95mnQh/NK1i7Aup/6qq8B7ESM4Nkx5D4zesa+7pbmKkz8CvLr Ns43dTZMbv3w5DufHLy/PDxqbkO8utlnulmFTx/EvJ70YjJdqhCS7Wnypi6Vmp47ugzU m5SUmDzLwgUYXEJP9tUOrv82HSvNhHeAFGnarW3kkLHsuXmw0sm4n9OIF8wURwxYDL+F 3afOpriI8SB3P5tWcz56AqvP3P9Oh5p0hqnkE8ZI0WwSJALqg22ZYe7YgRglGv0Uko59 I9NY2SXLJVYgNG/jYOOtwNWeR9Jf0BokV5leMRsHN3MykhQp7PmDCsLZTQXZYa6nmAZ2 6Spg==
X-Gm-Message-State: AN3rC/43dB+L4pd6pf9tVriy9x8lJv0BhcIZZDtL+2UYdV001rOA+RXd 66zZl2Q7qekwIn4DAoZjcRff3iqvng==
X-Received: by 10.36.82.144 with SMTP id d138mr682677itb.24.1492644329984; Wed, 19 Apr 2017 16:25:29 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Wed, 19 Apr 2017 16:25:29 -0700 (PDT)
In-Reply-To: <D51D67E4.A9782%acee@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 20 Apr 2017 01:25:29 +0200
X-Google-Sender-Auth: JC7XbMdNDDcJPQ2_DTh9NAVLT8s
Message-ID: <CA+b+ERm=f6N6s0R6YpuGVqWveTj5v_Kr4PUa03WjuJM5ChOUww@mail.gmail.com>
To: "Acee Lindem (acee)" <acee@cisco.com>
Cc: "Enke Chen (enkechen)" <enkechen@cisco.com>, Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a1144735410a11a054d8d57ea
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/rgROg0qPZHjTdJJAfrW0WC8LhhQ>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 23:25:35 -0000

--001a1144735410a11a054d8d57ea
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Well if this is a deployment BCP it does not need one ... you can apply any
policy on EBGP any time you like even today and nothing will break. At most
you upset or loose your customers.

But mandating to change behavior of an implementation default across all
SAFIs is a completely different animal.



On Thu, Apr 20, 2017 at 1:18 AM, Acee Lindem (acee) <acee@cisco.com> wrote:

> Hi Robert, Enke,
>
> Also, irrespective of the Intended Status, the draft is conspicuously
> missing a =E2=80=9CBackwards Compatibility=E2=80=9D section. I would expe=
ct the draft to
> include this discussion even if it is progressed as BCP.
>
> Thanks,
> Acee
>
> From: Idr <idr-bounces@ietf.org> on behalf of Robert Raszuk <
> robert@raszuk.net>
> Date: Wednesday, April 19, 2017 at 7:13 PM
> To: "Enke Chen (enkechen)" <enkechen@cisco.com>
> Cc: Susan Hares <shares@ndzh.com>, IDR List <idr@ietf.org>
> Subject: Re: [Idr] IETF LC for IDR-ish document
> <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation
> Behavior Without Policies) to Proposed Standard
>
> Hi Enke,
>
> 100% agreed. I said the same to authors offline earlier today as well.
>
> Every time you define a new AFI/SAFI one can make such AFI/SAFI mandatory
> to have an inbound policy or not.
>
> If authors would go that far and define new AFI/SAFI for IPv4 and IPv6
> unicast so be it. The defaults there may be changed by such spec :) And
> once accepted such new AFI/SAFI may share the routes with 1/1 & 2/1 for
> IBGP propagation too.
>
> Making it a Standards Track doc for all SAFIs MP-BGP is used today seems
> like a pretty bad idea.
>
> And as far as deployment practice we already have BCP document on this fo=
r
> a while ... See section 6.3.1 of BCP194
>
> REF: https://tools.ietf.org/html/bcp194#section-6.3.1
>
> Cheers,
> R.
>
>
> On Thu, Apr 20, 2017 at 12:53 AM, Enke Chen <enkechen@cisco.com> wrote:
>
>> Hi, Folks:
>>
>> The document defines or changes the "default behavior" for EBGP.
>> However, the default
>> behavior for a particular code base or release was set long time ago, an=
d
>> in some cases
>> more than 20 years ago. To avoid breaking existing deployment in this
>> case, the default
>> behavior in the code can not be changed (with or without this document).
>> Then it becomes
>> a deployment practice for the policies to be configured.
>>
>> So it seems to me that "Standard Track" may not be the right
>> classification for this
>> document.  "Deployment recommendation or Practice" might be more
>> appropriate.
>>
>> Thanks.  -- Enke
>>
>> On 4/19/17 9:49 AM, John G. Scudder wrote:
>> > IDR folks,
>> >
>> > As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has
>> completed GROW WGLC and is now in IETF LC.
>> >
>> > As nobody other than Alvaro noticed (thank you for noticing, Alvaro!)
>> draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that =
it
>> mandates what a BGP implementation MUST do. See section 2 of the draft f=
or
>> the details. It's short and easy to read.
>> >
>> > If we had noticed this earlier, we would have either chosen to home th=
e
>> document in IDR, or explicitly made an exception to have GROW do the wor=
k.
>> Given that we didn't, though, the plan is to continue progressing the dr=
aft
>> as a GROW document. However:
>> >
>> > - As I understand it, the authors will add the Updates: 4271 header in
>> addition to potentially taking in other comments from AD review.
>> > - If anyone has a strong objection to the unusual procedure, please sa=
y
>> so (either on-list, or to the chairs + AD).
>> > - Please send any last call comments to the IETF LC (see below)
>> although it's also OK to discuss here on the IDR list of course.
>> >
>> > Many IDR participants are also active in GROW and have had their say,
>> but if you haven't, now's your chance.
>> >
>> > Thanks,
>> >
>> > --John
>> >
>> >> Begin forwarded message:
>> >>
>> >> From: The IESG <iesg-secretary@ietf.org>
>> >> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP
>> Route Propagation Behavior Without Policies) to Proposed Standard
>> >> Date: April 18, 2017 at 5:16:05 PM EDT
>> >> To: "IETF-Announce" <ietf-announce@ietf.org>
>> >> Cc: grow-chairs@ietf.org, grow@ietf.org,
>> draft-ietf-grow-bgp-reject@ietf.org, christopher.morrow@gmail.com
>> >> Reply-To: ietf@ietf.org
>> >>
>> >>
>> >> The IESG has received a request from the Global Routing Operations WG
>> >> (grow) to consider the following document:
>> >> - 'Default EBGP Route Propagation Behavior Without Policies'
>> >> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>> >>
>> >> The IESG plans to make a decision in the next few weeks, and solicits
>> >> final comments on this action. Please send substantive comments to th=
e
>> >> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments
>> may be
>> >> sent to iesg@ietf.org instead. In either case, please retain the
>> >> beginning of the Subject line to allow automated sorting.
>> >>
>> >> Abstract
>> >>
>> >>  This document defines the default behavior of a BGP speaker when
>> >>  there is no import or export policy associated with an External BGP
>> >>  session.
>> >>
>> >>
>> >> The file can be obtained via
>> >> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>> >>
>> >> IESG discussion can be tracked via
>> >> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>> >>
>> >> This IETF LC, which originally concluded on 2017-04-18, is being
>> >> extended to allow for additional input to be provided. Ops AD (for
>> GROW)
>> >> and Routing AD (for IDR) wish to ensure that cross WG discussions hav=
e
>> >> had a chance to occur.
>> >>
>> >> No IPR declarations have been submitted directly on this I-D.
>> >
>> > _______________________________________________
>> > Idr mailing list
>> > Idr@ietf.org
>> > https://www.ietf.org/mailman/listinfo/idr
>> >
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>
>
>

--001a1144735410a11a054d8d57ea
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small">Well if th=
is is a deployment BCP it does not need one ... you can apply any policy on=
 EBGP any time you like even today and nothing will break. At most you upse=
t or loose your customers.=C2=A0</div><div class=3D"gmail_default" style=3D=
"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div cla=
ss=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-s=
ize:small">But mandating to change behavior of an implementation default ac=
ross all SAFIs is a completely different animal.=C2=A0</div><div class=3D"g=
mail_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:sma=
ll"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,helve=
tica,sans-serif;font-size:small"><br></div></div><div class=3D"gmail_extra"=
><br><div class=3D"gmail_quote">On Thu, Apr 20, 2017 at 1:18 AM, Acee Linde=
m (acee) <span dir=3D"ltr">&lt;<a href=3D"mailto:acee@cisco.com" target=3D"=
_blank">acee@cisco.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_=
quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1=
ex">



<div style=3D"word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-fam=
ily:Calibri,sans-serif">
<div>Hi Robert, Enke,</div>
<div><br>
</div>
<div>Also, irrespective of the Intended Status, the draft is conspicuously =
missing a =E2=80=9CBackwards Compatibility=E2=80=9D section. I would expect=
 the draft to include this discussion even if it is progressed as BCP.=C2=
=A0</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Acee=C2=A0</div>
<div><br>
</div>
<span id=3D"m_7572986682872686594OLK_SRC_BODY_SECTION">
<div style=3D"font-family:Calibri;font-size:11pt;text-align:left;color:blac=
k;BORDER-BOTTOM:medium none;BORDER-LEFT:medium none;PADDING-BOTTOM:0in;PADD=
ING-LEFT:0in;PADDING-RIGHT:0in;BORDER-TOP:#b5c4df 1pt solid;BORDER-RIGHT:me=
dium none;PADDING-TOP:3pt">
<span style=3D"font-weight:bold">From: </span>Idr &lt;<a href=3D"mailto:idr=
-bounces@ietf.org" target=3D"_blank">idr-bounces@ietf.org</a>&gt; on behalf=
 of Robert Raszuk &lt;<a href=3D"mailto:robert@raszuk.net" target=3D"_blank=
">robert@raszuk.net</a>&gt;<br>
<span style=3D"font-weight:bold">Date: </span>Wednesday, April 19, 2017 at =
7:13 PM<br>
<span style=3D"font-weight:bold">To: </span>&quot;Enke Chen (enkechen)&quot=
; &lt;<a href=3D"mailto:enkechen@cisco.com" target=3D"_blank">enkechen@cisc=
o.com</a>&gt;<br>
<span style=3D"font-weight:bold">Cc: </span>Susan Hares &lt;<a href=3D"mail=
to:shares@ndzh.com" target=3D"_blank">shares@ndzh.com</a>&gt;, IDR List &lt=
;<a href=3D"mailto:idr@ietf.org" target=3D"_blank">idr@ietf.org</a>&gt;<br>
<span style=3D"font-weight:bold">Subject: </span>Re: [Idr] IETF LC for IDR-=
ish document &lt;draft-ietf-grow-bgp-reject-<wbr>05.txt&gt; (Default EBGP R=
oute Propagation Behavior Without Policies) to Proposed Standard<br>
</div><div><div class=3D"h5">
<div><br>
</div>
<blockquote id=3D"m_7572986682872686594MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" =
style=3D"BORDER-LEFT:#b5c4df 5 solid;PADDING:0 0 0 5;MARGIN:0 0 0 5">
<div>
<div>
<div dir=3D"ltr">
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
Hi Enke,</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
<br>
</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
100% agreed. I said the same to authors offline earlier today as well.</div=
>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
<br>
</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
Every time you define a new AFI/SAFI one can make such AFI/SAFI mandatory t=
o have an inbound policy or not.</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
<br>
</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
If authors would go that far and define new AFI/SAFI for IPv4 and IPv6 unic=
ast so be it. The defaults there may be changed by such spec :) And once ac=
cepted such new AFI/SAFI may share the routes with 1/1 &amp; 2/1 for IBGP p=
ropagation too.=C2=A0</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
<br>
</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
Making it a Standards Track doc for all SAFIs MP-BGP is used today seems li=
ke a pretty bad idea.=C2=A0</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
<br>
</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
And as far as deployment practice we already have BCP document on this for =
a while ... See section 6.3.1 of BCP194</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
<br>
</div>
<div class=3D"gmail_default"><font face=3D"arial,helvetica,sans-serif">REF:=
=C2=A0<a href=3D"https://tools.ietf.org/html/bcp194#section-6.3.1" target=
=3D"_blank">https://tools.ietf.org/<wbr>html/bcp194#section-6.3.1</a></font=
><br>
</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
<br>
</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
Cheers,<br>
R.</div>
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">
<br>
</div>
</div>
<div class=3D"gmail_extra"><br>
<div class=3D"gmail_quote">On Thu, Apr 20, 2017 at 12:53 AM, Enke Chen <spa=
n dir=3D"ltr">
&lt;<a href=3D"mailto:enkechen@cisco.com" target=3D"_blank">enkechen@cisco.=
com</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
Hi, Folks:<br>
<br>
The document defines or changes the &quot;default behavior&quot; for EBGP.=
=C2=A0 However, the default<br>
behavior for a particular code base or release was set long time ago, and i=
n some cases<br>
more than 20 years ago. To avoid breaking existing deployment in this case,=
 the default<br>
behavior in the code can not be changed (with or without this document). Th=
en it becomes<br>
a deployment practice for the policies to be configured.<br>
<br>
So it seems to me that &quot;Standard Track&quot; may not be the right clas=
sification for this<br>
document.=C2=A0 &quot;Deployment recommendation or Practice&quot; might be =
more appropriate.<br>
<br>
Thanks.=C2=A0 -- Enke<br>
<div class=3D"m_7572986682872686594HOEnZb">
<div class=3D"m_7572986682872686594h5"><br>
On 4/19/17 9:49 AM, John G. Scudder wrote:<br>
&gt; IDR folks,<br>
&gt;<br>
&gt; As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has=
 completed GROW WGLC and is now in IETF LC.<br>
&gt;<br>
&gt; As nobody other than Alvaro noticed (thank you for noticing, Alvaro!) =
draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that it =
mandates what a BGP implementation MUST do. See section 2 of the draft for =
the details. It&#39;s short and easy to
 read.<br>
&gt;<br>
&gt; If we had noticed this earlier, we would have either chosen to home th=
e document in IDR, or explicitly made an exception to have GROW do the work=
. Given that we didn&#39;t, though, the plan is to continue progressing the=
 draft as a GROW document. However:<br>
&gt;<br>
&gt; - As I understand it, the authors will add the Updates: 4271 header in=
 addition to potentially taking in other comments from AD review.<br>
&gt; - If anyone has a strong objection to the unusual procedure, please sa=
y so (either on-list, or to the chairs + AD).<br>
&gt; - Please send any last call comments to the IETF LC (see below) althou=
gh it&#39;s also OK to discuss here on the IDR list of course.<br>
&gt;<br>
&gt; Many IDR participants are also active in GROW and have had their say, =
but if you haven&#39;t, now&#39;s your chance.<br>
&gt;<br>
&gt; Thanks,<br>
&gt;<br>
&gt; --John<br>
&gt;<br>
&gt;&gt; Begin forwarded message:<br>
&gt;&gt;<br>
&gt;&gt; From: The IESG &lt;<a href=3D"mailto:iesg-secretary@ietf.org" targ=
et=3D"_blank">iesg-secretary@ietf.org</a>&gt;<br>
&gt;&gt; Subject: Last Call: &lt;draft-ietf-grow-bgp-reject-05<wbr>.txt&gt;=
 (Default EBGP Route Propagation Behavior Without Policies) to Proposed Sta=
ndard<br>
&gt;&gt; Date: April 18, 2017 at 5:16:05 PM EDT<br>
&gt;&gt; To: &quot;IETF-Announce&quot; &lt;<a href=3D"mailto:ietf-announce@=
ietf.org" target=3D"_blank">ietf-announce@ietf.org</a>&gt;<br>
&gt;&gt; Cc: <a href=3D"mailto:grow-chairs@ietf.org" target=3D"_blank">grow=
-chairs@ietf.org</a>, <a href=3D"mailto:grow@ietf.org" target=3D"_blank">
grow@ietf.org</a>, <a href=3D"mailto:draft-ietf-grow-bgp-reject@ietf.org" t=
arget=3D"_blank">draft-ietf-grow-bgp-reject@iet<wbr>f.org</a>,
<a href=3D"mailto:christopher.morrow@gmail.com" target=3D"_blank">christoph=
er.morrow@gmail.com</a><br>
&gt;&gt; Reply-To: <a href=3D"mailto:ietf@ietf.org" target=3D"_blank">ietf@=
ietf.org</a><br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; The IESG has received a request from the Global Routing Operations=
 WG<br>
&gt;&gt; (grow) to consider the following document:<br>
&gt;&gt; - &#39;Default EBGP Route Propagation Behavior Without Policies&#3=
9;<br>
&gt;&gt; &lt;draft-ietf-grow-bgp-reject-05<wbr>.txt&gt; as Proposed Standar=
d<br>
&gt;&gt;<br>
&gt;&gt; The IESG plans to make a decision in the next few weeks, and solic=
its<br>
&gt;&gt; final comments on this action. Please send substantive comments to=
 the<br>
&gt;&gt; <a href=3D"mailto:ietf@ietf.org" target=3D"_blank">ietf@ietf.org</=
a> mailing lists by 2017-05-02. Exceptionally, comments may be<br>
&gt;&gt; sent to <a href=3D"mailto:iesg@ietf.org" target=3D"_blank">iesg@ie=
tf.org</a> instead. In either case, please retain the<br>
&gt;&gt; beginning of the Subject line to allow automated sorting.<br>
&gt;&gt;<br>
&gt;&gt; Abstract<br>
&gt;&gt;<br>
&gt;&gt;=C2=A0 This document defines the default behavior of a BGP speaker =
when<br>
&gt;&gt;=C2=A0 there is no import or export policy associated with an Exter=
nal BGP<br>
&gt;&gt;=C2=A0 session.<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; The file can be obtained via<br>
&gt;&gt; <a href=3D"https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-re=
ject/" rel=3D"noreferrer" target=3D"_blank">
https://datatracker.ietf.org/d<wbr>oc/draft-ietf-grow-bgp-reject/</a><br>
&gt;&gt;<br>
&gt;&gt; IESG discussion can be tracked via<br>
&gt;&gt; <a href=3D"https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-re=
ject/ballot/" rel=3D"noreferrer" target=3D"_blank">
https://datatracker.ietf.org/d<wbr>oc/draft-ietf-grow-bgp-reject/<wbr>ballo=
t/</a><br>
&gt;&gt;<br>
&gt;&gt; This IETF LC, which originally concluded on 2017-04-18, is being<b=
r>
&gt;&gt; extended to allow for additional input to be provided. Ops AD (for=
 GROW)<br>
&gt;&gt; and Routing AD (for IDR) wish to ensure that cross WG discussions =
have<br>
&gt;&gt; had a chance to occur.<br>
&gt;&gt;<br>
&gt;&gt; No IPR declarations have been submitted directly on this I-D.<br>
&gt;<br>
&gt; ______________________________<wbr>_________________<br>
&gt; Idr mailing list<br>
&gt; <a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferre=
r" target=3D"_blank">
https://www.ietf.org/mailman/l<wbr>istinfo/idr</a><br>
&gt;<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/idr</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div></div></span>
</div>

</blockquote></div><br></div>

--001a1144735410a11a054d8d57ea--


From nobody Wed Apr 19 16:30:11 2017
Return-Path: <acee@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7D49129BE8 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:30:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g8xfmKRNxlUZ for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:30:08 -0700 (PDT)
Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F5C1128792 for <idr@ietf.org>; Wed, 19 Apr 2017 16:30:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1192; q=dns/txt; s=iport; t=1492644608; x=1493854208; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=evWfKyfPrjvZ99JmvVdYQDadtRfQbguUWuHzfu5h0mE=; b=NbtMzZ/QXR5y8edPw1Fe+0hw+3Ya+c9fqzB7qtAaqrzIPQyzBSKFVyLX N5/K/cgu1C9Lj0rAZtQncEwf+VGFVPchbOYP21TwSrfb1ZItmLkUwPpFV 0Bo1CW+Wk2vIUym1qF01bg/vlsOFlutmy0gbiVXsE4c76+fik6Any/Kqv I=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AdAQBG8vdY/4cNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1SBbAeDYIoVkWKVYoIPhiQCGoNrPxgBAgEBAQEBAQFrKIUWAQU?= =?us-ascii?q?jEUUQAgEIDgoCAh8HAgICMBUQAgQOBYoZqnWCJoseAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBIIELhyWDGYRXgwaCQB8BBJ0vAZJ7kUyUEAEfOIEFYxWFX4FKdYdegQ0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800"; d="scan'208";a="411851920"
Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 19 Apr 2017 23:30:07 +0000
Received: from XCH-RTP-003.cisco.com (xch-rtp-003.cisco.com [64.101.220.143]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v3JNU70L021618 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 19 Apr 2017 23:30:07 GMT
Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-003.cisco.com (64.101.220.143) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Apr 2017 19:30:07 -0400
Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Wed, 19 Apr 2017 19:30:01 -0400
From: "Acee Lindem (acee)" <acee@cisco.com>
To: John Scudder <jgs@juniper.net>
CC: "Enke Chen (enkechen)" <enkechen@cisco.com>, idr wg <idr@ietf.org>, "Hares Susan" <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuV/NQxMnaaMdpE6dWAZuvCqOqKHNlW4A//++RoCAAET4AP//vkkA
Date: Wed, 19 Apr 2017 23:30:01 +0000
Message-ID: <D51D6AD2.A9795%acee@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net>
In-Reply-To: <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.116.152.197]
Content-Type: text/plain; charset="utf-8"
Content-ID: <EB0BC93F29312241ADDA3FEB14FD8012@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/97jx-IHQAGb1j347fX7UAmbR_6A>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 23:30:10 -0000

DQoNCk9uIDQvMTkvMTcsIDc6MjUgUE0sICJKb2huIFNjdWRkZXIiIDxqZ3NAanVuaXBlci5uZXQ+
IHdyb3RlOg0KDQo+KEFzIGFuIGluZGl2aWR1YWwgY29udHJpYnV0b3IpDQo+DQo+T24gQXByIDE5
LCAyMDE3LCBhdCA3OjE4IFBNLCBBY2VlIExpbmRlbSAoYWNlZSkgPGFjZWVAY2lzY28uY29tPiB3
cm90ZToNCj4+IHRoZSBkcmFmdCBpcyBjb25zcGljdW91c2x5IG1pc3NpbmcgYSDigJxCYWNrd2Fy
ZHMgQ29tcGF0aWJpbGl0eeKAnSBzZWN0aW9uLg0KPg0KPlNlcmlvdXNseT8gIkJhY2t3YXJkcyBj
b21wYXRpYmlsaXR5IiBpbiB0aGlzIGNhc2UgaXMgImNvbmZpZ3VyZSB5b3VyDQo+cm91dGVyIHRv
IGRvIHdoYXQgaXQgdXNlZCB0byIsIHJpZ2h0PyBXZSBuZWVkIGEgc2VjdGlvbiB0byBzYXkgdGhh
dD8NCg0KQW55dGltZSBvbmUgcHJvcG9zZXMgdG8gY2hhbmdlIHRoZSBkZWZhdWx0IGJlaGF2aW9y
IG9mIGEgZGVjYWRlcyBvbGQNCnByb3RvY29sIHRvIGJlIG1vcmUgcmVzdHJpY3RpdmUsIEkgd291
bGQgZXhwZWN0IHRoaXMgdG8gYmUgZGlzY3Vzc2VkLg0KDQpUaGFua3MsDQpBY2VlIA0KDQo+DQo+
SSBtdXN0IGJlIG1pc3Npbmcgc29tZXRoaW5nLg0KPg0KPkFsc28sIHRvIEVua2UncyAid2UgY2Fu
J3QgZXZlciBjaGFuZ2Ugb3VyIGRlZmF1bHRzIiBwb2ludCAtLSB0aGVyZSBhcmUNCj5tYW55IFJG
Q3MuIFNvbWUgeW91IHByb2JhYmx5IGNvbXBseSB3aXRoLiBTb21lIHlvdSBwcm9iYWJseSBkb24n
dC4gSG93DQo+d291bGQgdGhpcyBiZSBkaWZmZXJlbnQsIGFzc3VtaW5nIHlvdSBlbGVjdCBub3Qg
dG8gY2hhbmdlIHlvdXINCj5pbXBsZW1lbnRhdGlvbiB0byBjb21wbHk/DQo+DQo+VGhhbmtzLA0K
Pg0KPi0tSm9obg0KDQo=


From nobody Wed Apr 19 16:30:25 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0D0212EAB4 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:30:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DQvYU99H6zyV for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:30:15 -0700 (PDT)
Received: from mail-io0-x22e.google.com (mail-io0-x22e.google.com [IPv6:2607:f8b0:4001:c06::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3CC5412EAB1 for <idr@ietf.org>; Wed, 19 Apr 2017 16:30:15 -0700 (PDT)
Received: by mail-io0-x22e.google.com with SMTP id k87so42780872ioi.0 for <idr@ietf.org>; Wed, 19 Apr 2017 16:30:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=UTt2m4nSejVk0Lh2ene+eh6d3y41+kRgN8i5C26ndfs=; b=ozrM73ET696JeFy5rpRyFdxbuvZuUGFDi+ibxeGWCnLezPsarXbZTq5AsqDa9A+P5a OBKCnuTztY/6lQ62JY77weIvTa0z56z0J2YP4K5PCj0orme9Q+jq96QtlztJ1INO/ZZc yDO6WOoVEduPZZ8zRJFMtko4+w7imHFmthRlZy35pAbfj3OhFsNOAceq1vnIRgqPJD33 FfSbCgrpQ7+1MVUOjkqT/R1sFtW4d9OApIoMQgDsQHxyjTPbLvqm5BLqmVFN2QencUnq oojWrtAfyAQso1HO4cJ66i9lmXAT3NQWgtFyS5ISWQ+lja8op/RNwyo3DNnDv+V4XJu1 awjQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=UTt2m4nSejVk0Lh2ene+eh6d3y41+kRgN8i5C26ndfs=; b=TRhhk3Su99Yawi0aBUpwMsS0pdEMg3ePaH/LS65uMhxrnT+POU+UkfvjP0NJPEdxEp UJjb1kvR5gNyU/Zf3kSotI5kvpy3JRLegMa56Bgvlgdez7nxO0sgZaCL2RvJjzb8kgvK +H0J3hxyunXaBjf9gPQPgRRQ9Z3nKJ/a3fs6Daur9ryxS/9NLr5a54Nad2CPsBK0VMRu 61uz16wew8SxgBtibYhb7wm9lvFfdb0p/uoy9aELvpzVDztcJ1bZ/tCONMvhgGzqRclU 1uhxMXDxnd6x+Mj6bi3jwjq9qY/rerutZXdOVmRnomSefQbg2nsRtlQf53I1gjfxcriN yFQQ==
X-Gm-Message-State: AN3rC/7cRgTIZIfn8ZqkeUh3l97+Nz5GG7bO0yEgkNEaNrs9j1PiBKou AhRJbWNlWcJdI+1NPKT1Tfc14jguWVo/
X-Received: by 10.36.48.149 with SMTP id q143mr616817itq.25.1492644614053; Wed, 19 Apr 2017 16:30:14 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Wed, 19 Apr 2017 16:30:13 -0700 (PDT)
In-Reply-To: <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 20 Apr 2017 01:30:13 +0200
X-Google-Sender-Auth: h1g2AqMKqYPPMny0tPVl6HNnM-M
Message-ID: <CA+b+ERnRbAG_WSppAVkWETL0zjeppmm9fwqRu8DV24Hcdihqiw@mail.gmail.com>
To: John Scudder <jgs@juniper.net>
Cc: "Acee Lindem (acee)" <acee@cisco.com>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Type: multipart/alternative; boundary=001a1140b160ff312b054d8d67ca
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/3dt5pZ4diZcHLuAgB5aLzcwlSzw>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 23:30:16 -0000

--001a1140b160ff312b054d8d67ca
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

=E2=80=8BJohn,

=E2=80=8B> =E2=80=8B
How would this be different, assuming you elect not to change your
implementation to comply?

=E2=80=8BWell if we are to standardize by rough consensus a RFC which we al=
ready
know is not going to be =E2=80=8Bhonored for the reasons clearly stated wha=
t are we
gaining ?

BGP implementations which support inbound policy to accept any routes will
continue doing so .. and those which do not also will continue not to do
so.

So what is the point ?

Thx,
r.

--001a1140b160ff312b054d8d67ca
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">=E2=80=8BJohn,<br></div><div class=3D"g=
mail_extra"><div class=3D"gmail_quote"><br></div><div class=3D"gmail_quote"=
><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-ser=
if;font-size:small;display:inline">=E2=80=8B&gt; =E2=80=8B</div>How would t=
his be different, assuming you elect not to change your implementation to c=
omply?</div><div class=3D"gmail_quote"><br></div><div class=3D"gmail_quote"=
><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-ser=
if;font-size:small">=E2=80=8BWell if we are to standardize by rough consens=
us a RFC which we already know is not going to be =E2=80=8Bhonored for the =
reasons clearly stated what are we gaining ?=C2=A0</div><div class=3D"gmail=
_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">=
<br></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica=
,sans-serif;font-size:small">BGP implementations which support inbound poli=
cy to accept any routes will continue doing so .. and those which do not al=
so will continue not to do so.=C2=A0</div><div class=3D"gmail_default" styl=
e=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div=
 class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fo=
nt-size:small">So what is the point ?</div><div class=3D"gmail_default" sty=
le=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><di=
v class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;f=
ont-size:small">Thx,</div><div class=3D"gmail_default" style=3D"font-family=
:arial,helvetica,sans-serif;font-size:small">r.</div><br></div></div></div>

--001a1140b160ff312b054d8d67ca--


From nobody Wed Apr 19 16:34:13 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E95BD1293E3 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:34:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o-qfBiXQflX1 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 16:34:11 -0700 (PDT)
Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E4F3128792 for <idr@ietf.org>; Wed, 19 Apr 2017 16:34:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=883; q=dns/txt; s=iport; t=1492644851; x=1493854451; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=RavAoKsVh40I0+lZdgrsvxEQqH6dasJ9HSPQTM3B5Rc=; b=MAYoDbrRag7Lmzy0h6NQc87Zon8Ygv+i6t2UnNigP/DWxsSGQYjzVSH6 2ocjQ8En8GO3nsPQMfxbx4HKcWURoHzrw5Y8WADXnR2JWURY9/ovnqP8T GO2dso8n97J0JW1c/2k1XdT2Q7RRvRepS2gzJSDZeHK59vJXQg9GifqtA 0=;
X-IronPort-AV: E=Sophos;i="5.37,222,1488844800"; d="scan'208";a="235043699"
Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Apr 2017 23:34:10 +0000
Received: from [10.41.56.53] ([10.41.56.53]) by rcdn-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id v3JNYAqP000577; Wed, 19 Apr 2017 23:34:10 GMT
To: John Scudder <jgs@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net>
Cc: "Acee Lindem (acee)" <acee@cisco.com>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com>
Date: Wed, 19 Apr 2017 16:34:10 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/AutJfHMG_bgw17Y-CBpUOTBKtvc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Apr 2017 23:34:13 -0000

John,

I had "in this case" with the statement "the default can not be changed".
The reason is that the behavior change may completely cutoff connectivity
in this case.

Thanks.  -- Enke

On 4/19/17 4:25 PM, John Scudder wrote:
> (As an individual contributor)
> 
> On Apr 19, 2017, at 7:18 PM, Acee Lindem (acee) <acee@cisco.com> wrote:
>> the draft is conspicuously missing a “Backwards Compatibility” section.
> 
> Seriously? "Backwards compatibility" in this case is "configure your router to do what it used to", right? We need a section to say that?
> 
> I must be missing something. 
> 
> Also, to Enke's "we can't ever change our defaults" point -- there are many RFCs. Some you probably comply with. Some you probably don't. How would this be different, assuming you elect not to change your implementation to comply?
> 
> Thanks,
> 
> --John
> 


From nobody Wed Apr 19 19:02:05 2017
Return-Path: <brian.peter.dickson@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E99612940A for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 19:02:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0xWSgGSWQkqw for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 19:02:02 -0700 (PDT)
Received: from mail-io0-x22d.google.com (mail-io0-x22d.google.com [IPv6:2607:f8b0:4001:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F0EA124D68 for <idr@ietf.org>; Wed, 19 Apr 2017 19:02:02 -0700 (PDT)
Received: by mail-io0-x22d.google.com with SMTP id k87so48171410ioi.0 for <idr@ietf.org>; Wed, 19 Apr 2017 19:02:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=CZMPzzATL9lp31wQM+3HeYxHinLByLsauiF6NGP7AuQ=; b=ZvbjD76qb0X9xpzmREY8L7fzIDHoQgH/yiYQnxZEGJ+GW1ovveo8xbbpljELSRx8cM U+tBvwX9YMsOlJ+t6L6ywN0MzZnR5IZgLr7D92czm1D7jo1Y+fGN9DO0XPHIx2uHbArP YQ1JxqiRBL5T9yh3hSpKpy9s7UdlkvYWVH1QNJEDwwxUk5rZQderf1e1j9CawaomdhXj PZOEz/wjMqBNK5gOa22cdVoic3D05EgeWtVU8fTeZgHskJ8oEVOPCrwQ6/6T00+JRdBM RLWLwqJwUF2l20naEciWLEP0o4INwDLDLQVrkBgUkpFpJdz9O6TLds8tkYL15xgoMZth 3tDw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=CZMPzzATL9lp31wQM+3HeYxHinLByLsauiF6NGP7AuQ=; b=QgZ8J3d9bZDVrI/1uCxNA5m6PjnVErUmir5F2b585BSUFpGe/NZKXJImCuzF1VuHDv U0dSNaAZDNM24FIiXW5hM7p4DSqnmrKYeNK0FtUlg2ozDKFI4G+POK3z/3AXhYt7eb94 0BE5mlghA3wv3BreIyroFap3C15vPvQB9D5SGAIP2hz3AUB3flTuJu7i67/AqFlY3YuZ 4/42hKy/ROgDXh0L/OoowWYlI/GyVvjIdLvX7FbioiYSP8TygRAkNlNtxAx3fF8moCty 5GO2KwpHkcZyw3IVc4Q9fOt048woEX7JxRWGMl12M5kcwf/qPswuso/LOKJzwvOyDg4R 39hA==
X-Gm-Message-State: AN3rC/5yWRj0wYy1PggiNVhno6nBdUJBf+71QQE+k62QtAyIs998ibbP SvzI9R3jx6zxQqEX/jrF6uxNb7QVKg==
X-Received: by 10.107.146.139 with SMTP id u133mr7352670iod.160.1492653720541;  Wed, 19 Apr 2017 19:02:00 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.36.46.151 with HTTP; Wed, 19 Apr 2017 19:01:59 -0700 (PDT)
In-Reply-To: <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com>
From: Brian Dickson <brian.peter.dickson@gmail.com>
Date: Wed, 19 Apr 2017 19:01:59 -0700
Message-ID: <CAH1iCirFhb3HuREBDuuDbC-fuiinSFW6UuSk61MrEj9GEaHtsw@mail.gmail.com>
To: Enke Chen <enkechen@cisco.com>
Cc: John Scudder <jgs@juniper.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Type: multipart/alternative; boundary=94eb2c055f4ec9226e054d8f8639
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/1sVyNBMv4G6c5kNk45Tpd77M8jM>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 02:02:04 -0000

--94eb2c055f4ec9226e054d8f8639
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi, everyone,

I think the distinction is between "default" and "default", i.e. clearly
communicating what is meant by "default" in this document.

I think it would be perfectly fine for implementers to provide copious
"release notes" detailing what has changed, AND to apply whatever policy
gunk is necessary, on performing a software upgrade, to ensure no adverse
effects.

In other words, "default" here would mean the out-of-the-box behavior of an
otherwise unconfigured device, when BGP is enabled (regardless of AFI/SAFI
combinations).

By definition, a new deployment of a router can't cut off connectivity,
since it cannot come into existence with said connectivity.

Would making that distinction suffice, for everyone?

Brian

P.S. While I do applaud the vendor(s) for finally deciding not to break
things when code gets upgraded, separating upgrade from new deploy is all
that is required.

On Wed, Apr 19, 2017 at 4:34 PM, Enke Chen <enkechen@cisco.com> wrote:

> John,
>
> I had "in this case" with the statement "the default can not be changed".
> The reason is that the behavior change may completely cutoff connectivity
> in this case.
>
> Thanks.  -- Enke
>
> On 4/19/17 4:25 PM, John Scudder wrote:
> > (As an individual contributor)
> >
> > On Apr 19, 2017, at 7:18 PM, Acee Lindem (acee) <acee@cisco.com> wrote:
> >> the draft is conspicuously missing a =E2=80=9CBackwards Compatibility=
=E2=80=9D section.
> >
> > Seriously? "Backwards compatibility" in this case is "configure your
> router to do what it used to", right? We need a section to say that?
> >
> > I must be missing something.
> >
> > Also, to Enke's "we can't ever change our defaults" point -- there are
> many RFCs. Some you probably comply with. Some you probably don't. How
> would this be different, assuming you elect not to change your
> implementation to comply?
> >
> > Thanks,
> >
> > --John
> >
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--94eb2c055f4ec9226e054d8f8639
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi, everyone,<div><br></div><div>I think the distinction i=
s between &quot;default&quot; and &quot;default&quot;, i.e. clearly communi=
cating what is meant by &quot;default&quot; in this document.</div><div><br=
></div><div>I think it would be perfectly fine for implementers to provide =
copious &quot;release notes&quot; detailing what has changed, AND to apply =
whatever policy gunk is necessary, on performing a software upgrade, to ens=
ure no adverse effects.</div><div><br></div><div>In other words, &quot;defa=
ult&quot; here would mean the out-of-the-box behavior of an otherwise uncon=
figured device, when BGP is enabled (regardless of AFI/SAFI combinations).<=
/div><div><br></div><div>By definition, a new deployment of a router can&#3=
9;t cut off connectivity, since it cannot come into existence with said con=
nectivity.</div><div><br></div><div>Would making that distinction suffice, =
for everyone?</div><div><br></div><div>Brian</div><div><br></div><div>P.S. =
While I do applaud the vendor(s) for finally deciding not to break things w=
hen code gets upgraded, separating upgrade from new deploy is all that is r=
equired.</div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quot=
e">On Wed, Apr 19, 2017 at 4:34 PM, Enke Chen <span dir=3D"ltr">&lt;<a href=
=3D"mailto:enkechen@cisco.com" target=3D"_blank">enkechen@cisco.com</a>&gt;=
</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .=
8ex;border-left:1px #ccc solid;padding-left:1ex">John,<br>
<br>
I had &quot;in this case&quot; with the statement &quot;the default can not=
 be changed&quot;.<br>
The reason is that the behavior change may completely cutoff connectivity<b=
r>
in this case.<br>
<br>
Thanks.=C2=A0 -- Enke<br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
On 4/19/17 4:25 PM, John Scudder wrote:<br>
&gt; (As an individual contributor)<br>
&gt;<br>
&gt; On Apr 19, 2017, at 7:18 PM, Acee Lindem (acee) &lt;<a href=3D"mailto:=
acee@cisco.com">acee@cisco.com</a>&gt; wrote:<br>
&gt;&gt; the draft is conspicuously missing a =E2=80=9CBackwards Compatibil=
ity=E2=80=9D section.<br>
&gt;<br>
&gt; Seriously? &quot;Backwards compatibility&quot; in this case is &quot;c=
onfigure your router to do what it used to&quot;, right? We need a section =
to say that?<br>
&gt;<br>
&gt; I must be missing something.<br>
&gt;<br>
&gt; Also, to Enke&#39;s &quot;we can&#39;t ever change our defaults&quot; =
point -- there are many RFCs. Some you probably comply with. Some you proba=
bly don&#39;t. How would this be different, assuming you elect not to chang=
e your implementation to comply?<br>
&gt;<br>
&gt; Thanks,<br>
&gt;<br>
&gt; --John<br>
&gt;<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--94eb2c055f4ec9226e054d8f8639--


From nobody Wed Apr 19 19:56:37 2017
Return-Path: <jefftant.ietf@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C559F12EAF5 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 19:56:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4jrMNxkh1jBw for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 19:56:34 -0700 (PDT)
Received: from mail-io0-x242.google.com (mail-io0-x242.google.com [IPv6:2607:f8b0:4001:c06::242]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF8FD12EAF4 for <idr@ietf.org>; Wed, 19 Apr 2017 19:56:33 -0700 (PDT)
Received: by mail-io0-x242.google.com with SMTP id x86so10845513ioe.3 for <idr@ietf.org>; Wed, 19 Apr 2017 19:56:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=u2LM+c/1YjKCaU6C62FcRePcNA/x7SDaeyiOOso9eWU=; b=f++iNHKG0SehJVlx3YiREHCe4ys/2xva4qTtrsVZoZVR0d4+22Lv6aw9lJzdkWBarx NNpFJK8M214Y9emZx1SaQUoTWtr3HssAI+gW5dpTcK++MqBEW/62xerlTQvUfCUzWg6p bG0W6EppcdACr9Qly4gta9h6wgjyNwuNF/61DnDiP8B78KF0XK6NUeroMIOa2E0w+qfj 1pbvjxQC7gpMhB500YmF5VqVrxYPCM3CVh4yL1efN8fhhxqUs35T2srJw0sm0iHiianw iFNAxRA+WHUpUcGt0Nkmbu0vjSrEOR4NX60BZ5YMVaXCBH+zi901NqXcCWyjdPGnqSCK yPsw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=u2LM+c/1YjKCaU6C62FcRePcNA/x7SDaeyiOOso9eWU=; b=rgeTpRwWmkJJZ4+28PXvNNWtFe1I3eJpGtvzEzUD0H7l31Y/Ki8St/d0XDq+cwZe3V v3OJhuIL/r0t81VEnx6Y+G+qSxnQEySMKvbIYOJl1dxTSmwEXRuPerz6r+D+MUmRGQoC HuIPX56J7iWEo3I0FbUz2euDHrU9pA5mBdAnRgotGd4B38YAWu7m8r/z6UE2P+fx9ZFa Q1Wmtq/NCtp3/pksqg85LAYWTwaMhgZGkDPFMr/iSQkILR7kD5yiDvv5+3vfxoPCCGat ofwShveBMJbXYF3HarehQpXpUG19g7k9r/9ppU6DaO7KZ+pYsS9k4cUWgU23uCDaNgZq DBfA==
X-Gm-Message-State: AN3rC/7pb8dPQgnXUI29prL3Z/3Ser+CkTLs5tTG0RWUI7td1uoDlOPV w73F4s8ihafDKA==
X-Received: by 10.99.149.16 with SMTP id p16mr5885754pgd.112.1492656993244; Wed, 19 Apr 2017 19:56:33 -0700 (PDT)
Received: from [10.178.77.48] ([192.55.54.60]) by smtp.gmail.com with ESMTPSA id x9sm6841518pff.98.2017.04.19.19.56.31 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 19 Apr 2017 19:56:31 -0700 (PDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (1.0)
From: Jeff Tantsura <jefftant.ietf@gmail.com>
X-Mailer: iPhone Mail (14E304)
In-Reply-To: <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com>
Date: Wed, 19 Apr 2017 19:56:30 -0700
Cc: "John G. Scudder" <jgs@juniper.net>, idr@ietf.org, Hares Susan <shares@ndzh.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <B465B3A2-7538-45D5-8B27-A2B645C36C19@gmail.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com>
To: Enke Chen <enkechen@cisco.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/dIKMo7Qi6Odc2QRXT741t4Lv4Ao>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 02:56:36 -0000

+1 Enke!
Net every network engineer (unfortunately) follows IETF (or reads release no=
tes), not every vendor clearly explains default behavior changes..

Regards,
Jeff

> On Apr 19, 2017, at 15:53, Enke Chen <enkechen@cisco.com> wrote:
>=20
> Hi, Folks:
>=20
> The document defines or changes the "default behavior" for EBGP.  However,=
 the default
> behavior for a particular code base or release was set long time ago, and i=
n some cases
> more than 20 years ago. To avoid breaking existing deployment in this case=
, the default
> behavior in the code can not be changed (with or without this document). T=
hen it becomes
> a deployment practice for the policies to be configured.
>=20
> So it seems to me that "Standard Track" may not be the right classificatio=
n for this
> document.  "Deployment recommendation or Practice" might be more appropria=
te.
>=20
> Thanks.  -- Enke
>=20
>> On 4/19/17 9:49 AM, John G. Scudder wrote:
>> IDR folks,
>>=20
>> As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has co=
mpleted GROW WGLC and is now in IETF LC.
>>=20
>> As nobody other than Alvaro noticed (thank you for noticing, Alvaro!) dra=
ft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that it mand=
ates what a BGP implementation MUST do. See section 2 of the draft for the d=
etails. It's short and easy to read.
>>=20
>> If we had noticed this earlier, we would have either chosen to home the d=
ocument in IDR, or explicitly made an exception to have GROW do the work. Gi=
ven that we didn't, though, the plan is to continue progressing the draft as=
 a GROW document. However:
>>=20
>> - As I understand it, the authors will add the Updates: 4271 header in ad=
dition to potentially taking in other comments from AD review.
>> - If anyone has a strong objection to the unusual procedure, please say s=
o (either on-list, or to the chairs + AD).
>> - Please send any last call comments to the IETF LC (see below) although i=
t's also OK to discuss here on the IDR list of course.
>>=20
>> Many IDR participants are also active in GROW and have had their say, but=
 if you haven't, now's your chance.
>>=20
>> Thanks,
>>=20
>> --John
>>=20
>>> Begin forwarded message:
>>>=20
>>> From: The IESG <iesg-secretary@ietf.org>
>>> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Ro=
ute Propagation Behavior Without Policies) to Proposed Standard
>>> Date: April 18, 2017 at 5:16:05 PM EDT
>>> To: "IETF-Announce" <ietf-announce@ietf.org>
>>> Cc: grow-chairs@ietf.org, grow@ietf.org, draft-ietf-grow-bgp-reject@ietf=
.org, christopher.morrow@gmail.com
>>> Reply-To: ietf@ietf.org
>>>=20
>>>=20
>>> The IESG has received a request from the Global Routing Operations WG
>>> (grow) to consider the following document:
>>> - 'Default EBGP Route Propagation Behavior Without Policies'
>>> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>>>=20
>>> The IESG plans to make a decision in the next few weeks, and solicits
>>> final comments on this action. Please send substantive comments to the
>>> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments may b=
e
>>> sent to iesg@ietf.org instead. In either case, please retain the
>>> beginning of the Subject line to allow automated sorting.
>>>=20
>>> Abstract
>>>=20
>>> This document defines the default behavior of a BGP speaker when
>>> there is no import or export policy associated with an External BGP
>>> session.
>>>=20
>>>=20
>>> The file can be obtained via
>>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>>>=20
>>> IESG discussion can be tracked via
>>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>>>=20
>>> This IETF LC, which originally concluded on 2017-04-18, is being=20
>>> extended to allow for additional input to be provided. Ops AD (for GROW)=
=20
>>> and Routing AD (for IDR) wish to ensure that cross WG discussions have=20=

>>> had a chance to occur.
>>>=20
>>> No IPR declarations have been submitted directly on this I-D.
>>=20
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>=20
>=20
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr


From nobody Wed Apr 19 20:36:36 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48A89129412 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 20:36:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yoDlb7x79wf1 for <idr@ietfa.amsl.com>; Wed, 19 Apr 2017 20:36:21 -0700 (PDT)
Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E92912EAFF for <idr@ietf.org>; Wed, 19 Apr 2017 20:36:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3025; q=dns/txt; s=iport; t=1492659380; x=1493868980; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=Aq9DMZ2RxxkCxzZ974D0ohrT73n/2IYLk3JhY5KO6y8=; b=TCKjjC3qNKt2OSi9/Ud0hDNdz1MDekPJJYuc2Sefr6pK+2I4MtF+wCTy tlzQlNdHeR70GnfQiFEcK79z27gax+cMI5HFjoauZcT1RMeh4aYkoq6iN yWjXPw6Ibx1UkMwLa0Y84e89weLiBDdtxzvrQz3OywbuEdY0imVu7NGcC Y=;
X-IronPort-AV: E=Sophos;i="5.37,223,1488844800"; d="scan'208";a="233270250"
Received: from alln-core-6.cisco.com ([173.36.13.139]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Apr 2017 03:36:19 +0000
Received: from [10.24.96.175] ([10.24.96.175]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id v3K3aHpd015466; Thu, 20 Apr 2017 03:36:18 GMT
To: Brian Dickson <brian.peter.dickson@gmail.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com> <CAH1iCirFhb3HuREBDuuDbC-fuiinSFW6UuSk61MrEj9GEaHtsw@mail.gmail.com>
Cc: John Scudder <jgs@juniper.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <8a242116-e17b-9c3f-00d4-a2e606a0c5b4@cisco.com>
Date: Wed, 19 Apr 2017 20:36:17 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <CAH1iCirFhb3HuREBDuuDbC-fuiinSFW6UuSk61MrEj9GEaHtsw@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/lGW_PTX1-7E6DBGpzRllW71zLsc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 03:36:23 -0000

Hi, Brian:

I think that the backward compatibility concern is more about existing
deployment. For example, say an existing router does not have an inbound
policy and just accepts whatever routes from its provider, but it does 
have an outbound policy.  Let us further assume that the default behavior
in the software is to accept updates from a neighbor without an inbound
policy. 

Assume in the new code the default behavior is changed to drop updates from
a neighbor without an inbound policy.  Then as soon as the new software
is deployed on that router, the updates from the provider would be dropped
without any config changes.

Thanks.  -- Enke

On 4/19/17 7:01 PM, Brian Dickson wrote:
> Hi, everyone,
> 
> I think the distinction is between "default" and "default", i.e. clearly communicating what is meant by "default" in this document.
> 
> I think it would be perfectly fine for implementers to provide copious "release notes" detailing what has changed, AND to apply whatever policy gunk is necessary, on performing a software upgrade, to ensure no adverse effects.
> 
> In other words, "default" here would mean the out-of-the-box behavior of an otherwise unconfigured device, when BGP is enabled (regardless of AFI/SAFI combinations).
> 
> By definition, a new deployment of a router can't cut off connectivity, since it cannot come into existence with said connectivity.
> 
> Would making that distinction suffice, for everyone?
> 
> Brian
> 
> P.S. While I do applaud the vendor(s) for finally deciding not to break things when code gets upgraded, separating upgrade from new deploy is all that is required.
> 
> On Wed, Apr 19, 2017 at 4:34 PM, Enke Chen <enkechen@cisco.com <mailto:enkechen@cisco.com>> wrote:
> 
>     John,
> 
>     I had "in this case" with the statement "the default can not be changed".
>     The reason is that the behavior change may completely cutoff connectivity
>     in this case.
> 
>     Thanks.  -- Enke
> 
>     On 4/19/17 4:25 PM, John Scudder wrote:
>     > (As an individual contributor)
>     >
>     > On Apr 19, 2017, at 7:18 PM, Acee Lindem (acee) <acee@cisco.com <mailto:acee@cisco.com>> wrote:
>     >> the draft is conspicuously missing a “Backwards Compatibility” section.
>     >
>     > Seriously? "Backwards compatibility" in this case is "configure your router to do what it used to", right? We need a section to say that?
>     >
>     > I must be missing something.
>     >
>     > Also, to Enke's "we can't ever change our defaults" point -- there are many RFCs. Some you probably comply with. Some you probably don't. How would this be different, assuming you elect not to change your implementation to comply?
>     >
>     > Thanks,
>     >
>     > --John
>     >
> 
>     _______________________________________________
>     Idr mailing list
>     Idr@ietf.org <mailto:Idr@ietf.org>
>     https://www.ietf.org/mailman/listinfo/idr <https://www.ietf.org/mailman/listinfo/idr>
> 
> 


From nobody Thu Apr 20 00:20:15 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C177129440 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 00:20:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.4
X-Spam-Level: 
X-Spam-Status: No, score=-5.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FkunzgX_zX2n for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 00:20:11 -0700 (PDT)
Received: from relais-inet.orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCC2C127599 for <idr@ietf.org>; Thu, 20 Apr 2017 00:20:10 -0700 (PDT)
Received: from opfednr07.francetelecom.fr (unknown [xx.xx.xx.71]) by opfednr27.francetelecom.fr (ESMTP service) with ESMTP id 87740A010D; Thu, 20 Apr 2017 09:20:09 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.41]) by opfednr07.francetelecom.fr (ESMTP service) with ESMTP id 4DEA61C005D; Thu, 20 Apr 2017 09:20:09 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM31.corporate.adroot.infra.ftgroup ([fe80::2cc9:4bac:7b7d:229d%19]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 09:20:09 +0200
From: <bruno.decraene@orange.com>
To: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, "Hares Susan" <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuSz83ZOTfNxQXEupYB1KLWck6qHNOHCwgACf9zA=
Date: Thu, 20 Apr 2017 07:20:08 +0000
Message-ID: <22424_1492672809_58F86129_22424_6810_15_53C29892C857584299CBF5D05346208A31CBF5DB@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup>
In-Reply-To: <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/G2bXXr1te9QsAk0swMOOAGgQiqI>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 07:20:14 -0000

5) Isn't this problem statement/proposed solution a sub-part of the route l=
eak issue?
IOW, wouldn't it be better addressed by/in draft-ymbk-idr-bgp-open-policy o=
r draft-ietf-idr-route-leak-detection-mitigation ?

--Bruno

> From: bruno.decraene@orange.com  > Sent: Thursday, April 20, 2017 12:13 AM
>=20
 > Thanks John for bringing this in IDR.
 >=20
 > I admit that I was not following this subject so my comments might be re=
dundant or even
 > stupid.
 >=20
 > 1) Am I missing something or would this break all existing EBGP sessions=
 deployed with no
 > policy?
 > If so this would definitely not be deployment friendly. Especially for B=
GP/MPLS VPN
 > networks using EBGP for PE-CE routing and which have little use of filte=
ring policies.
 >=20
 > 2) BTW, what is exactly eligible as an "import policy"? e.g.
 > - is an explicit policy capping the number of received routes eligible a=
s an "import policy"?
 > - is Route Target filtering (either automatic or manual) a routing polic=
y?
 >=20
 > Same question of "export policy". e.g.
 > Is an expert policy tagging community eligible?
 >=20
 >=20
 > 3) From the introduction
 > "   There are BGP routing security issues that need to be addressed to
 >    make the Internet more stable. [...]  This document provides guidance=
 to BGP [RFC4271]
 >    implementers to improve the default level of Internet routing
 >    security."
 >=20
 > Does this mean that this proposition should be restricted to Internet ro=
uting? (while BGP is
 > used for many others applications)
 >=20
 > 4) Alternatively, there could be a (capability) signaling during the OPE=
N of the EBGP session.
 > With one end requesting this behavior to its peer. (or alternatively it'=
s peer advertising the
 > presence of a policy and the receiver taking its own decision).
 >=20
 > Possibly, some of the requirements may already be addressed by configuri=
ng a policy
 > limiting the number of routes acceptable from a peer/customers, and clos=
ing the EBGP
 > sessions when this limit is reached. This seems this would catch custome=
rs/peers advertising
 > the full routing by mistake/misconfiguration.
 >=20
 > Thanks
 > Regards,
 > --Bruno
 >=20
 > > From John G. Scudder  > Sent: Wednesday, April 19, 2017 6:50 PM
 > >
 >  > IDR folks,
 >  >
 >  > As many of you have already noticed, draft-ietf-grow-bgp-reject-05 ha=
s completed GROW
 >  > WGLC and is now in IETF LC.
 >  >
 >  > As nobody other than Alvaro noticed (thank you for noticing, Alvaro!)=
 draft-ietf-grow-
 > bgp-
 >  > reject-05 represents an update to RFC 4271, in that it mandates what =
a BGP
 > implementation
 >  > MUST do. See section 2 of the draft for the details. It's short and e=
asy to read.
 >  >
 >  > If we had noticed this earlier, we would have either chosen to home t=
he document in
 > IDR,
 >  > or explicitly made an exception to have GROW do the work. Given that =
we didn't, though,
 >  > the plan is to continue progressing the draft as a GROW document. How=
ever:
 >  >
 >  > - As I understand it, the authors will add the Updates: 4271 header i=
n addition to
 > potentially
 >  > taking in other comments from AD review.
 >  > - If anyone has a strong objection to the unusual procedure, please s=
ay so (either on-list,
 > or
 >  > to the chairs + AD).
 >  > - Please send any last call comments to the IETF LC (see below) altho=
ugh it's also OK to
 >  > discuss here on the IDR list of course.
 >  >
 >  > Many IDR participants are also active in GROW and have had their say,=
 but if you haven't,
 >  > now's your chance.
 >  >
 >  > Thanks,
 >  >
 >  > --John
 >  >
 >  > > Begin forwarded message:
 >  > >
 >  > > From: The IESG <iesg-secretary@ietf.org>
 >  > > Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default EB=
GP Route Propagation
 >  > Behavior Without Policies) to Proposed Standard
 >  > > Date: April 18, 2017 at 5:16:05 PM EDT
 >  > > To: "IETF-Announce" <ietf-announce@ietf.org>
 >  > > Cc: grow-chairs@ietf.org, grow@ietf.org, draft-ietf-grow-bgp-reject=
@ietf.org,
 >  > christopher.morrow@gmail.com
 >  > > Reply-To: ietf@ietf.org
 >  > >
 >  > >
 >  > > The IESG has received a request from the Global Routing Operations =
WG
 >  > > (grow) to consider the following document:
 >  > > - 'Default EBGP Route Propagation Behavior Without Policies'
 >  > > <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
 >  > >
 >  > > The IESG plans to make a decision in the next few weeks, and solici=
ts
 >  > > final comments on this action. Please send substantive comments to =
the
 >  > > ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments =
may be
 >  > > sent to iesg@ietf.org instead. In either case, please retain the
 >  > > beginning of the Subject line to allow automated sorting.
 >  > >
 >  > > Abstract
 >  > >
 >  > >  This document defines the default behavior of a BGP speaker when
 >  > >  there is no import or export policy associated with an External BGP
 >  > >  session.
 >  > >
 >  > >
 >  > > The file can be obtained via
 >  > > https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
 >  > >
 >  > > IESG discussion can be tracked via
 >  > > https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
 >  > >
 >  > > This IETF LC, which originally concluded on 2017-04-18, is being
 >  > > extended to allow for additional input to be provided. Ops AD (for =
GROW)
 >  > > and Routing AD (for IDR) wish to ensure that cross WG discussions h=
ave
 >  > > had a chance to occur.
 >  > >
 >  > > No IPR declarations have been submitted directly on this I-D.
 >  >
 >  > _______________________________________________
 >  > Idr mailing list
 >  > Idr@ietf.org
 >  > https://www.ietf.org/mailman/listinfo/idr
 >=20
 > ______________________________________________________________________
 > ___________________________________________________
 >=20
 > Ce message et ses pieces jointes peuvent contenir des informations confi=
dentielles ou
 > privilegiees et ne doivent donc
 > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez r=
ecu ce message par
 > erreur, veuillez le signaler
 > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages=
 electroniques etant
 > susceptibles d'alteration,
 > Orange decline toute responsabilite si ce message a ete altere, deforme =
ou falsifie. Merci.
 >=20
 > This message and its attachments may contain confidential or privileged =
information that
 > may be protected by law;
 > they should not be distributed, used or copied without authorisation.
 > If you have received this email in error, please notify the sender and d=
elete this message
 > and its attachments.
 > As emails may be altered, Orange is not liable for messages that have be=
en modified,
 > changed or falsified.
 > Thank you.
 >=20
 > _______________________________________________
 > Idr mailing list
 > Idr@ietf.org
 > https://www.ietf.org/mailman/listinfo/idr

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Thu Apr 20 00:24:39 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EA713129440 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 00:24:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1NdTfsciX7jF for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 00:24:35 -0700 (PDT)
Received: from relais-inet.orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1C291288B8 for <idr@ietf.org>; Thu, 20 Apr 2017 00:24:35 -0700 (PDT)
Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr21.francetelecom.fr (ESMTP service) with ESMTP id 0AA08C0347; Thu, 20 Apr 2017 09:24:34 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.17]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id CAECF12006E; Thu, 20 Apr 2017 09:24:33 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM24.corporate.adroot.infra.ftgroup ([fe80::a1e6:3e6a:1f68:5f7e%18]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 09:24:33 +0200
From: <bruno.decraene@orange.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>, "John G. Scudder" <jgs@juniper.net>
CC: "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Technical Errata Reported] RFC4271 (5001)
Thread-Index: AQHSuTQcHT9js/KsJUeWRsw9RvAV8aHNDA4A///0uKCAANozcA==
Date: Thu, 20 Apr 2017 07:24:33 +0000
Message-ID: <10707_1492673073_58F86231_10707_4522_2_53C29892C857584299CBF5D05346208A31CBF67F@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <20170419174042.7AA36B814E4@rfc-editor.org> <DCAC4E8F-A609-4DCB-BADB-23434A6F0EAC@cisco.com> <17818_1492627535_58F7B04F_17818_5514_1_53C29892C857584299CBF5D05346208A31CBDD15@OPEXCLILM21.corporate.adroot.infra.ftgroup>
In-Reply-To: <17818_1492627535_58F7B04F_17818_5514_1_53C29892C857584299CBF5D05346208A31CBDD15@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/kudwQScaPz0gtxzgytMc8faBJQY>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5001)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 07:24:38 -0000
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From nobody Thu Apr 20 01:53:39 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9DB912EB8F for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 01:53:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.919
X-Spam-Level: 
X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O_y2PCC0qFJ2 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 01:53:36 -0700 (PDT)
Received: from mail-wm0-f46.google.com (mail-wm0-f46.google.com [74.125.82.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D81212EB84 for <idr@ietf.org>; Thu, 20 Apr 2017 01:53:35 -0700 (PDT)
Received: by mail-wm0-f46.google.com with SMTP id r190so1402474wme.1 for <idr@ietf.org>; Thu, 20 Apr 2017 01:53:35 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=gDA1dECl+SIAj3n5AhFjAPTJ99maHHnWj0canYItITY=; b=kFP7AWc5F16rzl2Re3c1aw3lL87GqXf8J8VZRXeyYm2ucjvHkDgEQL1rwfXTo6xBsJ I5T/ZBO601lmS+93jfG4UO2Xfd96yFLwuzxnjSiqBu/CItuiPG41cX3PaqSQMsggx4u4 QeFyfJplidIfvxKjQCpy4t8YSjRlAnRchSik7OLSaqfopvaoe0TAG+JixyOpuWSwN6TU XbQoUpFn2M0WZjsPEeHOCzgB47YTDknjnPIm/BAJz9VDABCzfyrVNSC0Bk219Cs6Sn8G kBfYFtw5HiI3uLIbJuFfevYgWkx55F7Um0ULCm9KGPSYyBW1llSuAHLpGS95BEpE07Sr Frkg==
X-Gm-Message-State: AN3rC/7sLIa//TdxUWa1TAqYRETs+x2twHpAKRDHkMz39YyK4brnHD6B 1qEP93sAv6Ul8w==
X-Received: by 10.28.21.13 with SMTP id 13mr2047483wmv.118.1492678414455; Thu, 20 Apr 2017 01:53:34 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id f64sm7192072wmg.2.2017.04.20.01.53.25 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 01:53:25 -0700 (PDT)
Date: Thu, 20 Apr 2017 10:53:16 +0200
From: Job Snijders <job@ntt.net>
To: "Acee Lindem (acee)" <acee@cisco.com>
Cc: Keyur Patel <keyur@arrcus.com>, "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170420085316.g4ktua67iar5nstl@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <D51D46A7.A9732%acee@cisco.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/vmVQkImGKIRCpSWEZA5JLAfF4DY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 08:53:38 -0000

On Wed, Apr 19, 2017 at 08:58:50PM +0000, Acee Lindem (acee) wrote:
> I would agree with Keyur, For better or worse, our Cisco NX-OS BGP
> implementation does not require configuration of a peer policy.
> 
> In fact, this requirement is contrary to some of the auto-discovery
> mechanisms we are exploring where only knowledge of the mutual address
> families is required.

I know Cisco has been trying hard to market NX-OS as a data-center
centric device, not to be used on 'the Internet', however, folks do
connect NX-OS devices to the internet and this can result in pain for
others [1], especially when the defaults are insecure.

Kind regards,

Job

[1]: https://www.ietf.org/mail-archive/web/idr/current/msg16703.html 


From nobody Thu Apr 20 01:58:02 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0464A12EB8C for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 01:58:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.919
X-Spam-Level: 
X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xp_bt_P90XWT for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 01:57:59 -0700 (PDT)
Received: from mail-wm0-f46.google.com (mail-wm0-f46.google.com [74.125.82.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74C4812EB9F for <idr@ietf.org>; Thu, 20 Apr 2017 01:57:59 -0700 (PDT)
Received: by mail-wm0-f46.google.com with SMTP id y18so1425542wmh.0 for <idr@ietf.org>; Thu, 20 Apr 2017 01:57:59 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=2bpz0WLPazyMSkimDkjJNRIU1cAAJz9KKDt3JcbMh/A=; b=C3S0RIfdveHC9NmQ2SPGhNs3t18erjSp+DiWmexZWbKbMDbRyPX6FxjOUpqfa8svLB yUf4uMQfM36tFFiv7mn5EMiWWXpn4XJ7eXz3pEdk9GON3f+eUXRM+0nUhyz8KePcRZYU 2J0jCGFlPsYhbFJG+WUQQR36A57KQsALVTv1lvZ/aGiICFtHDBV9r+aY6r2Mjrt7kmva BuCbn14GpHmdSgPnzv+L0sSr2DaVacLpy6fkR8BbTalxheOA4xfC/67GAQDUEMpEGICh YIdqeYErqugY4ZrDi+OmkTSdRyncMzW5LCRNLigrj42/Q3Hv2Fz8AGZLQoqkb+yrwqSV lwCA==
X-Gm-Message-State: AN3rC/4vxrWvqOY+KKRIqMct3UyKgiNhBsi2/OAfqgu4ZY7+VWQUj7DR +Co+moZbBW/wbg==
X-Received: by 10.28.218.67 with SMTP id r64mr2037362wmg.36.1492678677878; Thu, 20 Apr 2017 01:57:57 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id v23sm6188245wra.65.2017.04.20.01.57.56 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 01:57:56 -0700 (PDT)
Date: Thu, 20 Apr 2017 10:57:55 +0200
From: Job Snijders <job@ntt.net>
To: bruno.decraene@orange.com
Cc: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170420085755.sbzdtcjhirdoi3b3@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/a01c09lhllWvfNYf_cAUjSuJ0fg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 08:58:01 -0000

On Wed, Apr 19, 2017 at 10:12:48PM +0000, bruno.decraene@orange.com wrote:
> Thanks John for bringing this in IDR.
> 
> I admit that I was not following this subject so my comments might be redundant or even stupid.
> 
> 1) Am I missing something or would this break all existing EBGP
> sessions deployed with no policy?

Yes, you are missing the fact that a wild variety of defaults has been
deployed in the wild:

    o some reject on ingress, promiscuous on egress
    o some reject on both ingress and egress
    o some accept and announce everything

This documents aims to align those on a singular safe default: on EBGP
you'll need to configure a policy for something to happen.

> If so this would definitely not be deployment friendly. Especially for
> BGP/MPLS VPN networks using EBGP for PE-CE routing and which have
> little use of filtering policies.

This is what release notes are for.

> 2) BTW, what is exactly eligible as an "import policy"? e.g.
> - is an explicit policy capping the number of received routes eligible as an "import policy"? 
> - is Route Target filtering (either automatic or manual) a routing policy?
> 
> Same question of "export policy". e.g.
> Is an expert policy tagging community eligible?

i do not understand what you mean. Can you elaborate or phrase
differently?

> 3) From the introduction
> "   There are BGP routing security issues that need to be addressed to
>    make the Internet more stable. [...]  This document provides guidance to BGP [RFC4271]
>    implementers to improve the default level of Internet routing
>    security."
> 
> Does this mean that this proposition should be restricted to Internet
> routing? (while BGP is used for many others applications)

It is restricted to EBGP.

> 4) Alternatively, there could be a (capability) signaling during the
> OPEN of the EBGP session. With one end requesting this behavior to its
> peer. (or alternatively it's peer advertising the presence of a policy
> and the receiver taking its own decision).
> 
> Possibly, some of the requirements may already be addressed by
> configuring a policy limiting the number of routes acceptable from a
> peer/customers, and closing the EBGP sessions when this limit is
> reached. This seems this would catch customers/peers advertising the
> full routing by mistake/misconfiguration.

no.

Kind regards,

Job


From nobody Thu Apr 20 02:03:16 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF25912EB9D for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:03:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, RCVD_IN_SORBS_SPAM=0.5] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ux_qT1TpG9Bp for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:03:13 -0700 (PDT)
Received: from mail-wr0-f171.google.com (mail-wr0-f171.google.com [209.85.128.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 96DED12EB96 for <idr@ietf.org>; Thu, 20 Apr 2017 02:03:13 -0700 (PDT)
Received: by mail-wr0-f171.google.com with SMTP id w50so7782387wrc.0 for <idr@ietf.org>; Thu, 20 Apr 2017 02:03:13 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=n8Jj/krBBPQyBoS5XN/PMforJO3tPRjRJqKI8XEjwUU=; b=N+2cimAPTEIPcPLUYQVQybj9tnZ718FGYbtCnW8zdvxAc7ikQOgXj7zlMhmW/e2Y9S wcozy+vrWPqMq5XWsmUqrIWdfJ/JubncT03XT7tU1ZlBEGKgADXzjeuE0lm1WN08jVOn LKeUNyZTXAt1sVt1od0rrL0X8/pKvij/Dpe65203NkxLtmII33qS2/tkknZt1cs+2HcD BCvDIwybXCqOakxorQs5nr6ZmcThtfXXXTuI1hd+LhhkuhZF6lwQ5KfrkGVAZiISjPzC krT4JIBbQ4tCu1MAbYxCxFAy8TQ8g/eTi27vois8t+9luUs56hDaAtk5ubTaI0kZf3ws VVNA==
X-Gm-Message-State: AN3rC/5pUP7wmh7+ykIqnyTvLgdG4ZQBkgRmehmma1LNXkOyx9E91y+/ 0eomIgzGcmC0QA==
X-Received: by 10.223.166.146 with SMTP id t18mr6613756wrc.15.1492678991861; Thu, 20 Apr 2017 02:03:11 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id s27sm6709427wra.25.2017.04.20.02.03.10 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 02:03:10 -0700 (PDT)
Date: Thu, 20 Apr 2017 11:03:10 +0200
From: Job Snijders <job@ntt.net>
To: "Acee Lindem (acee)" <acee@cisco.com>
Cc: John Scudder <jgs@juniper.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170420090310.gc6pjgcbosj7mdyf@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <D51D6AD2.A9795%acee@cisco.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/rvX6pda8L5Z9-LQs0ybYRU7jOg4>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:03:15 -0000

On Wed, Apr 19, 2017 at 11:30:01PM +0000, Acee Lindem (acee) wrote:
> On 4/19/17, 7:25 PM, "John Scudder" <jgs@juniper.net> wrote:
> >(As an individual contributor)
> >
> >On Apr 19, 2017, at 7:18 PM, Acee Lindem (acee) <acee@cisco.com> wrote:
> >> the draft is conspicuously missing a “Backwards Compatibility” section.
> >
> >Seriously? "Backwards compatibility" in this case is "configure your
> >router to do what it used to", right? We need a section to say that?
> 
> Anytime one proposes to change the default behavior of a decades old
> protocol to be more restrictive, I would expect this to be discussed.

This would be true if there were an actual existing default, however in
the wild we see that all kinds of implementation choices have been made.
It would also be helpful if we don't pretend that this hasn't been
discussed at length, for years.

Kind regards,

Job


From nobody Thu Apr 20 02:05:41 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8729A12EB96 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:05:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, RCVD_IN_SORBS_SPAM=0.5] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zf5DMg9LqgzY for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:05:39 -0700 (PDT)
Received: from mail-wr0-f179.google.com (mail-wr0-f179.google.com [209.85.128.179]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E93412EBAA for <idr@ietf.org>; Thu, 20 Apr 2017 02:05:38 -0700 (PDT)
Received: by mail-wr0-f179.google.com with SMTP id w50so7826911wrc.0 for <idr@ietf.org>; Thu, 20 Apr 2017 02:05:38 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=4E7vukhX1ZArMKxuZt6k9EIpWhvdacVtVvvOCbbJJhU=; b=WLTWvfx+Bo9MIy4b8oRfRyIa6Ub9WVaYkQzfMYGiQXZjvc4j8j9FskHTY5DM5a5kUz OCZageRQ6nbQ9urHzK3R0dDbJaneRjB0qo45sDndTswSZj1pK/uqO3FRilJA6VjadI2D wCZePau4eunrAKheNKmmgrbm9jvbEdJ4XtbZr/tWdAc2ox5qrF7M13xXeU2LOr8e7Elq 8wrC6+wHwdO5FHrXKEoJJe55TzemkUe/CgZWHqZ2xYAlmlToE/TgjPnq02RWizbp7uRd HmeGPBq0svHm1O+IXZkFDP6kvcevzSYdMM6oANDqK3j5uJSO1yp1adokDOVKDBhfyMeG RuOw==
X-Gm-Message-State: AN3rC/7xTgy8IMru9GKE5tYNakRH1sBqSfj4eJn/U7Wx4t7vLjrRG1vC KVmp/zoxkk7mWg==
X-Received: by 10.223.138.178 with SMTP id y47mr7133309wry.22.1492679136924; Thu, 20 Apr 2017 02:05:36 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id u145sm22802598wmu.1.2017.04.20.02.05.35 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 02:05:35 -0700 (PDT)
Date: Thu, 20 Apr 2017 11:05:35 +0200
From: Job Snijders <job@ntt.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: John Scudder <jgs@juniper.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170420090535.cfxn5tbhns5bszvf@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <CA+b+ERnRbAG_WSppAVkWETL0zjeppmm9fwqRu8DV24Hcdihqiw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <CA+b+ERnRbAG_WSppAVkWETL0zjeppmm9fwqRu8DV24Hcdihqiw@mail.gmail.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/-3JwwWj1MmnVH_eM4rullRzXqB8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:05:40 -0000

On Thu, Apr 20, 2017 at 01:30:13AM +0200, Robert Raszuk wrote:
> ​John,
> 
> ​> ​
> How would this be different, assuming you elect not to change your
> implementation to comply?
> 
> ​Well if we are to standardize by rough consensus a RFC which we already
> know is not going to be ​honored for the reasons clearly stated what are we
> gaining ?
> 
> BGP implementations which support inbound policy to accept any routes will
> continue doing so .. and those which do not also will continue not to do
> so.
> 
> So what is the point ?

Although I do not share your pessimistic view on what can and can't be
done, at the very least it will provide guidance for new BGP
implementations. 

Kind regards,

Job


From nobody Thu Apr 20 02:09:50 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7577D12EBA5 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:09:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.419
X-Spam-Level: 
X-Spam-Status: No, score=-1.419 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HBr6n05FvZxY for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:09:48 -0700 (PDT)
Received: from mail-wm0-f42.google.com (mail-wm0-f42.google.com [74.125.82.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EA6912EBB0 for <idr@ietf.org>; Thu, 20 Apr 2017 02:09:45 -0700 (PDT)
Received: by mail-wm0-f42.google.com with SMTP id r190so42279671wme.1 for <idr@ietf.org>; Thu, 20 Apr 2017 02:09:45 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=PjR8MD6bIuxSFr7d6uHcPj6WJYDeZSCE5rwwnCuHb3s=; b=QWi1T2RxSdinaaw26XR+NaIFGdW2YgR7jkeFdHKNffGFPOyLGFiNqxsRFzxeZ6SPi4 /IlUwSnMNrIx6Nvo1Rtd//NW8vjQIgCYzVc01dkFfRTTqby12JtEMoT6GWFuYlInBDKX w3MabpgNIZ2L5t8+B9A9AEbSol+colroCX91LM46rvbiRdHrduqLu+0VjDl6mZeRZx6n llTqGi2GTP2ti//OSYq1u9+zvU9ERzsSF+ayAqzkfbHwEbaxJ9NSoqrV4CLGViWiSqrm RSMxdYLJrsRfQRKvlEjQdo8X0PclBwq1VddJmwMT32GpzeVsW4MAXoZ/xVoS5OL86ZTR Vyvg==
X-Gm-Message-State: AN3rC/6q5HS/ChBkEZjFP+EmGpj2p/SClf9jASc4nYkr9TkS05Xwz1R6 +FNv6rU+RowRZQFpzjgusQ==
X-Received: by 10.28.218.67 with SMTP id r64mr2093632wmg.36.1492679383689; Thu, 20 Apr 2017 02:09:43 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id m139sm7176866wmb.27.2017.04.20.02.09.42 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 02:09:42 -0700 (PDT)
Date: Thu, 20 Apr 2017 11:09:41 +0200
From: Job Snijders <job@ntt.net>
To: Enke Chen <enkechen@cisco.com>
Cc: John Scudder <jgs@juniper.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170420090941.c5yi72mzleto64ph@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/U28h7KItoUQeYB5SFWG0H7bGd8Y>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:09:49 -0000

On Wed, Apr 19, 2017 at 04:34:10PM -0700, Enke Chen wrote:
> I had "in this case" with the statement "the default can not be changed".
> The reason is that the behavior change may completely cutoff connectivity
> in this case.

And very soon after the cutoff a customer may elect to roll back the
change and read the release notes!

The 'complete cutoff' only occurs after a specific sequence of events
which together would represent a cascading failure in due diligence. 

Given that we've suffered through decennia of insecure behaviour on some
platforms, I'd be careful to weigh the cost of such a self-inflicted
'complete cutoff' against the cost on internet operations in general to
persist in the folly behaviour that some platforms present.

Kind regards,

Job


From nobody Thu Apr 20 02:11:11 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A99612EBA9 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:11:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.419
X-Spam-Level: 
X-Spam-Status: No, score=-1.419 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0FutJ3QH4-Xd for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:11:09 -0700 (PDT)
Received: from mail-wm0-f47.google.com (mail-wm0-f47.google.com [74.125.82.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37AAE12EBA4 for <idr@ietf.org>; Thu, 20 Apr 2017 02:11:08 -0700 (PDT)
Received: by mail-wm0-f47.google.com with SMTP id m123so31625037wma.0 for <idr@ietf.org>; Thu, 20 Apr 2017 02:11:08 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=/2Y8JP4Rr5UMhSAR5S7vol13Qhxv43itX09gbQsaAQs=; b=XjcEJsFL8Bs0lLvRgucBGiguFa3OFOgyimrRqudCLn9vbCh9TojBRmwbsMy9MLwfj0 4xyYKX9TF2s7Rnlt5DaAh6pzdssQjrXnwM0rzD/rP799gDW4eIg66epQJT0eSPq1m32j M4A+9j9WIpjxFL4ccGh4TVS3Lj9hJXttrXAQQ4PCdj8XxNt+/zkOkblCNXE3LnpsTFKe iLHz+1gmR+7aEHalX78kvozdxVNq/NUDzBkoZrrNUAmRrrYeyTuVu7YuefCNFJl73i7M rBFgqZmt9ENv64SSQcN70BGMyYbJy7ZLFdobGb08k1krrE68H8UX4KCWwPhVGMIkljTb 82ig==
X-Gm-Message-State: AN3rC/4Et9t9mSPGN8FGnZuOo5eZBP7wBLNBntyJm9MvKN6+dD03iuEu 0g3nKQExFjxsfQ==
X-Received: by 10.28.173.66 with SMTP id w63mr2200011wme.76.1492679466728; Thu, 20 Apr 2017 02:11:06 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id j71sm13047449wmd.12.2017.04.20.02.11.04 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 02:11:04 -0700 (PDT)
Date: Thu, 20 Apr 2017 11:11:03 +0200
From: Job Snijders <job@ntt.net>
To: Jeff Tantsura <jefftant.ietf@gmail.com>
Cc: Enke Chen <enkechen@cisco.com>, Hares Susan <shares@ndzh.com>, idr@ietf.org
Message-ID: <20170420091103.boqup65nsqgkqyjn@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <B465B3A2-7538-45D5-8B27-A2B645C36C19@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <B465B3A2-7538-45D5-8B27-A2B645C36C19@gmail.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/NtgOJs5bJLp_S5G7mPqMPLP2e-E>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:11:10 -0000

On Wed, Apr 19, 2017 at 07:56:30PM -0700, Jeff Tantsura wrote:
> +1 Enke!
> Net every network engineer (unfortunately) follows IETF (or reads
> release notes), not every vendor clearly explains default behavior
> changes..

Or is the reverse true, that IETF participants have not been tracking
operational issues? 

"People may not read release notes" is an extremely weak justification
for insecure behaviour.

Kind regards,

Job


From nobody Thu Apr 20 02:16:16 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF45012EBB6 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:16:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.419
X-Spam-Level: 
X-Spam-Status: No, score=-1.419 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Zuli_zWZFBv for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:16:14 -0700 (PDT)
Received: from mail-wm0-f43.google.com (mail-wm0-f43.google.com [74.125.82.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC1C212EBB8 for <idr@ietf.org>; Thu, 20 Apr 2017 02:16:13 -0700 (PDT)
Received: by mail-wm0-f43.google.com with SMTP id m123so31741994wma.0 for <idr@ietf.org>; Thu, 20 Apr 2017 02:16:13 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=pjmDEWqGpbMbXL1H3KVdSYhlHoz3tZ5YffSAZU872S0=; b=Cjh0W6eAGTpShTZRjmq2srtqohSRURT0U25x17ptzoC31p2ssCLZkFrpkVBkDdx159 9unbf0p5/Kol8i5ZmlMUV3s+fXH4TX4m6CvMac+EadFUjX42wrGBD8fV7Z72U9akBR84 5RMAyBPoF+aDChn8i3VlqzhX9yedtqWfk0QlAGGt89RMQtInYZDnFGkBHUGK35CeSbcF aMUxZJdSxsYFGePVlbwhdP694LYUGieiJ27QD+hjKdseR23AMucpkHNsOj9Mnxz9HJzY HC8qilU73zB2JTVinCl2F5c5xKmGV6G3OmeLbcX9l840N0xAKQiV6oaQ6nh9/XDLckYC mGaA==
X-Gm-Message-State: AN3rC/6dhzohiUpgthiETIQeYGuJOdg6Ry8tKPR1w9SYQbWayjoq7dY3 jxDCP6fCqTiHrg==
X-Received: by 10.28.29.148 with SMTP id d142mr1822494wmd.93.1492679772150; Thu, 20 Apr 2017 02:16:12 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id h65sm6795713wrh.32.2017.04.20.02.16.10 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 02:16:11 -0700 (PDT)
Date: Thu, 20 Apr 2017 11:16:10 +0200
From: Job Snijders <job@ntt.net>
To: bruno.decraene@orange.com
Cc: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170420091610.e67lqxdkdmixvaci@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <22424_1492672809_58F86129_22424_6810_15_53C29892C857584299CBF5D05346208A31CBF5DB@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <22424_1492672809_58F86129_22424_6810_15_53C29892C857584299CBF5D05346208A31CBF5DB@OPEXCLILM21.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/poGSX4XwVZJCLG2KFGblGAnX_-8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:16:15 -0000

On Thu, Apr 20, 2017 at 07:20:08AM +0000, bruno.decraene@orange.com wrote:
> 5) Isn't this problem statement/proposed solution a sub-part of the
> route leak issue?  IOW, wouldn't it be better addressed by/in
> draft-ymbk-idr-bgp-open-policy or draft-ietf-idr-route-leak-detection-mitigation ?

Why do you think so?

Kind regards,

Job


From nobody Thu Apr 20 02:29:06 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A04E12EBC3 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:29:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 62e2bmzWIoh0 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:29:02 -0700 (PDT)
Received: from relais-inet.orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5189712EBBF for <idr@ietf.org>; Thu, 20 Apr 2017 02:29:02 -0700 (PDT)
Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) by opfednr26.francetelecom.fr (ESMTP service) with ESMTP id AEFC7204BB; Thu, 20 Apr 2017 11:29:00 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.58]) by opfednr00.francetelecom.fr (ESMTP service) with ESMTP id 7A4C21A0084; Thu, 20 Apr 2017 11:29:00 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM33.corporate.adroot.infra.ftgroup ([fe80::3881:fc15:b4b2:9017%19]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 11:29:00 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@ntt.net>
CC: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, "Hares Susan" <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSubQ1Fx6qnNOc8UaJCUOYEKex/KHN9lnA
Date: Thu, 20 Apr 2017 09:28:59 +0000
Message-ID: <8442_1492680540_58F87F5C_8442_1101_11_53C29892C857584299CBF5D05346208A31CBFD43@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420085755.sbzdtcjhirdoi3b3@hanna.meerval.net>
In-Reply-To: <20170420085755.sbzdtcjhirdoi3b3@hanna.meerval.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/9Qn2bHQw1QIruWMCJIoEN0Z-qC4>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:29:04 -0000

Job,

> From: Job Snijders [mailto:job@ntt.net]  > Sent: Thursday, April 20, 2017=
 10:58 AM
>=20
 > On Wed, Apr 19, 2017 at 10:12:48PM +0000, bruno.decraene@orange.com wrot=
e:
 > > Thanks John for bringing this in IDR.
 > >
 > > I admit that I was not following this subject so my comments might be =
redundant or even
 > stupid.
 > >
 > > 1) Am I missing something or would this break all existing EBGP
 > > sessions deployed with no policy?
 >=20
 > Yes, you are missing the fact that a wild variety of defaults has been
 > deployed in the wild:
 >=20
 >     o some reject on ingress, promiscuous on egress
 >     o some reject on both ingress and egress
 >     o some accept and announce everything
 >=20
 > This documents aims to align those on a singular safe default: on EBGP
 > you'll need to configure a policy for something to happen.

My comment still applies to some implementations and some deployments.
=20
 > > If so this would definitely not be deployment friendly. Especially for
 > > BGP/MPLS VPN networks using EBGP for PE-CE routing and which have
 > > little use of filtering policies.
 >=20
 > This is what release notes are for.

Possible awareness does not change the point that this forced change of def=
ault behavior is not deployment friendly for non Internet applications.
=20
 > > 2) BTW, what is exactly eligible as an "import policy"? e.g.
 > > - is an explicit policy capping the number of received routes eligible=
 as an "import policy"?
 > > - is Route Target filtering (either automatic or manual) a routing pol=
icy?
 > >
 > > Same question of "export policy". e.g.
 > > Is an expert policy tagging community eligible?
 >=20
 > i do not understand what you mean. Can you elaborate or phrase
 > differently?
=20
Can this document define what he means by "configured export policy".  Poss=
ibly by referring to standardized yang models.
Alternatively, it looks like the document means that "by default a BGP spea=
ker MUST NOT advertise any routes to an EBGP peer". Which would solve the p=
roblem by not referring anymore to configured export policy.
=20
 > > 3) From the introduction
 > > "   There are BGP routing security issues that need to be addressed to
 > >    make the Internet more stable. [...]  This document provides guidan=
ce to BGP [RFC4271]
 > >    implementers to improve the default level of Internet routing
 > >    security."
 > >
 > > Does this mean that this proposition should be restricted to Internet
 > > routing? (while BGP is used for many others applications)
 >=20
 > It is restricted to EBGP.

Yes, also, but this seems orthogonal to me.
So to rephrase, does this mean that this proposition should be restricted t=
o EBGP sessions used for Internet routing? (as EBGP is used for many others=
 applications)

 >=20
 > > 4) Alternatively, there could be a (capability) signaling during the
 > > OPEN of the EBGP session. With one end requesting this behavior to its
 > > peer. (or alternatively it's peer advertising the presence of a policy
 > > and the receiver taking its own decision).
 > >
 > > Possibly, some of the requirements may already be addressed by
 > > configuring a policy limiting the number of routes acceptable from a
 > > peer/customers, and closing the EBGP sessions when this limit is
 > > reached. This seems this would catch customers/peers advertising the
 > > full routing by mistake/misconfiguration.
 >=20
 > no.
=20
Can this document better describe the problem statement?
Please find below my reading of the current text

"   There are BGP routing security issues that need to be addressed to make=
 the Internet more stable."
Agreed, but not very specific.

"  Route leaks [RFC7908] are part of the  problem, but software defects or =
operator misconfigurations can  contribute too."
- Route leaks seem to be already worked on by draft-ymbk-idr-bgp-open-polic=
y or draft-ietf-idr-route-leak-detection-mitigation. Plus this document is =
not a solution to route leak
- Software defect won't probably be addressed by this proposal
- Misconfiguration won't probably be addressed by this proposal.

So, although I agree that requiring explicit export and import for EBGP ses=
sion used in the Internet is probably an improvement, I disagree with chang=
ing the default of existing deployed EBGP sessions for non Internet usages,=
 as this would breaks current deployment.
At minimum, this should be restricted to new configured sessions ... but ev=
en this would break existing provisioning scripts so this is still not so d=
eployment friendly.

King regards,
-- Bruno=20

 > Kind regards,
 >=20
 > Job

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Thu Apr 20 02:30:39 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 974E612EBCE for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:30:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZGaI8x3h64wg for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:30:36 -0700 (PDT)
Received: from relais-inet.orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FF9A12EBCA for <idr@ietf.org>; Thu, 20 Apr 2017 02:30:36 -0700 (PDT)
Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) by opfedar23.francetelecom.fr (ESMTP service) with ESMTP id DB698160513; Thu, 20 Apr 2017 11:30:34 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.21]) by opfedar06.francetelecom.fr (ESMTP service) with ESMTP id AE51480068; Thu, 20 Apr 2017 11:30:34 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM6C.corporate.adroot.infra.ftgroup ([fe80::d9f5:9741:7525:a199%18]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 11:30:34 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@ntt.net>
CC: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, "Hares Susan" <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuba/Fx6qnNOc8UaJCUOYEKex/KHN/bjQ
Date: Thu, 20 Apr 2017 09:30:34 +0000
Message-ID: <27497_1492680634_58F87FBA_27497_546_3_53C29892C857584299CBF5D05346208A31CBFDCE@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <22424_1492672809_58F86129_22424_6810_15_53C29892C857584299CBF5D05346208A31CBF5DB@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420091610.e67lqxdkdmixvaci@hanna.meerval.net>
In-Reply-To: <20170420091610.e67lqxdkdmixvaci@hanna.meerval.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/LIWBKoAD3q60QYqt7XdU7lYFFAk>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:30:38 -0000

> From: Job Snijders [mailto:job@ntt.net]  > Sent: Thursday, April 20, 2017=
 11:16 AM
>=20
 > On Thu, Apr 20, 2017 at 07:20:08AM +0000, bruno.decraene@orange.com wrot=
e:
 > > 5) Isn't this problem statement/proposed solution a sub-part of the
 > > route leak issue?  IOW, wouldn't it be better addressed by/in
 > > draft-ymbk-idr-bgp-open-policy or draft-ietf-idr-route-leak-detection-=
mitigation ?
 >=20
 > Why do you think so?
=20
Route leak is mentioned in the introduction (read justification) of this do=
cument.

Kind regards,
--Bruno
=20
 > Kind regards,
 >=20
 > Job

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Thu Apr 20 02:32:50 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C6E512EBCF for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:32:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5UuSt0qgPnAE for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:32:47 -0700 (PDT)
Received: from relais-inet.orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF1C812EBBB for <idr@ietf.org>; Thu, 20 Apr 2017 02:32:46 -0700 (PDT)
Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr20.francetelecom.fr (ESMTP service) with ESMTP id B869B404CD; Thu, 20 Apr 2017 11:32:45 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.69]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id 8103D12006D; Thu, 20 Apr 2017 11:32:45 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILMA2.corporate.adroot.infra.ftgroup ([fe80::bc1c:ad2f:eda3:8c3d%18]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 11:32:45 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@ntt.net>
CC: Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>, Robert Raszuk <robert@raszuk.net>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSubVFFx6qnNOc8UaJCUOYEKex/KHN/nYg
Date: Thu, 20 Apr 2017 09:32:44 +0000
Message-ID: <4993_1492680765_58F8803D_4993_4017_1_53C29892C857584299CBF5D05346208A31CBFE4F@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <CA+b+ERnRbAG_WSppAVkWETL0zjeppmm9fwqRu8DV24Hcdihqiw@mail.gmail.com> <20170420090535.cfxn5tbhns5bszvf@hanna.meerval.net>
In-Reply-To: <20170420090535.cfxn5tbhns5bszvf@hanna.meerval.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/kJ67sfM5C28cSTM8fG6iPnr2gJM>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:32:49 -0000
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==


From nobody Thu Apr 20 02:35:20 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8075C12EBDC for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:35:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.419
X-Spam-Level: 
X-Spam-Status: No, score=-1.419 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RhiL3e5UZMz1 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:35:17 -0700 (PDT)
Received: from mail-wm0-f53.google.com (mail-wm0-f53.google.com [74.125.82.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 476E112EBDB for <idr@ietf.org>; Thu, 20 Apr 2017 02:35:17 -0700 (PDT)
Received: by mail-wm0-f53.google.com with SMTP id w64so99161504wma.0 for <idr@ietf.org>; Thu, 20 Apr 2017 02:35:17 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=NAUFKKkK1IfpjOsknbVKx0VaTrN0Q62ddDoo5vupb58=; b=jWO81wbpmNfNMwFJHmh+CTJnrotI/nmPrntNeXVUc2Twkdn3nGwZ2boa6LSUpnPC1o CZ9qVPOuCeVBpkOwnaeeymrggQ3ABzg24H7wLjbxmLcPg5y5ZRkrpttqMctap1/RXPaS j8C7Xvkh6FOEZ+t+PdDSVxuTJqV0TS0mhiwTRo95giLzvLQ6tWXl73SbGSypWM0qGnWE cmKx2NKsgqHZQlUblx3jLP5ETYcRdbA4LCYEDKvEunE6J0q6mPiMiZkSsBkc1Y+7JN+a S9Aiw+3pD8U7uKmAWehV0rUa/+u48yZSS/5eG5vBvyuXwbn/23ZGpgw9mOmHKTbCkgMI MF3w==
X-Gm-Message-State: AN3rC/7HHwwSzBqol3TFyMNrkKuHuhU4CdUk8uPzr31GrbZboQ6b0cQI zUlkSZcMppcEag==
X-Received: by 10.28.35.213 with SMTP id j204mr2140789wmj.41.1492680915602; Thu, 20 Apr 2017 02:35:15 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id 75sm2075305wmp.2.2017.04.20.02.35.14 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 02:35:14 -0700 (PDT)
Date: Thu, 20 Apr 2017 11:35:13 +0200
From: Job Snijders <job@ntt.net>
To: bruno.decraene@orange.com
Cc: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170420093513.zmpv7lunfkgoqtsa@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <22424_1492672809_58F86129_22424_6810_15_53C29892C857584299CBF5D05346208A31CBF5DB@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420091610.e67lqxdkdmixvaci@hanna.meerval.net> <27497_1492680634_58F87FBA_27497_546_3_53C29892C857584299CBF5D05346208A31CBFDCE@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <27497_1492680634_58F87FBA_27497_546_3_53C29892C857584299CBF5D05346208A31CBFDCE@OPEXCLILM21.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/O96Diuj16q7GS3O3VhmbQRkXW-A>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:35:18 -0000

On Thu, Apr 20, 2017 at 09:30:34AM +0000, bruno.decraene@orange.com wrote:
> > From: Job Snijders [mailto:job@ntt.net]  > Sent: Thursday, April 20, 2017 11:16 AM
> > 
>  > On Thu, Apr 20, 2017 at 07:20:08AM +0000, bruno.decraene@orange.com wrote:
>  > > 5) Isn't this problem statement/proposed solution a sub-part of the
>  > > route leak issue?  IOW, wouldn't it be better addressed by/in
>  > > draft-ymbk-idr-bgp-open-policy or draft-ietf-idr-route-leak-detection-mitigation ?
>  > 
>  > Why do you think so?
>  
> Route leak is mentioned in the introduction (read justification) of
> this document.

A mention of the phrase "route leak" does not constitute as to why
draft-ymbk-idr-bgp-open-policy or
draft-ietf-idr-route-leak-detection-mitigation are better at addressing
the problem of insecure defaults. Perhaps the drafts complement each
other?

Kind regards,

Job


From nobody Thu Apr 20 02:37:12 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B71CB12EBDE for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:37:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.699
X-Spam-Level: 
X-Spam-Status: No, score=-4.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x5NIyFojARwr for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:37:09 -0700 (PDT)
Received: from mail-wr0-f174.google.com (mail-wr0-f174.google.com [209.85.128.174]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6EA8912EAC2 for <idr@ietf.org>; Thu, 20 Apr 2017 02:37:09 -0700 (PDT)
Received: by mail-wr0-f174.google.com with SMTP id z109so31685813wrb.1 for <idr@ietf.org>; Thu, 20 Apr 2017 02:37:09 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=q7OH0s/kaJKc24w344kNO307Op60ZY4mRsknyJKOs9Q=; b=eg8R4pnRLOQEFRBugjCtEv4GUT1Uu4+8bQlqsknyman3nAcflVcW+r2omn9Rbrco5c K+YgjV7g40NZfSt+/oCdTKHYwnny5R8RTlAeA2od0jbxucJ/ZjcEg47MQg0ctD7GHavO CcmMsiSG7fEImEDMuzJTLc4PRYAo80dr2rfbRxqqafng2J6svuBsVD5G5dfHy++mzpMx Jb6AWq+Z9zPQbYHvCVXnDaSxAYBxFG1b62zG6UUaGmeyyaEqwb9w6gWElGppgwrgtAPd HM1jBIdJ2556X2LSa0urMYbk3OnnUBsgRs4j7fzHuR+ygbYHINFDH6ejNBbCM979UmSd y9vg==
X-Gm-Message-State: AN3rC/63q7VpHlQpbYfzMcAOT3T36/o4o0NA5F7LO2bypYKqP51cOyKf usTOdcVjtbAb8g==
X-Received: by 10.223.183.21 with SMTP id l21mr6677821wre.191.1492681027863; Thu, 20 Apr 2017 02:37:07 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id n45sm6815330wrn.30.2017.04.20.02.37.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 02:37:06 -0700 (PDT)
Date: Thu, 20 Apr 2017 11:37:06 +0200
From: Job Snijders <job@ntt.net>
To: bruno.decraene@orange.com
Cc: idr wg <idr@ietf.org>, Robert Raszuk <robert@raszuk.net>, Hares Susan <shares@ndzh.com>
Message-ID: <20170420093706.ongrlwi47kew6vt2@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <CA+b+ERnRbAG_WSppAVkWETL0zjeppmm9fwqRu8DV24Hcdihqiw@mail.gmail.com> <20170420090535.cfxn5tbhns5bszvf@hanna.meerval.net> <4993_1492680765_58F8803D_4993_4017_1_53C29892C857584299CBF5D05346208A31CBFE4F@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <4993_1492680765_58F8803D_4993_4017_1_53C29892C857584299CBF5D05346208A31CBFE4F@OPEXCLILM21.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/eLVhQ-Zdq_KgcT9O--NVlgFpSj0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:37:11 -0000

On Thu, Apr 20, 2017 at 09:32:44AM +0000, bruno.decraene@orange.com wrote:
> > From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Job Snijders  > Sent: Thursday, April 20, 2017 11:06 AM
> > 
>  > On Thu, Apr 20, 2017 at 01:30:13AM +0200, Robert Raszuk wrote:
>  > > ​John,
>  > >
>  > > ​> 
>  > > How would this be different, assuming you elect not to change your
>  > > implementation to comply?
>  > >
>  > > ​Well if we are to standardize by rough consensus a RFC which we already
>  > > know is not going to be ​honored for the reasons clearly stated what are we
>  > > gaining ?
>  > >
>  > > BGP implementations which support inbound policy to accept any routes will
>  > > continue doing so .. and those which do not also will continue not to do
>  > > so.
>  > >
>  > > So what is the point ?
>  > 
>  > Although I do not share your pessimistic view on what can and can't be
>  > done, at the very least it will provide guidance for new BGP
>  > implementations.
> 
> This would work for me.
> Can the document be updated to reflect this?

Existing deployments are just that: existing deployments. It seems
superfluous to mention that compliance with the Internet-Draft might be
enforced only after a software upgrade. The same goes for many other
RFCs.

Kind regards,

Job


From nobody Thu Apr 20 02:40:56 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADC4212EBE8 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:40:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N0dnsAyXBudX for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:40:53 -0700 (PDT)
Received: from relais-inet.orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B2DE112EBEB for <idr@ietf.org>; Thu, 20 Apr 2017 02:40:52 -0700 (PDT)
Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar23.francetelecom.fr (ESMTP service) with ESMTP id 1ACE5160514; Thu, 20 Apr 2017 11:40:51 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.13]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id E782AC0085; Thu, 20 Apr 2017 11:40:50 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM6D.corporate.adroot.infra.ftgroup ([fe80::54f9:a6c3:c013:cbc7%19]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 11:40:50 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@ntt.net>, Enke Chen <enkechen@cisco.com>
CC: Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSubXXFx6qnNOc8UaJCUOYEKex/KHN/y1Q
Date: Thu, 20 Apr 2017 09:40:50 +0000
Message-ID: <25911_1492681251_58F88222_25911_625_1_53C29892C857584299CBF5D05346208A31CBFF52@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com> <20170420090941.c5yi72mzleto64ph@hanna.meerval.net>
In-Reply-To: <20170420090941.c5yi72mzleto64ph@hanna.meerval.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/2HOxDcv52OQMEkX3_CKQvek3jvo>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:40:54 -0000

> From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Job Snijders  > Sent=
: Thursday, April 20, 2017 11:10 AM
>=20
 > On Wed, Apr 19, 2017 at 04:34:10PM -0700, Enke Chen wrote:
 > > I had "in this case" with the statement "the default can not be change=
d".
 > > The reason is that the behavior change may completely cutoff connectiv=
ity
 > > in this case.
 >=20
 > And very soon after the cutoff a customer may elect to roll back the
 > change and read the release notes!
 >=20
 > The 'complete cutoff' only occurs after a specific sequence of events
 > which together would represent a cascading failure in due diligence.

The document is asking network operators which have correctly configured th=
eir network to retrofit the configuration of 1000s of EBGP configurations, =
in order to accommodate some operators which are not capable of correctly c=
onfiguring their EBGP session.
Plus the solution is asking those later operators to do a configuration, wh=
ile the assumption is that they can't be trusted to correctly configured th=
eir EBGP session. Why do you think that they won't just copy/past 1 additio=
nal line of configuration in order automatically distribute all the routes =
for each new EBGP session?

Kind regards,
--Bruno
=20
 > Given that we've suffered through decennia of insecure behaviour on some
 > platforms, I'd be careful to weigh the cost of such a self-inflicted
 > 'complete cutoff' against the cost on internet operations in general to
 > persist in the folly behaviour that some platforms present.
 >=20
 > Kind regards,
 >=20
 > Job
 >=20
 > _______________________________________________
 > Idr mailing list
 > Idr@ietf.org
 > https://www.ietf.org/mailman/listinfo/idr

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Thu Apr 20 02:50:22 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 900A412EC46 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:50:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Iye5TI3CfyvB for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:50:19 -0700 (PDT)
Received: from relais-inet.orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7C2C12EC2B for <idr@ietf.org>; Thu, 20 Apr 2017 02:50:18 -0700 (PDT)
Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 79D251C0205; Thu, 20 Apr 2017 11:50:17 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.3]) by opfedar06.francetelecom.fr (ESMTP service) with ESMTP id 54E3980086; Thu, 20 Apr 2017 11:50:17 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM5D.corporate.adroot.infra.ftgroup ([fe80::9898:741c:bc1d:258d%19]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 11:50:14 +0200
From: <bruno.decraene@orange.com>
To: DECRAENE Bruno IMT/OLN <bruno.decraene@orange.com>, Job Snijders <job@ntt.net>
CC: Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSubQ1Fx6qnNOc8UaJCUOYEKex/KHN9lnAgAAL/fA=
Date: Thu, 20 Apr 2017 09:50:13 +0000
Message-ID: <27506_1492681817_58F88459_27506_7804_1_0c74078d-a304-441b-9dbf-abb5d5e4eca2@OPEXCLILM5D.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420085755.sbzdtcjhirdoi3b3@hanna.meerval.net> <8442_1492680540_58F87F5C_8442_1101_11_53C29892C857584299CBF5D05346208A31CBFD43@OPEXCLILM21.corporate.adroot.infra.ftgroup>
In-Reply-To: <8442_1492680540_58F87F5C_8442_1101_11_53C29892C857584299CBF5D05346208A31CBFD43@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/wao0GabFRKZvwUsL-E1QlJWWH2o>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:50:22 -0000

> From: Idr bruno.decraene@orange.com  > Sent: Thursday, April 20, 2017 11:=
29 AM
>=20
 > Job,
 >=20
 > > From: Job Snijders [mailto:job@ntt.net]  > Sent: Thursday, April 20, 2=
017 10:58 AM
 > >
 >  > On Wed, Apr 19, 2017 at 10:12:48PM +0000, bruno.decraene@orange.com w=
rote:
 >  > > Thanks John for bringing this in IDR.
 >  > >
 >  > > I admit that I was not following this subject so my comments might =
be redundant or
 > even
 >  > stupid.
 >  > >
 >  > > 1) Am I missing something or would this break all existing EBGP
 >  > > sessions deployed with no policy?
 >  >
 >  > Yes, you are missing the fact that a wild variety of defaults has been
 >  > deployed in the wild:
 >  >
 >  >     o some reject on ingress, promiscuous on egress
 >  >     o some reject on both ingress and egress
 >  >     o some accept and announce everything
 >  >
 >  > This documents aims to align those on a singular safe default: on EBGP
 >  > you'll need to configure a policy for something to happen.
 >=20
 > My comment still applies to some implementations and some deployments.
 >=20
 >  > > If so this would definitely not be deployment friendly. Especially =
for
 >  > > BGP/MPLS VPN networks using EBGP for PE-CE routing and which have
 >  > > little use of filtering policies.
 >  >
 >  > This is what release notes are for.
 >=20
 > Possible awareness does not change the point that this forced change of =
default behavior is
 > not deployment friendly for non Internet applications.
 >=20
 >  > > 2) BTW, what is exactly eligible as an "import policy"? e.g.
 >  > > - is an explicit policy capping the number of received routes eligi=
ble as an "import
 > policy"?
 >  > > - is Route Target filtering (either automatic or manual) a routing =
policy?
 >  > >
 >  > > Same question of "export policy". e.g.
 >  > > Is an expert policy tagging community eligible?
 >  >
 >  > i do not understand what you mean. Can you elaborate or phrase
 >  > differently?
 >=20
 > Can this document define what he means by "configured export policy".  P=
ossibly by
 > referring to standardized yang models.

Because I think the document means "configured route (re)distribution/adver=
tisement policy".
Possibly this was implied by the word "export" but one could read this as a=
ny outbound policy, while a policy setting some communities would probably =
not help much.

--Bruno (sorry for the spam)

 > Alternatively, it looks like the document means that "by default a BGP s=
peaker MUST NOT
 > advertise any routes to an EBGP peer". Which would solve the problem by =
not referring
 > anymore to configured export policy.
 >=20
 >  > > 3) From the introduction
 >  > > "   There are BGP routing security issues that need to be addressed=
 to
 >  > >    make the Internet more stable. [...]  This document provides gui=
dance to BGP
 > [RFC4271]
 >  > >    implementers to improve the default level of Internet routing
 >  > >    security."
 >  > >
 >  > > Does this mean that this proposition should be restricted to Intern=
et
 >  > > routing? (while BGP is used for many others applications)
 >  >
 >  > It is restricted to EBGP.
 >=20
 > Yes, also, but this seems orthogonal to me.
 > So to rephrase, does this mean that this proposition should be restricte=
d to EBGP sessions
 > used for Internet routing? (as EBGP is used for many others applications)
 >=20
 >  >
 >  > > 4) Alternatively, there could be a (capability) signaling during the
 >  > > OPEN of the EBGP session. With one end requesting this behavior to =
its
 >  > > peer. (or alternatively it's peer advertising the presence of a pol=
icy
 >  > > and the receiver taking its own decision).
 >  > >
 >  > > Possibly, some of the requirements may already be addressed by
 >  > > configuring a policy limiting the number of routes acceptable from a
 >  > > peer/customers, and closing the EBGP sessions when this limit is
 >  > > reached. This seems this would catch customers/peers advertising the
 >  > > full routing by mistake/misconfiguration.
 >  >
 >  > no.
 >=20
 > Can this document better describe the problem statement?
 > Please find below my reading of the current text
 >=20
 > "   There are BGP routing security issues that need to be addressed to m=
ake the Internet
 > more stable."
 > Agreed, but not very specific.
 >=20
 > "  Route leaks [RFC7908] are part of the  problem, but software defects =
or operator
 > misconfigurations can  contribute too."
 > - Route leaks seem to be already worked on by draft-ymbk-idr-bgp-open-po=
licy or draft-ietf-
 > idr-route-leak-detection-mitigation. Plus this document is not a solutio=
n to route leak
 > - Software defect won't probably be addressed by this proposal
 > - Misconfiguration won't probably be addressed by this proposal.
 >=20
 > So, although I agree that requiring explicit export and import for EBGP =
session used in the
 > Internet is probably an improvement, I disagree with changing the defaul=
t of existing
 > deployed EBGP sessions for non Internet usages, as this would breaks cur=
rent deployment.
 > At minimum, this should be restricted to new configured sessions ... but=
 even this would
 > break existing provisioning scripts so this is still not so deployment f=
riendly.
 >=20
 > King regards,
 > -- Bruno
 >=20
 >  > Kind regards,
 >  >
 >  > Job
 >=20
 > ______________________________________________________________________
 > ___________________________________________________
 >=20
 > Ce message et ses pieces jointes peuvent contenir des informations confi=
dentielles ou
 > privilegiees et ne doivent donc
 > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez r=
ecu ce message par
 > erreur, veuillez le signaler
 > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages=
 electroniques etant
 > susceptibles d'alteration,
 > Orange decline toute responsabilite si ce message a ete altere, deforme =
ou falsifie. Merci.
 >=20
 > This message and its attachments may contain confidential or privileged =
information that
 > may be protected by law;
 > they should not be distributed, used or copied without authorisation.
 > If you have received this email in error, please notify the sender and d=
elete this message
 > and its attachments.
 > As emails may be altered, Orange is not liable for messages that have be=
en modified,
 > changed or falsified.
 > Thank you.
 >=20
 > _______________________________________________
 > Idr mailing list
 > Idr@ietf.org
 > https://www.ietf.org/mailman/listinfo/idr

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Thu Apr 20 02:50:53 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C9C212EC2B for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:50:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.699
X-Spam-Level: 
X-Spam-Status: No, score=-4.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HhtyX37ALS1q for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:50:50 -0700 (PDT)
Received: from mail-wr0-f181.google.com (mail-wr0-f181.google.com [209.85.128.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6269F12EC4E for <idr@ietf.org>; Thu, 20 Apr 2017 02:50:35 -0700 (PDT)
Received: by mail-wr0-f181.google.com with SMTP id z109so31917898wrb.1 for <idr@ietf.org>; Thu, 20 Apr 2017 02:50:35 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=/ESPjmJZCnsHw9//2S0imsanxDvpTam/p2jIsv0wAQo=; b=M/XssooH6koNjHexvmJEBAE7fUs8k70unHOxoidfhefvtbVLiPv7w4WhMDHkAvPAII z/0LBBnX3DC1ydlD4su34IX9RpuSTLKcupt0innjtGgBTPGtLATl9L/qkPQY73n9BrcM xv0EXov9Ra/wvPdYNdtJW34VJyrC7bZH4ZueLWejGZKiSc8FlR2Ei5MKyWTj5BNoEzFr GRygv6eKUXSYUlI/5PbXst1idcXilzpFvoW2pnsBoiGOcjA+wrt6j9Ni4hzhrNhVl3RP 12BzB9kNnys+iRRX3Sk8CYfLSav4+ZISAyz+GHGJlQ1ablnOzWURHXdlwVoTXm4e8rIt OuXQ==
X-Gm-Message-State: AN3rC/6JzeGAK/iJt9ueKGfcipEv5bd2S9MB3lKrwnK9an/y/5iazziW 2VIYzYs2+OFtVw==
X-Received: by 10.223.163.17 with SMTP id c17mr6625234wrb.186.1492681833809; Thu, 20 Apr 2017 02:50:33 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id w126sm22449070wmb.25.2017.04.20.02.50.31 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 02:50:32 -0700 (PDT)
Date: Thu, 20 Apr 2017 11:50:31 +0200
From: Job Snijders <job@ntt.net>
To: bruno.decraene@orange.com
Cc: Enke Chen <enkechen@cisco.com>, Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Message-ID: <20170420095031.oxtnocmjkt3zavge@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com> <20170420090941.c5yi72mzleto64ph@hanna.meerval.net> <25911_1492681251_58F88222_25911_625_1_53C29892C857584299CBF5D05346208A31CBFF52@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <25911_1492681251_58F88222_25911_625_1_53C29892C857584299CBF5D05346208A31CBFF52@OPEXCLILM21.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/XituRbPckk9SwLB8ThvkbNeg5ts>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:50:52 -0000

On Thu, Apr 20, 2017 at 09:40:50AM +0000, bruno.decraene@orange.com wrote:
> > From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Job Snijders  > Sent: Thursday, April 20, 2017 11:10 AM
> > 
>  > On Wed, Apr 19, 2017 at 04:34:10PM -0700, Enke Chen wrote:
>  > > I had "in this case" with the statement "the default can not be changed".
>  > > The reason is that the behavior change may completely cutoff connectivity
>  > > in this case.
>  > 
>  > And very soon after the cutoff a customer may elect to roll back the
>  > change and read the release notes!
>  > 
>  > The 'complete cutoff' only occurs after a specific sequence of events
>  > which together would represent a cascading failure in due diligence.
> 
> The document is asking network operators which have correctly
> configured their network to retrofit the configuration of 1000s of
> EBGP configurations, in order to accommodate some operators which are
> not capable of correctly configuring their EBGP session.

No, the beneficiaries of this draft are the users of Internet at large,
not just 'incapable operators'.

It is ludicrous to argue that an operator has 1000s of EBGP
configurations but would not be able to accomodate any changes in the
software's behaviour. A parallel can be drawn with the 'IOS
small-servers' which over time were disabled by default, rather then
enabled. I don't recall any outcry over that either.

> Plus the solution is asking those later operators to do a
> configuration, while the assumption is that they can't be trusted to
> correctly configured their EBGP session. Why do you think that they
> won't just copy/past 1 additional line of configuration in order
> automatically distribute all the routes for each new EBGP session?

Ah, there may lay our misunderstaanding. We do not blame operators or
make any judgement on whether they can be trusted or not. 

The problem is that there are some platforms which _immediately_
activate a line of configuration after you press enter, and a BGP
session may already come up before you get to the configuration line
which restricts what should be announced or accepted. This draft
rectifies that behaviour to 'start closed' (i guess this is a variant of
the "fail closed" concept) rather then 'start open', or differently
phrase: one should not start insecure.

Kind regards,

Job


From nobody Thu Apr 20 02:51:22 2017
Return-Path: <internet-drafts@ietf.org>
X-Original-To: idr@ietf.org
Delivered-To: idr@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 44AC412EC4C; Thu, 20 Apr 2017 02:51:14 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: idr@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.50.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <149268187426.22262.7793747029960844423@ietfa.amsl.com>
Date: Thu, 20 Apr 2017 02:51:14 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/2kVQ62wDNnpoAkczYAa7gVl6Dvw>
Subject: [Idr] I-D Action: draft-ietf-idr-bgp-prefix-sid-05.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:51:14 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Inter-Domain Routing of the IETF.

        Title           : Segment Routing Prefix SID extensions for BGP
        Authors         : Stefano Previdi
                          Clarence Filsfils
                          Acee Lindem
                          Arjun Sreekantiah
                          Hannes Gredler
	Filename        : draft-ietf-idr-bgp-prefix-sid-05.txt
	Pages           : 16
	Date            : 2017-04-20

Abstract:
   Segment Routing (SR) architecture allows a node to steer a packet
   flow through any topological path and service chain by leveraging
   source routing.  The ingress node prepends a SR header to a packet
   containing a set of segment identifiers (SID).  Each SID represents a
   topological or a service-based instruction.  Per-flow state is
   maintained only at the ingress node of the SR domain.

   This document describes the BGP extension for announcing BGP Prefix
   Segment Identifier (BGP Prefix-SID) information.



The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-idr-bgp-prefix-sid/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-idr-bgp-prefix-sid-05
https://datatracker.ietf.org/doc/html/draft-ietf-idr-bgp-prefix-sid-05

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-idr-bgp-prefix-sid-05


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Thu Apr 20 02:52:56 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FEB012EC4E for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:52:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZIfsySEj3UNO for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:52:54 -0700 (PDT)
Received: from relais-inet.orange.com (mta239.mail.business.static.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19A1712EC45 for <idr@ietf.org>; Thu, 20 Apr 2017 02:52:49 -0700 (PDT)
Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id EDE3360607; Thu, 20 Apr 2017 11:52:47 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.34]) by opfedar06.francetelecom.fr (ESMTP service) with ESMTP id CEE828007D; Thu, 20 Apr 2017 11:52:47 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM6F.corporate.adroot.infra.ftgroup ([fe80::bd00:88f8:8552:3349%17]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 11:52:47 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@ntt.net>
CC: "John G. Scudder" <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, "Hares Susan" <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSublpFx6qnNOc8UaJCUOYEKex/KHOBBnQ
Date: Thu, 20 Apr 2017 09:52:46 +0000
Message-ID: <27506_1492681967_58F884EF_27506_8047_1_53C29892C857584299CBF5D05346208A31CC011B@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <22424_1492672809_58F86129_22424_6810_15_53C29892C857584299CBF5D05346208A31CBF5DB@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420091610.e67lqxdkdmixvaci@hanna.meerval.net> <27497_1492680634_58F87FBA_27497_546_3_53C29892C857584299CBF5D05346208A31CBFDCE@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420093513.zmpv7lunfkgoqtsa@hanna.meerval.net>
In-Reply-To: <20170420093513.zmpv7lunfkgoqtsa@hanna.meerval.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/7GBHKTbZBvJ2edJegktPDlBxmtM>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:52:55 -0000

> From: Job Snijders [mailto:job@ntt.net]  > Sent: Thursday, April 20, 2017=
 11:35 AM
>=20
 > On Thu, Apr 20, 2017 at 09:30:34AM +0000, bruno.decraene@orange.com wrot=
e:
 > > > From: Job Snijders [mailto:job@ntt.net]  > Sent: Thursday, April 20,=
 2017 11:16 AM
 > > >
 > >  > On Thu, Apr 20, 2017 at 07:20:08AM +0000, bruno.decraene@orange.com=
 wrote:
 > >  > > 5) Isn't this problem statement/proposed solution a sub-part of t=
he
 > >  > > route leak issue?  IOW, wouldn't it be better addressed by/in
 > >  > > draft-ymbk-idr-bgp-open-policy or draft-ietf-idr-route-leak-detec=
tion-mitigation ?
 > >  >
 > >  > Why do you think so?
 > >
 > > Route leak is mentioned in the introduction (read justification) of
 > > this document.
 >=20
 > A mention of the phrase "route leak" does not constitute as to why
 > draft-ymbk-idr-bgp-open-policy or
 > draft-ietf-idr-route-leak-detection-mitigation are better at addressing
 > the problem of insecure defaults. Perhaps the drafts complement each
 > other?

Eventually.
I'm asking for this discussion to happen.

Kind regards,
--Bruno

=20
 > Kind regards,
 >=20
 > Job

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Thu Apr 20 02:55:40 2017
Return-Path: <sprevidi@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B1B712EC5A for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:55:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LexXDualRZBa for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:55:37 -0700 (PDT)
Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28A7A12EC4E for <idr@ietf.org>; Thu, 20 Apr 2017 02:55:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3364; q=dns/txt; s=iport; t=1492682137; x=1493891737; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=uoSGQewPIcR10jkETQHYtPoqH1X8tPJbZZYjiri1qzI=; b=Brq4EsvBan8xPRjB9vVRCYveRSgei19SWZtMEuELl/Oy0XUbOzdYXaao g3mptO2iRBOl4KmlUKopWy/FhfVA43ZsV/DNWirTP8UYzbcuXCWvuDD3U lRIqFCVUYHXVdVP02MGziMGRo+UqVr6G5bFWoEWWlnDCJiHzefLBtsqY2 c=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CPAQAphPhY/4kNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1RhgQsHg2CKFZFCIZVjgg8hC4V4AhqDXj8YAQIBAQEBAQEBayi?= =?us-ascii?q?FFQEBAQECAQEBIRE6EAsCAQgSBgICJgICAiULFQIOAgQTCYoLCA6qOYImiyEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEdgQuFSIIIC4JjgxiBP4MGLoIxBZ0xAYcUi22?= =?us-ascii?q?CAFWEXoocizWIXAEfOIEFYxUaKhEBhFQcgWN1AYddgQ0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,225,1488844800"; d="scan'208";a="238212702"
Received: from alln-core-4.cisco.com ([173.36.13.137]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Apr 2017 09:55:36 +0000
Received: from XCH-RTP-008.cisco.com (xch-rtp-008.cisco.com [64.101.220.148]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id v3K9tZvn023466 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for <idr@ietf.org>; Thu, 20 Apr 2017 09:55:36 GMT
Received: from xch-rtp-010.cisco.com (64.101.220.150) by XCH-RTP-008.cisco.com (64.101.220.148) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 20 Apr 2017 05:55:35 -0400
Received: from xch-rtp-010.cisco.com ([64.101.220.150]) by XCH-RTP-010.cisco.com ([64.101.220.150]) with mapi id 15.00.1210.000; Thu, 20 Apr 2017 05:55:35 -0400
From: "Stefano Previdi (sprevidi)" <sprevidi@cisco.com>
To: idr wg <idr@ietf.org>
Thread-Topic: I-D Action: draft-ietf-idr-bgp-prefix-sid-05.txt
Thread-Index: AQHSubxBjeliABb8XUKQwfepd4WDEA==
Date: Thu, 20 Apr 2017 09:55:35 +0000
Message-ID: <7F80FC76-81D7-46AF-9662-633FB769CDF8@cisco.com>
References: <149268187426.22262.7793747029960844423@ietfa.amsl.com>
In-Reply-To: <149268187426.22262.7793747029960844423@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.61.217.160]
Content-Type: text/plain; charset="utf-8"
Content-ID: <EB826261E87D6C46B3C17C775E45B8B5@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/jsYA-5tShWY3HVb71fRRn8hyh30>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-bgp-prefix-sid-05.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:55:39 -0000
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From nobody Thu Apr 20 02:56:31 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E622012EBEE for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:56:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, RCVD_IN_SORBS_SPAM=0.5] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ayz3HwQnxC6B for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:56:28 -0700 (PDT)
Received: from mail-wr0-f175.google.com (mail-wr0-f175.google.com [209.85.128.175]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A2E3812EBF4 for <idr@ietf.org>; Thu, 20 Apr 2017 02:56:27 -0700 (PDT)
Received: by mail-wr0-f175.google.com with SMTP id z109so32016999wrb.1 for <idr@ietf.org>; Thu, 20 Apr 2017 02:56:27 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=HWBVPJJgR9EocAt3ZxXDusN4R6a56/V7t11xd7Ac7kE=; b=JIih2MXx8nahOI/2oPnuciQT1t2h+5KEYoVrq9SIW90zXgBcqjTVh3tFvm1/C4T5MZ 30ANfgK63o5j2pWxPiVxlPmI/qHGShYo2CuVdCzOO63zVa3a/Nedl3M158wMDBJRCgo/ kU4zSMn4NRAlboQ1iDfZkw73y2+k9cknLwc3PjWOzxZFoWTPex2/5naVgrziM0rqGJJ1 bH67xRbn2duPtKlMxYTIa9YPxX6pC9DgkdGTmG+WgAlduJDt/Vj8CojlY4xhCdslMEZY Q6+cujQmYsFcFncs8Oa7hlCQiLo2K9Zt+a0r8bUapp5AJqVnEnID/rGT1NzG2pedvNro NuEQ==
X-Gm-Message-State: AN3rC/5VbWZBx78YcF94VKUrSrSTZZq+XQppUVxKVasMrGtpL9A66Nto 7SRLDCEgYy/Klg==
X-Received: by 10.223.135.84 with SMTP id 20mr6426988wrz.199.1492682186131; Thu, 20 Apr 2017 02:56:26 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id r4sm6907208wra.69.2017.04.20.02.56.24 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 02:56:25 -0700 (PDT)
Date: Thu, 20 Apr 2017 11:56:24 +0200
From: Job Snijders <job@ntt.net>
To: bruno.decraene@orange.com
Cc: Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170420095624.zwhw6ypm7zwgtfsy@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420085755.sbzdtcjhirdoi3b3@hanna.meerval.net> <8442_1492680540_58F87F5C_8442_1101_11_53C29892C857584299CBF5D05346208A31CBFD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <27506_1492681817_58F88459_27506_7804_1_0c74078d-a304-441b-9dbf-abb5d5e4eca2@OPEXCLILM5D.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <27506_1492681817_58F88459_27506_7804_1_0c74078d-a304-441b-9dbf-abb5d5e4eca2@OPEXCLILM5D.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/ybNi8wYiaqqkVOy6YEz-Rc6YY5Q>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:56:29 -0000

On Thu, Apr 20, 2017 at 09:50:13AM +0000, bruno.decraene@orange.com wrote:
>  > Can this document define what he means by "configured export
>  > policy".  Possibly by referring to standardized yang models.
> 
> Because I think the document means "configured route
> (re)distribution/advertisement policy".  Possibly this was implied by
> the word "export" but one could read this as any outbound policy,
> while a policy setting some communities would probably not help much.

We purposefully did not specify what the contents of a policy
constitute, or whether policies should have an implicit 'accept'
terminal clause or an implicit 'deny' terminal clause.

All we try to accomplish, is that if you configure _nothing_ for an EBGP
peer, the software will not advertise any routes or use any routes which
it receives. 

Kind regards,

Job


From nobody Thu Apr 20 02:58:45 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8333912EC68 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:58:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IGoKKqhZz06E for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 02:58:43 -0700 (PDT)
Received: from relais-inet.orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D640B12ECA4 for <idr@ietf.org>; Thu, 20 Apr 2017 02:58:27 -0700 (PDT)
Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id 9A22260607; Thu, 20 Apr 2017 11:58:26 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.21]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 72EDDC005A; Thu, 20 Apr 2017 11:58:26 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM6C.corporate.adroot.infra.ftgroup ([fe80::d9f5:9741:7525:a199%18]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 11:58:26 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@ntt.net>
CC: idr wg <idr@ietf.org>, Robert Raszuk <robert@raszuk.net>, Hares Susan <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSubmsFx6qnNOc8UaJCUOYEKex/KHOBHrA
Date: Thu, 20 Apr 2017 09:58:25 +0000
Message-ID: <26662_1492682306_58F88642_26662_8569_1_53C29892C857584299CBF5D05346208A31CC0240@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <CA+b+ERnRbAG_WSppAVkWETL0zjeppmm9fwqRu8DV24Hcdihqiw@mail.gmail.com> <20170420090535.cfxn5tbhns5bszvf@hanna.meerval.net> <4993_1492680765_58F8803D_4993_4017_1_53C29892C857584299CBF5D05346208A31CBFE4F@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420093706.ongrlwi47kew6vt2@hanna.meerval.net>
In-Reply-To: <20170420093706.ongrlwi47kew6vt2@hanna.meerval.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/P_8cOOjLtUVFDrawpHh1RsNusZ8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 09:58:44 -0000
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From nobody Thu Apr 20 03:13:21 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C09E41294F0 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 03:13:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NsSKxCrQ96mB for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 03:13:19 -0700 (PDT)
Received: from relais-inet.orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8918E12EC73 for <idr@ietf.org>; Thu, 20 Apr 2017 03:13:15 -0700 (PDT)
Received: from opfedar00.francetelecom.fr (unknown [xx.xx.xx.11]) by opfedar25.francetelecom.fr (ESMTP service) with ESMTP id 2239C12062E; Thu, 20 Apr 2017 12:13:14 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.58]) by opfedar00.francetelecom.fr (ESMTP service) with ESMTP id 0224018005A; Thu, 20 Apr 2017 12:13:14 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM33.corporate.adroot.infra.ftgroup ([fe80::3881:fc15:b4b2:9017%19]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 12:13:13 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@ntt.net>
CC: Enke Chen <enkechen@cisco.com>, Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSubuMFx6qnNOc8UaJCUOYEKex/KHOBnQQ
Date: Thu, 20 Apr 2017 10:13:12 +0000
Message-ID: <4222_1492683194_58F889BA_4222_8830_1_53C29892C857584299CBF5D05346208A31CC0335@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com> <20170420090941.c5yi72mzleto64ph@hanna.meerval.net> <25911_1492681251_58F88222_25911_625_1_53C29892C857584299CBF5D05346208A31CBFF52@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420095031.oxtnocmjkt3zavge@hanna.meerval.net>
In-Reply-To: <20170420095031.oxtnocmjkt3zavge@hanna.meerval.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/PQM0XtdA3qPywRXrt-z-4ogwUYw>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 10:13:21 -0000

> From: Job Snijders [mailto:job@ntt.net]  > Sent: Thursday, April 20, 2017=
 11:51 AM
>=20
 > On Thu, Apr 20, 2017 at 09:40:50AM +0000, bruno.decraene@orange.com wrot=
e:
 > > > From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Job Snijders  >=
 Sent: Thursday,
 > April 20, 2017 11:10 AM
 > > >
 > >  > On Wed, Apr 19, 2017 at 04:34:10PM -0700, Enke Chen wrote:
 > >  > > I had "in this case" with the statement "the default can not be c=
hanged".
 > >  > > The reason is that the behavior change may completely cutoff conn=
ectivity
 > >  > > in this case.
 > >  >
 > >  > And very soon after the cutoff a customer may elect to roll back the
 > >  > change and read the release notes!
 > >  >
 > >  > The 'complete cutoff' only occurs after a specific sequence of even=
ts
 > >  > which together would represent a cascading failure in due diligence.
 > >
 > > The document is asking network operators which have correctly
 > > configured their network to retrofit the configuration of 1000s of
 > > EBGP configurations, in order to accommodate some operators which are
 > > not capable of correctly configuring their EBGP session.
 >=20
 > No, the beneficiaries of this draft are the users of Internet at large,
 > not just 'incapable operators'.
=20
My text was not discussing about beneficiaries, so I don't think that "No" =
applies.
=20
 > It is ludicrous to argue that an operator has 1000s of EBGP
 > configurations but would not be able to accomodate any changes in the
 > software's behaviour.

That's your opinion, but you can't speak for others.
e.g. managing a few high bandwidth Internet connection, on a very few locat=
ions, is very different than managing 1000s of customers CE in 1000s of loc=
ations. Especially as breaking the connectivity would requiring sending a t=
ech person on customer's site.

> A parallel can be drawn with the 'IOS
 > small-servers' which over time were disabled by default, rather then
 > enabled. I don't recall any outcry over that either.
=20
It's not the same thing to disable a feature that is not used, than disabli=
ng a feature that is used and critical for the connectivity hence the busin=
ess.
=20
 > > Plus the solution is asking those later operators to do a
 > > configuration, while the assumption is that they can't be trusted to
 > > correctly configured their EBGP session. Why do you think that they
 > > won't just copy/past 1 additional line of configuration in order
 > > automatically distribute all the routes for each new EBGP session?
 >=20
 > Ah, there may lay our misunderstaanding. We do not blame operators or
 > make any judgement on whether they can be trusted or not.

The point is not about blaming. The point if that if you don't trust X, you=
 don't ask X to perform the check/policy insurance.
=20
 > The problem is that there are some platforms which _immediately_
 > activate a line of configuration after you press enter

Here we comes.
If that is the problem, then may be this is the problem which needs to be s=
olved.
Nothing related to BGP or even the IETF.

>, and a BGP
 > session may already come up before you get to the configuration line
 > which restricts what should be announced or accepted. This draft
 > rectifies that behaviour to 'start closed' (i guess this is a variant of
 > the "fail closed" concept) rather then 'start open', or differently
 > phrase: one should not start insecure.
=20
If this is the problem, may be the CLI should first mandate for the BGP pol=
icy to be applied, and then allow the configuration of the peer (e.g. its I=
P address)
Again, not a protocol or IETF issue. (although netconf may help as I think =
it provide support for transaction)

Thanks for engaging the discussion and the useful chat.

Kind regards,
Bruno=20
 > Kind regards,
 >=20
 > Job

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Thu Apr 20 03:23:54 2017
Return-Path: <nick@foobar.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1332712F251 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 03:23:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QT6vkJuR7IM8 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 03:23:51 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3915D12EC2E for <idr@ietf.org>; Thu, 20 Apr 2017 03:23:50 -0700 (PDT)
X-Envelope-To: idr@ietf.org
Received: from crumpet.local (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id v3KANgbQ035966 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 20 Apr 2017 11:23:42 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.local
Message-ID: <58F88C2E.50809@foobar.org>
Date: Thu, 20 Apr 2017 11:23:42 +0100
From: Nick Hilliard <nick@foobar.org>
User-Agent: Postbox 5.0.12 (Macintosh/20170323)
MIME-Version: 1.0
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
CC: "idr@ietf.org" <idr@ietf.org>
References: <20170419173711.71458B814DA@rfc-editor.org> <88AF5CD0-3DA4-4CD0-877B-39925DC7D5F0@cisco.com>
In-Reply-To: <88AF5CD0-3DA4-4CD0-877B-39925DC7D5F0@cisco.com>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/LoFl6gTZUSeO8fY_i7c2CfcOK1g>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 10:23:53 -0000

Alvaro Retana (aretana) wrote:
> I would like to get input from the WG as to the best way to handle this report.  I would specially like to hear from implementers, but all input is welcome.
[...]
> b. s/MAY NOT/MUST NOT

this.

Nick


From nobody Thu Apr 20 04:08:08 2017
Return-Path: <nick@foobar.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9247C1286B1 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 04:08:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EtlssdBCWf7B for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 04:08:05 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0289D126C3D for <idr@ietf.org>; Thu, 20 Apr 2017 04:08:04 -0700 (PDT)
X-Envelope-To: idr@ietf.org
Received: from crumpet.local (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id v3KB806s041127 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 20 Apr 2017 12:08:00 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.local
Message-ID: <58F8968F.7000306@foobar.org>
Date: Thu, 20 Apr 2017 12:07:59 +0100
From: Nick Hilliard <nick@foobar.org>
User-Agent: Postbox 5.0.12 (Macintosh/20170323)
MIME-Version: 1.0
To: Robert Raszuk <robert@raszuk.net>
CC: Jeffrey Haas <jhaas@pfrc.org>, idr wg <idr@ietf.org>
References: <CA+b+ERnHAdrQa1f-b7st3QBjzbFS1zvktkGCAppRuqGkf8Vnhg@mail.gmail.com> <CA+b+ER=E1FV4=-W9jcHG4ih0GeE2O1jDXKNAZhEe+nENEHAiYg@mail.gmail.com> <CA+b+ERkfV4C++arFCBXnyjgkA-FtcqMmd8_9UcbKLWxR32h1EQ@mail.gmail.com> <CA+b+ERkvu296sqD_bi41++RqHiV-f+4cUpb1BPrhE6HsxeueqA@mail.gmail.com> <CA+b+ERk+XP5DvuZStYW=e1uGRWDWE-PiPdwhtkHiVK7hFui7_g@mail.gmail.com> <CA+b+ERmapG68ysZ4=6uDAH=Z+fRaprzgsyQASP4aYD=OTea_Qg@mail.gmail.com> <CA+b+ERkZ-WY5FWiDu_k=1+7tUHEApYj+mMLqZiFzTWGuvHLjGA@mail.gmail.com> <CA+b+ER=MBiFno8CDv9JgpFFmJz4cuDe_tQhm+AHx5njxJy6p6Q@mail.gmail.com> <CA+b+ER=3qy_096Q61FBQgkRSt8j0P1NTQ+EFVit0XEnWvLp6mg@mail.gmail.com> <CA+b+ERmuGSZBcboZDsRo1NDb3dsRozmcEW77KWLyzyjxK8ezww@mail.gmail.com> <20170418203823.GC9688@pfrc.org> <58F729FF.7000700@foobar.org> <CA+b+ER=sRJ7+8uHa2gr1Q2gqVN0AVCsH4WSZWJJR-Y7zuBTSZg@mail.gmail.com>
In-Reply-To: <CA+b+ER=sRJ7+8uHa2gr1Q2gqVN0AVCsH4WSZWJJR-Y7zuBTSZg@mail.gmail.com>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/zUdc9Nf6yxSMKQr-_bb7ei9Sk8w>
Subject: Re: [Idr] RS BFD draft
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 11:08:07 -0000

Robert Raszuk wrote:
> There could be not so many clients negotiating it with RS as they do not
> know that RS supports it :) So why not enable it on RS side and let BGP
> capabilities negotiation do the job ?

We'll get to this at some stage and set up some proper testing.  At the
moment, we can see that no-one has enabled this client-side, which is at
least a safe default.

Nick


From nobody Thu Apr 20 04:31:26 2017
Return-Path: <nick@foobar.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC4D812949D for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 04:31:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4iPlilV8dsvT for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 04:31:22 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95D271293F3 for <idr@ietf.org>; Thu, 20 Apr 2017 04:31:22 -0700 (PDT)
X-Envelope-To: idr@ietf.org
Received: from crumpet.local (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id v3KBVJdS043809 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 20 Apr 2017 12:31:19 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.local
Message-ID: <58F89C07.8080900@foobar.org>
Date: Thu, 20 Apr 2017 12:31:19 +0100
From: Nick Hilliard <nick@foobar.org>
User-Agent: Postbox 5.0.12 (Macintosh/20170323)
MIME-Version: 1.0
To: Robert Raszuk <robert@raszuk.net>
CC: Jeffrey Haas <jhaas@pfrc.org>, idr wg <idr@ietf.org>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org> <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com>
In-Reply-To: <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/mIIQyEU9QCf7pNZ8ER2R8upJZNM>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 11:31:25 -0000

Robert Raszuk wrote:
> And one of the requirements as you have heard from at least one customer is
> to test MTU of the path to such BGP next hops. Is RFC5880 BFD really best 
> tool for that ?

All IXPs have published MTUs and someone attempts to connect to an IXP
with the expectation that using a different MTU is going to cause
anything other than complete brokenness, then I'd tactfully suggest an
alternative career path.

>     As noted previously, the draft does permit for alternate means
>     beyond BFD.
>     However, we have to pick one.  Standardizing ping is likely a bad
>     idea. :-)
> 
> ​What is there to standardize ? RFC862 seems like pretty good standard
> already. 

With sufficient thrust, pigs fly just fine.

ICMP is the wrong tool in the same way that ARP request/reply is also
the wrong tool for this.  It's rubbish for this purpose because it's
usually highly deprioritised on routers, unlike bfd which is often
fast-pathed and carefully controlled.  BFD is fit for this purpose
because it's designed specifically and is supported by router vendors
for exactly this purpose.

Fast liveliness detection cannot be pawned off to an arbitrary protocol
just because that protocol replies to packets, in the same way that we
don't exchange routes over xml in https or implement ssh using udp/53,
or plough fields using a modified toyota yaris.

Nick


From nobody Thu Apr 20 04:48:24 2017
Return-Path: <sprevidi@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4092B1294C3; Thu, 20 Apr 2017 04:48:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RdieI02K3aVn; Thu, 20 Apr 2017 04:48:14 -0700 (PDT)
Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A0C1129B06; Thu, 20 Apr 2017 04:48:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6324; q=dns/txt; s=iport; t=1492688894; x=1493898494; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=2ffTjLxO5PavAJohKUR/dC7o983PZzcRbAvl9raOKxo=; b=ZxAQg+PY2lw/JFpkKOXH/i3Kgr6L7qKRyM3jjoYnhuO5QiWJztDzlT/+ DDnlhrS1i5BtcGnVzD2OuYt20xWEJf7g5ApmEmut1tN6dUHUTLM+EgHrj 3W8HbULwjQw+rffNCRDe8Ntl5z63yuGzRpe6lWCDhcOkk6L3Ce0nzTLwC s=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AkAQAFn/hY/4sNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1SBbAeDYIoVkWOVY4IPhiQCGoNfPxgBAgEBAQEBAQFrKIUVAQE?= =?us-ascii?q?BAQIBIwQNRQULAgEIGAICJgICAjAVEAIEDgWKFAiqU4FsOosgAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBHYELhUiBXSuCboRXgwaCXwEEnTQBkwKCAIUziiKUEwEfOIE?= =?us-ascii?q?FYxUaOwGEVByBYgF1iCGBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,225,1488844800"; d="scan'208";a="415068414"
Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Apr 2017 11:48:13 +0000
Received: from XCH-RTP-007.cisco.com (xch-rtp-007.cisco.com [64.101.220.147]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id v3KBmDr7006924 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 20 Apr 2017 11:48:13 GMT
Received: from xch-rtp-010.cisco.com (64.101.220.150) by XCH-RTP-007.cisco.com (64.101.220.147) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 20 Apr 2017 07:48:12 -0400
Received: from xch-rtp-010.cisco.com ([64.101.220.150]) by XCH-RTP-010.cisco.com ([64.101.220.150]) with mapi id 15.00.1210.000; Thu, 20 Apr 2017 07:48:12 -0400
From: "Stefano Previdi (sprevidi)" <sprevidi@cisco.com>
To: Ravi Singh <ravis@juniper.net>
CC: "rtg-dir@ietf.org" <rtg-dir@ietf.org>, "draft-ietf-idr-bgpls-segment-routing-epe@ietf.org" <draft-ietf-idr-bgpls-segment-routing-epe@ietf.org>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: Review of draft-ietf-idr-bgpls-segment-routing-epe
Thread-Index: AQHSucv9/27qJl6LRUK3n1+Z9ElHYA==
Date: Thu, 20 Apr 2017 11:48:12 +0000
Message-ID: <4AE5E64E-4D7F-4AE7-9CEF-814623828956@cisco.com>
References: <CY1PR05MB25215A10F4E4372407A31F13AB050@CY1PR05MB2521.namprd05.prod.outlook.com>
In-Reply-To: <CY1PR05MB25215A10F4E4372407A31F13AB050@CY1PR05MB2521.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.61.217.160]
Content-Type: text/plain; charset="utf-8"
Content-ID: <E9446841F0AA144EB68415DD5393464D@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/zLh1s1-EQqwdiXjC3jDsWmrp9c8>
Subject: Re: [Idr] Review of draft-ietf-idr-bgpls-segment-routing-epe
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 11:48:16 -0000
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From nobody Thu Apr 20 05:11:25 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47831130154 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 05:11:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id enCdfIy_j36L for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 05:11:21 -0700 (PDT)
Received: from relais-inet.orange.com (mta239.mail.business.static.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52FA81294B9 for <idr@ietf.org>; Thu, 20 Apr 2017 05:11:21 -0700 (PDT)
Received: from opfedar01.francetelecom.fr (unknown [xx.xx.xx.2]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id EAA86100282; Thu, 20 Apr 2017 14:11:19 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.24]) by opfedar01.francetelecom.fr (ESMTP service) with ESMTP id CE8F4160065; Thu, 20 Apr 2017 14:11:19 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM7D.corporate.adroot.infra.ftgroup ([fe80::9044:c5ee:4dd2:4f16%19]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 14:11:19 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@ntt.net>
CC: Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSubQ1Fx6qnNOc8UaJCUOYEKex/KHOBVj8gAAiHiA=
Date: Thu, 20 Apr 2017 12:11:18 +0000
Message-ID: <5886_1492690279_58F8A567_5886_16468_1_53C29892C857584299CBF5D05346208A31CC08A3@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420085755.sbzdtcjhirdoi3b3@hanna.meerval.net> <8442_1492680540_58F87F5C_8442_1101_11_53C29892C857584299CBF5D05346208A31CBFD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <27506_1492681817_58F88459_27506_7804_1_0c74078d-a304-441b-9dbf-abb5d5e4eca2@OPEXCLILM5D.corporate.adroot.infra.ftgroup> <20170420095624.zwhw6ypm7zwgtfsy@hanna.meerval.net>
In-Reply-To: <20170420095624.zwhw6ypm7zwgtfsy@hanna.meerval.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/BCVMHWgRMpz6rkrwcsByJkpQ8tw>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 12:11:24 -0000

> From: Job Snijders [mailto:job@ntt.net]  > Sent: Thursday, April 20, 2017=
 11:56 AM
>=20
 > On Thu, Apr 20, 2017 at 09:50:13AM +0000, bruno.decraene@orange.com wrot=
e:
 > >  > Can this document define what he means by "configured export
 > >  > policy".  Possibly by referring to standardized yang models.
 > >
 > > Because I think the document means "configured route
 > > (re)distribution/advertisement policy".  Possibly this was implied by
 > > the word "export" but one could read this as any outbound policy,
 > > while a policy setting some communities would probably not help much.
 >=20
 > We purposefully did not specify what the contents of a policy
 > constitute, or whether policies should have an implicit 'accept'
 > terminal clause or an implicit 'deny' terminal clause.
 >=20
 > All we try to accomplish, is that if you configure _nothing_ for an EBGP
 > peer, the software will not advertise any routes or use any routes which
 > it receives.

People do not establish EBGP session for the pleasure of the OPEN message. =
They enable it to get and receive routes. So without any additional thinkin=
g, they will type whatever additional keyword that you may require.

e.g.=20
OLD:  neighbor 10.1.1.1 remote-as 65124=20
NEW: neighbor 10.1.1.1 remote-as 65124 send-routes receive-routes
Or NEW2=20
neighbor 10.1.1.1 remote-as 65124
neighbor 10.1.1.1 send-routes receive-routes

People will just blindly use the new CLI. So this would only address the si=
tuation where the CLI interprets the command on a line per line basis and s=
end all routes without waiting for the policy/whole BGP session configurati=
on to be configured. (e.g. waiting for the ending delimiter).
If so, this looks like a CLI/vendor specific issue. Not a BGP / IETF one.
And definitely, we don't need to impact/change the behavior for the BGP ses=
sions which are already configured.

Kind regards,
--Bruno

 > Kind regards,
 >=20
 > Job

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Thu Apr 20 06:34:07 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4B2C13144F for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:34:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AOaRzPKYGeOh for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:34:04 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id 60E9A120227 for <idr@ietf.org>; Thu, 20 Apr 2017 06:34:04 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d] (unknown [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id B4F39540B76; Thu, 20 Apr 2017 09:34:02 -0400 (EDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com>
Date: Thu, 20 Apr 2017 09:33:44 -0400
Cc: "Acee Lindem (acee)" <acee@cisco.com>, John G Scudder <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <DFD12A2C-ED40-4550-A65F-22322CFDEEBC@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com>
To: Keyur Patel <keyur@arrcus.com>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/-YN5g9t3CRHG669ZH_ArJbRce24>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 13:34:06 -0000

> On Apr 19, 2017, at 6:16 PM, Keyur Patel <keyur@arrcus.com> wrote:
>=20
> And that would be good enough if that would allow exemptions of DC =
networks and any other networks that may need exemption.

I=E2=80=99m not sure what makes DC networks unique to be exempt from =
adding a one line policy to their configuration, this is a very low bar =
similar to configuring a hostname or AAA authentication that a DC =
network would have come from their ZTP/automation.

I find this incredibly worrisome thinking, next we will have an =
exemption for government run networks to what end?

- Jared=


From nobody Thu Apr 20 06:38:14 2017
Return-Path: <martijnschmidt@i3d.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1FF8F12F268 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:38:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NyXpu8952avw for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:38:10 -0700 (PDT)
Received: from mail.i3d.net (mail.i3d.nl [213.163.77.240]) (using TLSv1.1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BAA43129AF7 for <idr@ietf.org>; Thu, 20 Apr 2017 06:38:09 -0700 (PDT)
X-Footer: aTNkLm5s
Received: from localhost ([127.0.0.1]) by mail.i3d.net with ESMTPSA (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128 bits)); Thu, 20 Apr 2017 15:38:04 +0200
To: Jared Mauch <jared@puck.nether.net>, Keyur Patel <keyur@arrcus.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <DFD12A2C-ED40-4550-A65F-22322CFDEEBC@puck.nether.net>
Cc: Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
From: "i3D.net - Martijn Schmidt" <martijnschmidt@i3d.net>
Organization: i3D.net
Message-ID: <f7cc33e7-de3b-fde5-4dc0-9b8d3ead3e3b@i3d.net>
Date: Thu, 20 Apr 2017 15:37:28 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <DFD12A2C-ED40-4550-A65F-22322CFDEEBC@puck.nether.net>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/NesbrvNt_jHx-Bq-n_nJYx1Ehsg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 13:38:12 -0000

On 20-04-17 15:33, Jared Mauch wrote:
>> On Apr 19, 2017, at 6:16 PM, Keyur Patel <keyur@arrcus.com> wrote:
>>
>> And that would be good enough if that would allow exemptions of DC networks and any other networks that may need exemption.
> I’m not sure what makes DC networks unique to be exempt from adding a one line policy to their configuration, this is a very low bar similar to configuring a hostname or AAA authentication that a DC network would have come from their ZTP/automation.
>
> I find this incredibly worrisome thinking, next we will have an exemption for government run networks to what end?
>
> - Jared
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
Hi all,

DC network operator here! As long as it's well documented, adding a new 
line to my configuration shouldn't be a problem when I'm doing an 
upgrade during a maintenance window anyway. Moreover, we operate our 
network on a "trust nothing" basis even for our internal BGP sessions.

Best regards,
Martijn Schmidt
i3D.net / AS49544


From nobody Thu Apr 20 06:40:39 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7ACD913145A for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:40:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0r5IjVNIg6EC for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:40:35 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id F1164124BE8 for <idr@ietf.org>; Thu, 20 Apr 2017 06:40:34 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d] (unknown [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id D6AE8540901; Thu, 20 Apr 2017 09:40:30 -0400 (EDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com>
Date: Thu, 20 Apr 2017 09:40:13 -0400
Cc: Keyur Patel <keyur@arrcus.com>, "Acee Lindem (acee)" <acee@cisco.com>, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com>
To: Robert Raszuk <robert@raszuk.net>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Y-YKXgMVCfhnHvSFVjYSiuQac3I>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 13:40:37 -0000

> On Apr 19, 2017, at 6:26 PM, Robert Raszuk <robert@raszuk.net> wrote:
>=20
> Keyur,
>=20
> You can not set "insecure mode" before you reload the OS as current OS =
does not have such knob. Unless you delay the deployment across N =
releases and enforce sequenced upgrade.

Infact, this is the recommendation that I=E2=80=99ve provided to vendors =
that have expressed concerns.  There are many defaults that have not =
always been displayed, but things like IOS have =E2=80=9Cshow run all=E2=80=
=9D so you can see these. =20

Something like the =E2=80=98bgp unsafe-ebgp-policy=E2=80=99 could be =
generated on their respective implementations.  I didn=E2=80=99t think =
that GROW/IDR needed to tell implementors this level of how to manage =
their release, so this does seem somewhat out of scope, but a concern I =
can see needs to be thought about.

> The only way to prevent massive reachability failure upon reload due =
to complete silent bgp prefix drop is to configure inbound policy for =
all EBGP sessions before the reload and run with new image.=20

Since we=E2=80=99re talking about how to operate a network:
- People who are taking advantage of an undefined behavior will always =
be surprised
- Vendors can take the N+1.x and N+2.x release strategy, where in N and =
N+1 they generate their equivalent of IOS-XR and the "bgp =
unsafe-ebgp-policy=E2=80=9D policy to prevent their customers from =
breaking
- In a release N+2(or more) that would become the =E2=80=9Cdefault=E2=80=9D=
.

> Of course this is all assuming that someone will read carefully the =
release notes :)=20

Most people don=E2=80=99t, and I=E2=80=99ve always suggested to vendors =
they implement some sort of incremental approach to resolving this.

What worries me is that there is a major incumbent provider who =
doesn=E2=80=99t see this as the serious (and well-documented) security =
issue that it is for those operating large networks.

> If they do not the troubleshooting of this will be really painful ! CE =
will see EBGP session as UP, will get all the routes and will send his =
routes. CE will have no clue if PE dropped or accepted his routes. =
Likewise on the other end .. Only imagine a network which has 10s of =
thousands of VPN CEs as Bruno mentioned and their provider not following =
all releases CEs are running.=20


If they don=E2=80=99t know how to troubleshoot BGP, that isn=E2=80=99t =
the vendors fault.

> At least doing it as part of OPEN msg will be immediately indicated to =
both ends.=20

This is you promoting a different draft, I recommend another thread for =
that draft.

- Jared

>=20
> //R
>=20
>=20
> On Thu, Apr 20, 2017 at 12:16 AM, Keyur Patel <keyur@arrcus.com> =
wrote:
> And that would be good enough if that would allow exemptions of DC =
networks and any other networks that may need exemption.
>=20
> In that case I support the publication.
>=20
> Regards,
> Keyur
>=20
> On 4/19/17, 2:08 PM, "Jared Mauch" <jared@puck.nether.net> wrote:
>=20
>     If someone sets insecure mode they can  e as promiscuous as they =
want.
>=20
>     That mode can have a very low bar IMO.
>=20
>     Jared Mauch
>=20
>     > On Apr 19, 2017, at 4:58 PM, Acee Lindem (acee) <acee@cisco.com> =
wrote:
>     >
>     > I would agree with Keyur, For better or worse, our Cisco NX-OS =
BGP
>     > implementation does not require configuration of a peer policy.
>     >
>     > In fact, this requirement is contrary to some of the =
auto-discovery
>     > mechanisms we are exploring where only knowledge of the mutual =
address
>     > families is required.
>     >
>     > Thanks,
>     > Acee
>     >
>     > On 4/19/17, 4:43 PM, "Idr on behalf of Keyur Patel" =
<idr-bounces@ietf.org
>     > on behalf of keyur@arrcus.com> wrote:
>     >
>     >> Thank you John for bringing it on IDR.
>     >>
>     >> As an update to RFC4271, I am not sure if I agree with the EBGP =
policy
>     >> configuration. There are lot of DC networks (for example) that =
use EBGP
>     >> within their CLOS. This extension may not be applicable in such =
networks.
>     >>
>     >> I would request authors to consider refining text to include =
appropriate
>     >> EBGP use cases and not make it generic for EBGP sessions =
(defined in
>     >> 4271).
>     >>
>     >> Regards,
>     >> Keyur
>     >>
>     >>
>     >> On 4/19/17, 9:49 AM, "Idr on behalf of John G. Scudder"
>     >> <idr-bounces@ietf.org on behalf of jgs@juniper.net> wrote:
>     >>
>     >>   IDR folks,
>     >>
>     >>   As many of you have already noticed, =
draft-ietf-grow-bgp-reject-05
>     >> has completed GROW WGLC and is now in IETF LC.
>     >>
>     >>   As nobody other than Alvaro noticed (thank you for noticing, =
Alvaro!)
>     >> draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, =
in that
>     >> it mandates what a BGP implementation MUST do. See section 2 of =
the draft
>     >> for the details. It's short and easy to read.
>     >>
>     >>   If we had noticed this earlier, we would have either chosen =
to home
>     >> the document in IDR, or explicitly made an exception to have =
GROW do the
>     >> work. Given that we didn't, though, the plan is to continue =
progressing
>     >> the draft as a GROW document. However:
>     >>
>     >>   - As I understand it, the authors will add the Updates: 4271 =
header
>     >> in addition to potentially taking in other comments from AD =
review.
>     >>   - If anyone has a strong objection to the unusual procedure, =
please
>     >> say so (either on-list, or to the chairs + AD).
>     >>   - Please send any last call comments to the IETF LC (see =
below)
>     >> although it's also OK to discuss here on the IDR list of =
course.
>     >>
>     >>   Many IDR participants are also active in GROW and have had =
their say,
>     >> but if you haven't, now's your chance.
>     >>
>     >>   Thanks,
>     >>
>     >>   --John
>     >>
>     >>> Begin forwarded message:
>     >>>
>     >>> From: The IESG <iesg-secretary@ietf.org>
>     >>> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> =
(Default
>     >> EBGP Route Propagation Behavior Without Policies) to Proposed =
Standard
>     >>> Date: April 18, 2017 at 5:16:05 PM EDT
>     >>> To: "IETF-Announce" <ietf-announce@ietf.org>
>     >>> Cc: grow-chairs@ietf.org, grow@ietf.org,
>     >> draft-ietf-grow-bgp-reject@ietf.org, =
christopher.morrow@gmail.com
>     >>> Reply-To: ietf@ietf.org
>     >>>
>     >>>
>     >>> The IESG has received a request from the Global Routing =
Operations
>     >> WG
>     >>> (grow) to consider the following document:
>     >>> - 'Default EBGP Route Propagation Behavior Without Policies'
>     >>> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>     >>>
>     >>> The IESG plans to make a decision in the next few weeks, and
>     >> solicits
>     >>> final comments on this action. Please send substantive =
comments to
>     >> the
>     >>> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, =
comments
>     >> may be
>     >>> sent to iesg@ietf.org instead. In either case, please retain =
the
>     >>> beginning of the Subject line to allow automated sorting.
>     >>>
>     >>> Abstract
>     >>>
>     >>> This document defines the default behavior of a BGP speaker =
when
>     >>> there is no import or export policy associated with an =
External BGP
>     >>> session.
>     >>>
>     >>>
>     >>> The file can be obtained via
>     >>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>     >>>
>     >>> IESG discussion can be tracked via
>     >>> =
https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>     >>>
>     >>> This IETF LC, which originally concluded on 2017-04-18, is =
being
>     >>> extended to allow for additional input to be provided. Ops AD =
(for
>     >> GROW)
>     >>> and Routing AD (for IDR) wish to ensure that cross WG =
discussions
>     >> have
>     >>> had a chance to occur.
>     >>>
>     >>> No IPR declarations have been submitted directly on this I-D.
>     >>
>     >>   _______________________________________________
>     >>   Idr mailing list
>     >>   Idr@ietf.org
>     >>   https://www.ietf.org/mailman/listinfo/idr
>     >>
>     >>
>     >> _______________________________________________
>     >> Idr mailing list
>     >> Idr@ietf.org
>     >> https://www.ietf.org/mailman/listinfo/idr
>     >
>     > _______________________________________________
>     > Idr mailing list
>     > Idr@ietf.org
>     > https://www.ietf.org/mailman/listinfo/idr
>=20
>=20
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>=20


From nobody Thu Apr 20 06:41:29 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31ED0127201 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:41:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BJ4FngCjatlB for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:41:23 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [IPv6:2001:418:3f4::5]) by ietfa.amsl.com (Postfix) with ESMTP id 917291293FB for <idr@ietf.org>; Thu, 20 Apr 2017 06:41:21 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d] (unknown [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id ED280540A6D; Thu, 20 Apr 2017 09:41:19 -0400 (EDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com>
Date: Thu, 20 Apr 2017 09:41:02 -0400
Cc: John G Scudder <jgs@juniper.net>, idr@ietf.org, Hares Susan <shares@ndzh.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com>
To: Enke Chen <enkechen@cisco.com>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/xEYqZtzgZRvI_BuT6I8z6fM6lIM>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 13:41:26 -0000

> On Apr 19, 2017, at 6:53 PM, Enke Chen <enkechen@cisco.com> wrote:
>=20
> Hi, Folks:
>=20
> The document defines or changes the "default behavior" for EBGP.  =
However, the default
> behavior for a particular code base or release was set long time ago, =
and in some cases
> more than 20 years ago. To avoid breaking existing deployment in this =
case, the default
> behavior in the code can not be changed (with or without this =
document). Then it becomes
> a deployment practice for the policies to be configured.
>=20
> So it seems to me that "Standard Track" may not be the right =
classification for this
> document.  "Deployment recommendation or Practice" might be more =
appropriate.

Please see my other thread on this topic.

I=E2=80=99m disappointed to see Cisco coming out for BGP insecurity.

- Jared

>=20
> Thanks.  -- Enke
>=20
> On 4/19/17 9:49 AM, John G. Scudder wrote:
>> IDR folks,
>>=20
>> As many of you have already noticed, draft-ietf-grow-bgp-reject-05 =
has completed GROW WGLC and is now in IETF LC.
>>=20
>> As nobody other than Alvaro noticed (thank you for noticing, Alvaro!) =
draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that =
it mandates what a BGP implementation MUST do. See section 2 of the =
draft for the details. It's short and easy to read.
>>=20
>> If we had noticed this earlier, we would have either chosen to home =
the document in IDR, or explicitly made an exception to have GROW do the =
work. Given that we didn't, though, the plan is to continue progressing =
the draft as a GROW document. However:
>>=20
>> - As I understand it, the authors will add the Updates: 4271 header =
in addition to potentially taking in other comments from AD review.
>> - If anyone has a strong objection to the unusual procedure, please =
say so (either on-list, or to the chairs + AD).
>> - Please send any last call comments to the IETF LC (see below) =
although it's also OK to discuss here on the IDR list of course.
>>=20
>> Many IDR participants are also active in GROW and have had their say, =
but if you haven't, now's your chance.
>>=20
>> Thanks,
>>=20
>> --John
>>=20
>>> Begin forwarded message:
>>>=20
>>> From: The IESG <iesg-secretary@ietf.org>
>>> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default =
EBGP Route Propagation Behavior Without Policies) to Proposed Standard
>>> Date: April 18, 2017 at 5:16:05 PM EDT
>>> To: "IETF-Announce" <ietf-announce@ietf.org>
>>> Cc: grow-chairs@ietf.org, grow@ietf.org, =
draft-ietf-grow-bgp-reject@ietf.org, christopher.morrow@gmail.com
>>> Reply-To: ietf@ietf.org
>>>=20
>>>=20
>>> The IESG has received a request from the Global Routing Operations =
WG
>>> (grow) to consider the following document:
>>> - 'Default EBGP Route Propagation Behavior Without Policies'
>>> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>>>=20
>>> The IESG plans to make a decision in the next few weeks, and =
solicits
>>> final comments on this action. Please send substantive comments to =
the
>>> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments =
may be
>>> sent to iesg@ietf.org instead. In either case, please retain the
>>> beginning of the Subject line to allow automated sorting.
>>>=20
>>> Abstract
>>>=20
>>> This document defines the default behavior of a BGP speaker when
>>> there is no import or export policy associated with an External BGP
>>> session.
>>>=20
>>>=20
>>> The file can be obtained via
>>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>>>=20
>>> IESG discussion can be tracked via
>>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>>>=20
>>> This IETF LC, which originally concluded on 2017-04-18, is being=20
>>> extended to allow for additional input to be provided. Ops AD (for =
GROW)=20
>>> and Routing AD (for IDR) wish to ensure that cross WG discussions =
have=20
>>> had a chance to occur.
>>>=20
>>> No IPR declarations have been submitted directly on this I-D.
>>=20
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>=20
>=20
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr


From nobody Thu Apr 20 06:43:40 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B881127201 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:43:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iFtYwy4HIAd5 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:43:32 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id E988D129AF7 for <idr@ietf.org>; Thu, 20 Apr 2017 06:43:30 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d] (unknown [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id B24E8540A6D; Thu, 20 Apr 2017 09:43:29 -0400 (EDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <D51D67E4.A9782%acee@cisco.com>
Date: Thu, 20 Apr 2017 09:43:11 -0400
Cc: Robert Raszuk <robert@raszuk.net>, "Enke Chen (enkechen)" <enkechen@cisco.com>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <C9C35ECD-F7D1-4015-A133-D69AC19619BA@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com>
To: "Acee Lindem (acee)" <acee@cisco.com>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/nSC5slh88xsgOTPxitYJvOrxk4Q>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 13:43:39 -0000

> On Apr 19, 2017, at 7:18 PM, Acee Lindem (acee) <acee@cisco.com> =
wrote:
>=20
> Hi Robert, Enke,
>=20
> Also, irrespective of the Intended Status, the draft is conspicuously =
missing a =E2=80=9CBackwards Compatibility=E2=80=9D section. I would =
expect the draft to include this discussion even if it is progressed as =
BCP.=20

Are we to dictate to the vendors how to write a security-conscious BGP =
implementation?  I=E2=80=99m seeing one vendor that has it more-than-one =
way as default saying uniformity is impossible.

Once again, similar to other discussions that transpired in 2016 I=E2=80=99=
m concerned that people in IDR are disconnected from the operational =
practices of the internet-at-large.

- Jared


From nobody Thu Apr 20 06:49:22 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 901CE131456 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:49:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dY4ZYCEpOaWt for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:49:20 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id 5066712954D for <idr@ietf.org>; Thu, 20 Apr 2017 06:49:20 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d] (unknown [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id EF818540BA1; Thu, 20 Apr 2017 09:49:18 -0400 (EDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <8a242116-e17b-9c3f-00d4-a2e606a0c5b4@cisco.com>
Date: Thu, 20 Apr 2017 09:49:01 -0400
Cc: Brian Dickson <brian.peter.dickson@gmail.com>, Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <2993DCCB-1BB0-4699-8231-5FDAFF682D34@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com> <CAH1iCirFhb3HuREBDuuDbC-fuiinSFW6UuSk61MrEj9GEaHtsw@mail.gmail.com> <8a242116-e17b-9c3f-00d4-a2e606a0c5b4@cisco.com>
To: Enke Chen <enkechen@cisco.com>, "Acee Lindem (acee)" <acee@cisco.com>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/BS9KaMUZptEeUTxFKqBKx2dO1Go>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 13:49:21 -0000

> On Apr 19, 2017, at 11:36 PM, Enke Chen <enkechen@cisco.com> wrote:
>=20
> Hi, Brian:
>=20
> I think that the backward compatibility concern is more about existing
> deployment. For example, say an existing router does not have an =
inbound
> policy and just accepts whatever routes from its provider, but it does=20=

> have an outbound policy.  Let us further assume that the default =
behavior
> in the software is to accept updates from a neighbor without an =
inbound
> policy.=20
>=20
> Assume in the new code the default behavior is changed to drop updates =
from
> a neighbor without an inbound policy.  Then as soon as the new =
software
> is deployed on that router, the updates from the provider would be =
dropped
> without any config changes.

Vendors have changed defaults before and incrementally done so, take for =
example
a well known vendor that had problems that arose during an IETF meeting =
regarding
configuration options like =E2=80=9Cservice tcp-small-servers=E2=80=9D =
and =E2=80=9Cservice udp-small-servers=E2=80=9D
which eventually became a) exposed and b) non-default.

Surely there is precedent for a vendor to identify a release strategy =
that resolves
the operational concerns without an IETF document and IDR dictating to =
the vendor how
exactly to perform their release cycle.  I think we all know that=E2=80=99=
s infeasible and is
entirely a straw man argument for not addressing the well documented =
operational insecurity
introduced by clinging to an exploitable practice.

Let me reiterate, it=E2=80=99s not even like all vendors are internally =
consistent across their
releases here, this is codifying a safe default, such as not running an =
open relay for
delivery of SPAM or =E2=80=9Cip directed-broadcast=E2=80=9D for things =
like the SMURF attacks.

- Jared=


From nobody Thu Apr 20 06:51:05 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAF8913145D for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:51:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3DqyTX8eFu2H for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:51:02 -0700 (PDT)
Received: from mail-io0-x235.google.com (mail-io0-x235.google.com [IPv6:2607:f8b0:4001:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8554E12954D for <idr@ietf.org>; Thu, 20 Apr 2017 06:51:02 -0700 (PDT)
Received: by mail-io0-x235.google.com with SMTP id r16so68714840ioi.2 for <idr@ietf.org>; Thu, 20 Apr 2017 06:51:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=Dfi7mK78OXuR9Cg4pHA/R56ooHMurMaRiyhYjBechGE=; b=GwOHRz9jynkO8pxDah/ooLXd6zom8SZU1zsUYIA3Zt0peyqpFc8Zc7z15vdizk2BIP 0UMVHFm5qv8LAwk9ONvyW7cuXJ5yZl3DQp3qgKEQR0QJl1uls0YHTXLA9UbdSKB1XG6m CA0mXKpl8F14rLbi8ruGMK/wwJ0gbK9Kpd32ZYzms9gYhlm+w8MJt/09j8GzejXnh3aB hDmMUOzY9VdVqtcsmjOOhRok0indLDaB/f7W7icPeAHmt+FRj9Z0wXmPhBLKOh+L/yzJ 21iQxlupuayAYQ4efLBAdlYl6WHuCKNs6BAVAUO7jv7ccQ+rmjLLW45Y4up8UVsurfsX dT1g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=Dfi7mK78OXuR9Cg4pHA/R56ooHMurMaRiyhYjBechGE=; b=G3dq6v/h3ShWYixITmtXS/SiKhZ7WufrnHX6THAusqwirIZrx0cTrvw9v15mdIGPli jPhI5Xhz1JKTCCFnQkW811QEjDisZXnLCrvdcLHIE4zbFsDyuVh6eAhuJo5Ng7Ls9JB7 +ROrCvWe14gFHp88iRsbsbuZIET0oQVusIVCOck2Xj7C/T85J5Yo/UUx9BqzLEYZlORv 2XbcKO+VQnrHpmSoZkhzT0/T8/+A5Rh7DXAtbRvubc5pbkCsHCXHOAkjlOOVRVs0P0Of S74KerX9ZIUhKBwxNO5uJfbec/kUYt6UgldgNbBBivhqiyhC6p3M5pC+uO/RyV1Q20RC Qy2A==
X-Gm-Message-State: AN3rC/4XBswe9eFt1x3JCTNDQpy2Lwus8NxFQisEOCwtlx6nengtLv8Z v75ip4o0HI0xMOusfkJu4mbB4Q8xifc+
X-Received: by 10.36.48.149 with SMTP id q143mr3665009itq.25.1492696256053; Thu, 20 Apr 2017 06:50:56 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Thu, 20 Apr 2017 06:50:55 -0700 (PDT)
In-Reply-To: <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 20 Apr 2017 15:50:55 +0200
X-Google-Sender-Auth: KcuSridEZsJVmnVb97Y6zOin-5Y
Message-ID: <CA+b+ERm5cqze6=MFjQiQ49skfjmVdwsKisvtdYEFzve1Pi-+nw@mail.gmail.com>
To: Jared Mauch <jared@puck.nether.net>
Cc: Keyur Patel <keyur@arrcus.com>, "Acee Lindem (acee)" <acee@cisco.com>, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a1140b16019ae67054d996e8a
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/fOtIgLQ-fyotE17M3zjrnQ5k7W8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 13:51:04 -0000

--001a1140b16019ae67054d996e8a
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Jared,

- Vendors can take the N+1.x and N+2.x release strategy, where in N and N+1
> they generate their equivalent of IOS-XR and the "bgp unsafe-ebgp-policy=
=E2=80=9D
> policy to prevent their customers from breaking
> - In a release N+2(or more) that would become the =E2=80=9Cdefault=E2=80=
=9D.
>

=E2=80=8BIn the past things like that were also actually solved within sing=
le
release by automatically generating this line of "missing" configs if no
other policy was configured. However for this specific case I am not sure
what does it buy you in practice. Maybe consistency across BGP
implementations.  =E2=80=8B

> At least doing it as part of OPEN msg will be immediately indicated to
> both ends.
> This is you promoting a different draft, I recommend another thread for
> that draft.
>

=E2=80=8BWell if both drafts can solve the same problem maybe there is a ro=
om to
discuss it and pick one to go forward with.

//R
=E2=80=8B

--001a1140b16019ae67054d996e8a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Jared,</div><div class=3D"gmail_default=
" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></di=
v><div class=3D"gmail_extra"><div class=3D"gmail_quote"><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex">- Vendors can take the N+1.x and N+2.x release strategy, wher=
e in N and N+1 they generate their equivalent of IOS-XR and the &quot;bgp u=
nsafe-ebgp-policy=E2=80=9D policy to prevent their customers from breaking<=
br>
- In a release N+2(or more) that would become the =E2=80=9Cdefault=E2=80=9D=
.<br></blockquote><div><br></div><div><div class=3D"gmail_default" style=3D=
"font-family:arial,helvetica,sans-serif;font-size:small">=E2=80=8BIn the pa=
st things like that were also actually solved within single release by auto=
matically generating this line of &quot;missing&quot; configs if no other p=
olicy was configured. However for this specific case I am not sure what doe=
s it buy you in practice. Maybe consistency across BGP implementations. =C2=
=A0=E2=80=8B</div></div><div><br></div><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span=
 class=3D"">&gt; At least doing it as part of OPEN msg will be immediately =
indicated to both ends.<br></span>This is you promoting a different draft, =
I recommend another thread for that draft.<br></blockquote><div><br></div><=
div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-=
serif;font-size:small">=E2=80=8BWell if both drafts can solve the same prob=
lem maybe there is a room to discuss it and pick one to go forward with.=C2=
=A0</div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,=
sans-serif;font-size:small"><br></div><div class=3D"gmail_default" style=3D=
"font-family:arial,helvetica,sans-serif;font-size:small">//R</div><div clas=
s=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-si=
ze:small">=E2=80=8B</div><br></div><div><br></div></div></div></div>

--001a1140b16019ae67054d996e8a--


From nobody Thu Apr 20 06:51:48 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDDC4129431 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:51:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WChCDPMiflG6 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:51:46 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id 2120F124BFA for <idr@ietf.org>; Thu, 20 Apr 2017 06:51:46 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d] (unknown [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id D63F7540BA1; Thu, 20 Apr 2017 09:51:44 -0400 (EDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <25911_1492681251_58F88222_25911_625_1_53C29892C857584299CBF5D05346208A31CBFF52@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Date: Thu, 20 Apr 2017 09:51:27 -0400
Cc: Job Snijders <job@ntt.net>, Enke Chen <enkechen@cisco.com>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <955F7FC6-D1B9-4A3E-96CF-5EBEAFC48B76@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com> <20170420090941.c5yi72mzleto64ph@hanna.meerval.net> <25911_1492681251_58F88222_25911_625_1_53C29892C857584299CBF5D05346208A31CBFF52@OPEXCLILM21.corporate.adroot.infra.ftgroup>
To: bruno.decraene@orange.com
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/9y8VfgEs_HDnxhs0SUl5yLhy7Ms>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 13:51:47 -0000

> On Apr 20, 2017, at 5:40 AM, <bruno.decraene@orange.com> =
<bruno.decraene@orange.com> wrote:
>=20
> The document is asking network operators which have correctly =
configured their network to retrofit the configuration of 1000s of EBGP =
configurations, in order to accommodate some operators which are not =
capable of correctly configuring their EBGP session.
> Plus the solution is asking those later operators to do a =
configuration, while the assumption is that they can't be trusted to =
correctly configured their EBGP session. Why do you think that they =
won't just copy/past 1 additional line of configuration in order =
automatically distribute all the routes for each new EBGP session?

My goal isn=E2=80=99t perfection, but improvement.  There will always be =
people who do nonsensical things, this is an attempt to address those =
doing it unintentionally :-).

- Jared=


From nobody Thu Apr 20 06:56:00 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CE00129456 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:55:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pULpCfxoLi5S for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:55:58 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id 500B8124BFA for <idr@ietf.org>; Thu, 20 Apr 2017 06:55:58 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d] (unknown [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id 2A3E7540BE5; Thu, 20 Apr 2017 09:55:57 -0400 (EDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <27506_1492681817_58F88459_27506_7804_1_0c74078d-a304-441b-9dbf-abb5d5e4eca2@OPEXCLILM5D.corporate.adroot.infra.ftgroup>
Date: Thu, 20 Apr 2017 09:55:39 -0400
Cc: Job Snijders <job@ntt.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <D244EB44-7DB1-40D2-BFB9-C04221CAC9F0@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420085755.sbzdtcjhirdoi3b3@hanna.meerval.net> <8442_1492680540_58F87F5C_8442_1101_11_53C29892C857584299CBF5D05346208A31CBFD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <27506_1492681817_58F88459_27506_7804_1_0c74078d-a304-441b-9dbf-abb5d5e4eca2@OPEXCLILM5D.corporate.adroot.infra.ftgroup>
To: bruno.decraene@orange.com
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/_dPi96FCr-xVGQ00ajvPJJMVKxk>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 13:55:59 -0000

> On Apr 20, 2017, at 5:50 AM, <bruno.decraene@orange.com> =
<bruno.decraene@orange.com> wrote:
>=20
> Because I think the document means "configured route =
(re)distribution/advertisement policy".
> Possibly this was implied by the word "export" but one could read this =
as any outbound policy, while a policy setting some communities would =
probably not help much.

IMO:

someone writing the policy statement saying=20

term { accept; }=20

is enough to satisfy my concerns, it=E2=80=99s when people do nothing =
and are left sending their full rib back to their upstream causing load =
it=E2=80=99s a problem.  While we=E2=80=99ve moved past the days of =
11.1&12.0 in IOS land where there was a high cost on the CPUs to x86 =
compute where the burden is less, it=E2=80=99s still additional =
processing and a resource consumer.

- Jared


From nobody Thu Apr 20 06:58:52 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 632681205F0 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:58:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9VCDpAzsFBT4 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 06:58:49 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [IPv6:2001:418:3f4::5]) by ietfa.amsl.com (Postfix) with ESMTP id 5BB3A1204DA for <idr@ietf.org>; Thu, 20 Apr 2017 06:58:49 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d] (unknown [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id D6CE6540C0C; Thu, 20 Apr 2017 09:58:47 -0400 (EDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <26662_1492682306_58F88642_26662_8569_1_53C29892C857584299CBF5D05346208A31CC0240@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Date: Thu, 20 Apr 2017 09:58:30 -0400
Cc: Job Snijders <job@ntt.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>, Robert Raszuk <robert@raszuk.net>
Content-Transfer-Encoding: quoted-printable
Message-Id: <D6039F63-2054-44DA-8583-348DE2D165DD@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <CA+b+ERnRbAG_WSppAVkWETL0zjeppmm9fwqRu8DV24Hcdihqiw@mail.gmail.com> <20170420090535.cfxn5tbhns5bszvf@hanna.meerval.net> <4993_1492680765_58F8803D_4993_4017_1_53C29892C857584299CBF5D05346208A31CBFE4F@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420093706.ongrlwi47kew6vt2@hanna.meerval.net> <26662_1492682306_58F88642_26662_8569_1_53C29892C857584299CBF5D05346208A31CC0240@OPEXCLILM21.corporate.adroot.infra.ftgroup>
To: bruno.decraene@orange.com
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/U7uuRVUKHO8EarWV7ybBZOe0m8M>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 13:58:50 -0000

> On Apr 20, 2017, at 5:58 AM, <bruno.decraene@orange.com> =
<bruno.decraene@orange.com> wrote:
>=20
> The question was whether this new default policy could be proposed (or =
imposed) as a BCP only for _new_ implementations.
> And by new implementations, I mean new source code (e.g. RtBrick) not =
a software upgrade of an existing code.

My existing $dayjob vendors should expect we would not purchase =
equipment that is not secure out of the box.  If product management =
can=E2=80=99t get behind a strategy of secure devices, this speaks =
volumes to me and will impact our purchasing.

- Jared=


From nobody Thu Apr 20 07:00:07 2017
Return-Path: <adrian@olddog.co.uk>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B6C21204DA for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 07:00:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06XhaTdOa98r for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 07:00:04 -0700 (PDT)
Received: from asmtp3.iomartmail.com (asmtp3.iomartmail.com [62.128.201.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10DC012955A for <idr@ietf.org>; Thu, 20 Apr 2017 07:00:00 -0700 (PDT)
Received: from asmtp3.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp3.iomartmail.com (8.13.8/8.13.8) with ESMTP id v3KDxhBD008764; Thu, 20 Apr 2017 14:59:43 +0100
Received: from 950129200 (251.129.113.87.dyn.plus.net [87.113.129.251]) (authenticated bits=0) by asmtp3.iomartmail.com (8.13.8/8.13.8) with ESMTP id v3KDxffl008736 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 20 Apr 2017 14:59:42 +0100
Reply-To: <adrian@olddog.co.uk>
From: "Adrian Farrel" <adrian@olddog.co.uk>
To: "'Nick Hilliard'" <nick@foobar.org>, "'Alvaro Retana \(aretana\)'" <aretana@cisco.com>
Cc: <idr@ietf.org>
References: <20170419173711.71458B814DA@rfc-editor.org> <88AF5CD0-3DA4-4CD0-877B-39925DC7D5F0@cisco.com> <58F88C2E.50809@foobar.org>
In-Reply-To: <58F88C2E.50809@foobar.org>
Date: Thu, 20 Apr 2017 14:59:40 +0100
Message-ID: <009101d2b9de$5c178810$14469830$@olddog.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQF1geRngdAVd3OQhrEVODtcSyPFEAERBoE5AYbM2b+ic/lAIA==
Content-Language: en-gb
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.1.0.1062-23018.006
X-TM-AS-Result: No--16.142-10.0-31-10
X-imss-scan-details: No--16.142-10.0-31-10
X-TMASE-MatchedRID: oTBA/+sdKaYDJrf2+hNOheG5dRZCgxC3gHzgwy8qV5pnnK6mXN72mxzl lv0af4rK0XxwB9vXLSA8wjJ+Cju5+58VO6A3SfTC+I/dw7DSEBE6OlhBxSi1Gq9AovhnKTu8WkM akm93hVhNYvDaO9t+nM8MTEiM2S2G+dVjQNaxOreCyHXh5sNsiYyzstdwoG+PnvbaEOoeixPmfm 9WMwT/Ic0Age9hS2jaliXG6TWiBAD7OgBbxHXmXxzwnpmtY/+rfS0Ip2eEHny+qryzYw2E8H2PY bDNMTe9KrauXd3MZDUD/dHyT/Xh7Q==
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/TMP3e6dEgrG8x6E-ybTgkJKOCoI>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 14:00:06 -0000

Sorry, but no!

OLD
   Others are discretionary and MAY
   or MAY NOT be sent in a particular UPDATE message.
NEW
   Others are discretionary and MAY
   be sent in a particular UPDATE message.
END

The use of MAY implies the not case.

"MAY or MUST NOT" is entirely ambiguous since "MUST NOT" means
never/forbidden/death-by-vampire so saying "or MUST NOT" is like saying "You
must never, ever, eat lithium disulfide, except when you do."

Adrian


> -----Original Message-----
> From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Nick Hilliard
> Sent: 20 April 2017 11:24
> To: Alvaro Retana (aretana)
> Cc: idr@ietf.org
> Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
> 
> Alvaro Retana (aretana) wrote:
> > I would like to get input from the WG as to the best way to handle this
report.  I
> would specially like to hear from implementers, but all input is welcome.
> [...]
> > b. s/MAY NOT/MUST NOT
> 
> this.
> 
> Nick
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr


From nobody Thu Apr 20 07:01:50 2017
Return-Path: <adrian@olddog.co.uk>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB4611294AB for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 07:01:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8lxmYny4jHRe for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 07:01:47 -0700 (PDT)
Received: from asmtp5.iomartmail.com (asmtp5.iomartmail.com [62.128.201.176]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFD631274D0 for <idr@ietf.org>; Thu, 20 Apr 2017 07:01:43 -0700 (PDT)
Received: from asmtp5.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp5.iomartmail.com (8.13.8/8.13.8) with ESMTP id v3KE1XOt015747; Thu, 20 Apr 2017 15:01:33 +0100
Received: from 950129200 (251.129.113.87.dyn.plus.net [87.113.129.251]) (authenticated bits=0) by asmtp5.iomartmail.com (8.13.8/8.13.8) with ESMTP id v3KE1Wkv015720 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 20 Apr 2017 15:01:33 +0100
Reply-To: <adrian@olddog.co.uk>
From: "Adrian Farrel" <adrian@olddog.co.uk>
To: "'Nick Hilliard'" <nick@foobar.org>, "'Alvaro Retana \(aretana\)'" <aretana@cisco.com>
Cc: <idr@ietf.org>
Date: Thu, 20 Apr 2017 15:01:32 +0100
Message-ID: <009501d2b9de$9e19e0a0$da4da1e0$@olddog.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AdK53pwjNvSdrrA1TFO5A4SFKPV/jQ==
Content-Language: en-gb
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.1.0.1062-23018.006
X-TM-AS-Result: No--16.956-10.0-31-10
X-imss-scan-details: No--16.956-10.0-31-10
X-TMASE-MatchedRID: EuwyskqcIB0LlkbXYnCHYpD6BbDN9+jOkPqe52Sp8B1kgx6+gdAsQ8Lm p4jPUF8tGxvblWcpseoXIJWO/t2WjkMpVZZsZyZGT7jCYv2QJPHDHSNFHFxB8/gnJH5vm2+gD7g zIBuxH07+vdbwZ9w21jPpg7+5YvVQUHm8HDD+GVlCnGIuUMP0VX4yToAKzDgmayjbe4qUImPmfm 9WMwT/Ic0Age9hS2jaliXG6TWiBAD7OgBbxHXmXxzwnpmtY/+rfS0Ip2eEHny+qryzYw2E8M894 3oc3p3sq7rFUcuGp/EgBwKKRHe+rxAGeiKDWil6b0BD1fP5b6OVbMMITV/rN4IrNtJVeXjuUiis ENBUdYU=
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/AALu-0AN4i-d3cax9P91mPr2A7w>
Subject: [Idr] Damn, damn, damn! RE:  [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 14:01:49 -0000

Sorry, replied on the wrong errata report which turns out that I agree with both
proposals.

eedjit :-(

Adrian

> -----Original Message-----
> From: Adrian Farrel [mailto:adrian@olddog.co.uk]
> Sent: 20 April 2017 15:00
> To: 'Nick Hilliard'; 'Alvaro Retana (aretana)'
> Cc: 'idr@ietf.org'
> Subject: RE: [Idr] [Technical Errata Reported] RFC4271 (5000)
> 
> Sorry, but no!
> 
> OLD
>    Others are discretionary and MAY
>    or MAY NOT be sent in a particular UPDATE message.
> NEW
>    Others are discretionary and MAY
>    be sent in a particular UPDATE message.
> END
> 
> The use of MAY implies the not case.
> 
> "MAY or MUST NOT" is entirely ambiguous since "MUST NOT" means
> never/forbidden/death-by-vampire so saying "or MUST NOT" is like saying "You
> must never, ever, eat lithium disulfide, except when you do."
> 
> Adrian
> 
> 
> > -----Original Message-----
> > From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Nick Hilliard
> > Sent: 20 April 2017 11:24
> > To: Alvaro Retana (aretana)
> > Cc: idr@ietf.org
> > Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
> >
> > Alvaro Retana (aretana) wrote:
> > > I would like to get input from the WG as to the best way to handle this
report.
> I
> > would specially like to hear from implementers, but all input is welcome.
> > [...]
> > > b. s/MAY NOT/MUST NOT
> >
> > this.
> >
> > Nick
> >
> > _______________________________________________
> > Idr mailing list
> > Idr@ietf.org
> > https://www.ietf.org/mailman/listinfo/idr


From nobody Thu Apr 20 07:06:53 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D5D4124D37 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 07:06:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Inmp-Guf1V6D for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 07:06:50 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id 7F40F1205F0 for <idr@ietf.org>; Thu, 20 Apr 2017 07:06:50 -0700 (PDT)
Received: from [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d] (unknown [IPv6:2603:3015:3603:8e00:25c2:4c02:5849:c73d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id 9EE5B540C09; Thu, 20 Apr 2017 10:06:44 -0400 (EDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <CA+b+ERm5cqze6=MFjQiQ49skfjmVdwsKisvtdYEFzve1Pi-+nw@mail.gmail.com>
Date: Thu, 20 Apr 2017 10:06:26 -0400
Cc: Keyur Patel <keyur@arrcus.com>, "Acee Lindem (acee)" <acee@cisco.com>, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <311F820B-2782-4450-B805-52D965EB3B56@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <CA+b+ERm5cqze6=MFjQiQ49skfjmVdwsKisvtdYEFzve1Pi-+nw@mail.gmail.com>
To: Robert Raszuk <robert@raszuk.net>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/4MauSU0ArBuv6ZhjYxOUaI54cNg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 14:06:52 -0000

> On Apr 20, 2017, at 9:50 AM, Robert Raszuk <robert@raszuk.net> wrote:
>=20
> Jared,
>=20
> - Vendors can take the N+1.x and N+2.x release strategy, where in N =
and N+1 they generate their equivalent of IOS-XR and the "bgp =
unsafe-ebgp-policy=E2=80=9D policy to prevent their customers from =
breaking
> - In a release N+2(or more) that would become the =E2=80=9Cdefault=E2=80=
=9D.
>=20
> =E2=80=8BIn the past things like that were also actually solved within =
single release by automatically generating this line of "missing" =
configs if no other policy was configured. However for this specific =
case I am not sure what does it buy you in practice. Maybe consistency =
across BGP implementations.  =E2=80=8B

I see value in consistent behaviors.  We have vendors that do different =
things here, and are inconsistent amongst themselves as well.  I=E2=80=99m=
 surprised that PM types haven=E2=80=99t pushed for a consistent =
behavior, but this may more reflect internal company cultures.

>=20
> > At least doing it as part of OPEN msg will be immediately indicated =
to both ends.
> This is you promoting a different draft, I recommend another thread =
for that draft.
>=20
> =E2=80=8BWell if both drafts can solve the same problem maybe there is =
a room to discuss it and pick one to go forward with.=20

I think the other drafts have some value, but I=E2=80=99ve not yet been =
able to wrap my head around where the technical and business pieces =
intersect and would cause operational issues.  I=E2=80=99ll leave my =
detailed comments for the other document, but they have been raised at =
the microphone at the past 2 WG meetings re: the Open message draft.  =
(let me go find the thread or start some comments on those).

- Jared



From nobody Thu Apr 20 07:50:50 2017
Return-Path: <Ian.Dickinson@sky.uk>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB2A6131491 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 07:50:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.912
X-Spam-Level: 
X-Spam-Status: No, score=-2.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=skyglobal.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ctt7nffo0cwV for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 07:50:43 -0700 (PDT)
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0047.outbound.protection.outlook.com [104.47.1.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4183B13148F for <idr@ietf.org>; Thu, 20 Apr 2017 07:50:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=skyglobal.onmicrosoft.com; s=selector1-skyglobal-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Kp2fhXOYx56nJXt9kDOSsHNxuiyLkOH7EbBGEzNci6I=; b=SSqIfZUljQijloJFCpyLAwY3KmtdGSugI5g7R7SyaQu6YeN5LgfyRApDvQGWeONC9QqFOTCO7cBdW9gOa5U6shhb3PTr7TGgL6hNU6CD2G8Lf5M8w1kyYPM1wwhzDV8dLB/l3xVoUbRbDQ8ZI775MTe4cpfMpPBLOsS4qh5AS50=
Authentication-Results: spf=pass (sender IP is 176.255.244.223) smtp.mailfrom=sky.uk; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=pass action=none header.from=sky.uk;
Received-SPF: Pass (protection.outlook.com: domain of sky.uk designates 176.255.244.223 as permitted sender) receiver=protection.outlook.com; client-ip=176.255.244.223; helo=mail.bskyb.com;
From: "Dickinson, Ian" <Ian.Dickinson@sky.uk>
To: Jared Mauch <jared@puck.nether.net>, "bruno.decraene@orange.com" <bruno.decraene@orange.com>
CC: "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuSz/0j1snvtXuk+xdduICGgEtaHNMQoAgAC0PoCAAAiugIAABe+AgABEk4CAAB9HAA==
Date: Thu, 20 Apr 2017 14:50:36 +0000
Message-ID: <9B3BFE0A18160E40BAF1950414D10FAE89870D80@WPMBX010.bskyb.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420085755.sbzdtcjhirdoi3b3@hanna.meerval.net> <8442_1492680540_58F87F5C_8442_1101_11_53C29892C857584299CBF5D05346208A31CBFD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <27506_1492681817_58F88459_27506_7804_1_0c74078d-a304-441b-9dbf-abb5d5e4eca2@OPEXCLILM5D.corporate.adroot.infra.ftgroup> <D244EB44-7DB1-40D2-BFB9-C04221CAC9F0@puck.nether.net>
In-Reply-To: <D244EB44-7DB1-40D2-BFB9-C04221CAC9F0@puck.nether.net>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.105.64.254]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-EOPAttributedMessage: 0
X-Forefront-Antispam-Report: CIP:176.255.244.223; IPV:CAL; SCL:-1; CTRY:GB; EFV:NLI; SFV:NSPM; SFS:(10009020)(6009001)(39450400003)(39840400002)(39850400002)(39860400002)(39400400002)(39410400002)(2980300002)(438002)(377454003)(24454002)(13464003)(189998001)(8936002)(50986999)(229853002)(5660300001)(6246003)(33656002)(8676002)(76176999)(38730400002)(2950100002)(305945005)(54356999)(50466002)(81166006)(93886004)(7736002)(23676002)(230783001)(106466001)(53546009)(11286001)(2906002)(5890100001)(55846006)(102836003)(2501003)(47776003)(6116002)(86362001)(4326008)(74482002)(54906002)(2920100001)(6306002)(9686003)(3846002); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR06MB1145; H:mail.bskyb.com; FPR:; SPF:Pass; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: 1; HE1EUR01FT047; 1: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
X-MS-Office365-Filtering-Correlation-Id: 2024b64d-53c5-4af8-6e0b-08d487fc9c95
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(8251501002)(2017030254075)(201703131423075)(201703031133081); SRVR:HE1PR06MB1145; 
X-Microsoft-Exchange-Diagnostics: 1; HE1PR06MB1145; 3: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
X-Microsoft-Exchange-Diagnostics: 1; HE1PR06MB1145; 25:kbYkbqKM6r4F1Mp3a9LsK0AKmX6k08crxUBe0mYFcHGaSs2Foz80CjHlIHP8P3qtiZplfPYv339gNhTTnDvewzfc8vbdvZmRPPGdeOeoaF4y3bw7UEdard3w3NJzooIdfkfmN6MJTzHdPQilaCALx948LSKtKPS4cxMI/5I3vKyDT5fwJExvumyYaY2GL441RpwUbqg+xTTaiCbUKO9LTSfZHeGt1C4UxdUaI1GhsSbLgFQgC4cLQXKbhGs0eblm0efdVPAp9gIcF18J0bDF4i7/ckfn+RQPZYj7vAv4lxmAErZTIKyf+j1+VSaVtqqV82W/541Tu8gI8EE3J9ux1Q6H+Qy953M/0yK7kxxlF1JMsAX6n3GKuUDiFuDIxBUdpLgaGKRiM6+JHbvN7o0PnOX/JQZwKqWFmzAvEcKZkTNC9gf26qrsn07XT4QyZiRqk2D8zp6tArDhNmgDyv7G7g==; 31:TSPa7nXwh3ZJYX/9/9fMd4NuJ4AQmZtSc5D44u5XNf7JvZPVLvv5+M1Hgz8eo2PYDA67erM/H7K7jR7am7D2YKGvgVXdgsxElKScLot64EcbrrboeHYIk8o8QMKfpAMM0DQDAYngF6bRbXWiOwdbg4ujY2P1o5Iar9VuvsJAog4Fq+hSeyjUv22MY1cMAGPuwd8aCI+oqkYU4/zkouRTlydTlyBFiEGM1s1rd55HBNG7R/EB/JHQYvZUcDO59jr5msK9SxWRS4PFt6q0ISD2Tw==
X-Microsoft-Exchange-Diagnostics: 1; HE1PR06MB1145; 20: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
X-Microsoft-Antispam-PRVS: <HE1PR06MB114506EC3EF175BBA91C42C3931B0@HE1PR06MB1145.eurprd06.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(18271650672692);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(13020025)(13012025)(5005006)(8121501046)(93006095)(93004095)(3002001)(10201501046)(6041248)(201703131423075)(201702281528075)(201703061421075)(20161123555025)(20161123562025)(20161123564025)(20161123560025)(6072148); SRVR:HE1PR06MB1145; BCL:0; PCL:0; RULEID:; SRVR:HE1PR06MB1145; 
X-Microsoft-Exchange-Diagnostics: 1; HE1PR06MB1145; 4:hpBpfheaoK5h/MDKGPVClAckb2vz+bXCkF7NkEsISS/NvspFj0FfpXc8h5AlYD0KQrGlZQ0Z2/OFQR4HJRhVKP1rpSc0blo8UVMb+ml+tPu+qjqhlMtFnmbhruLp8PfJldP7g9WbMZNwxKY23T1EpH0Dk8Mdaiu2V74JfhN/7g3xvccB94N/Jl99ESD/O+ZIZF149htfFGQmyvEH9vh61n5fEK5nmhVi+srB6Mc3f5oAnsZ0FoxJGkY04UH7sRuhmrIoiwE3REHxLrw7tzfwtY76OQpajnrLJ1rVBxn0lrNfdI7Lmk+tgA8oRUJVj6/ODTWWacPntnKWdyGTg4BmSggp1hHJErwb0Sb1sVeThhhkB8/elBhbgH+EPNIvFMY6rLej72Uaj4IqmdpHIXTtUPhUuvUFa/QV+fLO9yEf/91bWZMunweKrBLx43s75XmiuwL8qLvV9KJmOaedL4kKQ038p+lt5co/aaXJWQgGq0DSSEJMyG301jmRbB4i92VedYoWQY0xBgUqqjnw1P/34o8zMeKq/ODdX1SHvIGNzufGTc7+aDeinzQ/4fIPDctJSIsZNT0FXUSz34Ptkh6dFo8hkmPVkDH5e77Iwe0cKEGLVi8iwKINCTwQeTfaSx4wvwA4JS21LYdub+aARINkJF+LsUAjsWPhCgEWFKRHK636mPmKH1zwRbGsLVQEUFfAkZU6qJlMZKxSJKQG5krBj8CKmpkUynz8mP50FoMx7ElV2GjdhNQdfHhx8CrhtLxUf1ZR13GA4yClto7AJZXwxxXE1LI/PXTLu6SnPB2Z9WA=
X-Forefront-PRVS: 02830F0362
X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtIRTFQUjA2TUIxMTQ1OzIzOnlYRk5hK05xZm9XTm1TdUJuTDU1amtDSDlj?= =?utf-8?B?Z3NNc3lwMEJkSSsvWjc2c0JHRmZYOWEyZVcyT2hLanBZMzdlZngyWEFablpM?= =?utf-8?B?UGdKZUN5MERBQ2UyT3lhc1RkRm5FeHBvZFl3TEV2dytyYmU1ejNEYmJKc2pP?= =?utf-8?B?Vy9GQVFOZ3RYTmEyNVhZKzJucHp0M1JUVXVHei84TWFyTEcwV1BGenhnV2ly?= =?utf-8?B?b1ErQ0EySmpSS0hGMy96Y1Y3U0Y4WHFaNk9hZG5xRVF4SC90eVJtaitDOWhQ?= =?utf-8?B?Z2xDa1ZoTzNjYUlxeDRrVTk0enJKUGJTWUtRc05XeGdGNVd1bEpJR2JSTVdU?= =?utf-8?B?R0RTd29wL0VFejFYYnFQRkI5aXNMZFRSSFJqbW5xOFIyOEEyN2xtRUs2MUdC?= =?utf-8?B?U0R1WG5YT011VkphdzA0QjJFdjVQUzlOU0NLb1dsQTMxRUJxQXdVVy9icXJp?= =?utf-8?B?WUVMTnh6eDdIS1JZTllXN2R3YzJpbGtPNTJuSEM5SERicktqa282SHVPMEdH?= =?utf-8?B?WnoxVDA1NVNua2h1ZDdMRlEzNFovd0NjNVNIS0lmUVVGQ0pSZi8zeDNCQWRL?= =?utf-8?B?RkFEOTZyTHpPaUVBY0RZaVMvZnMrTmhSLzZyMTlXdTZXVWQ0bUpPeit4RFNF?= =?utf-8?B?Y3UzUFA0dkp6cXBuSTdOK3Y2a2Fhazg0K2pwVDl6YnNxYVRrMlcrckpBNFk0?= =?utf-8?B?dnIxUmdxaVN1Vy90NXJhS2l4cFM3REFlcXhGbUxacHNrWEZrT3dXNndnbXVQ?= =?utf-8?B?Y3QwVno2aVoycUJydXBJNFYrd3NiTG43cjVFKzgvL0hMbHNsalg4dHBWeGZa?= =?utf-8?B?RjVoU0RxVVVucHFjdXpGaGx5ZmpLTDRUQ0M5Y1Y3TzB1aTFwVFFHMkNHQUNo?= =?utf-8?B?WmVjSnFsQXJ2Vll6ZGhUZGhRMkFwcTY0RDgrT1NjRjM0WlIwVmNveFNUdklw?= =?utf-8?B?YXlnb3FYVy9tRFBOWDk1Mk84ZElYbW5XQ1NZOWF5ZUFQa1hGNXcrVTM2cEll?= =?utf-8?B?S1M4Y2VGM2lqVHNIT2gxc2pyU3Fla0tUa2IwVGlvcXpsQms5Z3l4VnJxMCtN?= =?utf-8?B?a1AzVVhsNTNvZEU1TEFCTUNKc1dJVHM3N3F2S2RkNEhLZUJyWmg2VExWTThu?= =?utf-8?B?T29sNXVWZDYwMDZVYmYvc00yU3NGZ1dzVzFrenU4RElzM2RHZzZOWml5WUV5?= =?utf-8?B?WWx4c1JKWWRMdFAxZUwxcFdLcExxbXdKbGlDZ01YUk1GdDJLRVhPejMvejEx?= =?utf-8?B?aTRDL0tWdmI1WElaelR5c3l4eEg0SWNTTWxQMzZ5NGR5N2FyWE0yZUZFNUJG?= =?utf-8?B?N3NzUGxmK3BtdmJRaUp4UHp1YWFXNzFaL2tTVFVOZTdkbHpZQzVBbm90ZkJL?= =?utf-8?B?akxnMzNWRENiUStzaFFXRDVkRFlkZXQ0eUlURWlILythc0RDVWVQelF6U3dF?= =?utf-8?B?cGFZZUtVdnZDVW44bFdrdllwNnFMRzkzY2t1WmdhcU00NjV1SU9NSVczWlVF?= =?utf-8?B?bUZJYUo3VmRwY1dua2k0WTZOeEQzNmlTaTJNaWd5V3dialVXVGZHSE9vZ1FO?= =?utf-8?B?TW5YRVVFeDRnUW9rMzZJbTFrcTVWVi9HdS9XUC9ieTlsWitpRGMxWnpNYVJ6?= =?utf-8?Q?feAJUk7NlrGNkwyC76FK?=
X-Microsoft-Exchange-Diagnostics: 1; HE1PR06MB1145; 6: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; 5:TyJh0k4iIO0fzh6BiW9NrqPDSKzuJkAJw63fYD6hOLGyI03UH0XF0fOvunvPnmz8XwxH112RMREYnUh4vDdskt7VwoCx4U6Fmt941d3cGzuEtjCA3/RLwUQ3vMJBJ64vkPkRQ3hxRAGCCggBFDgqyg==; 24:DpWe9CHGINwcFMko43eYeovunc2gyqaiNcu/CJRj7TLtzfry/d1QCFxYV8XiCRmb+f/FWPd9EwizpMN6sb0YzPzyBklVSPdg7oc/gDnl0KI=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; HE1PR06MB1145; 7:lCLrsepOigtn998CwA+Ay6uM54rS8h7SOGmhRk7AULHFXCLyFvfEtnRh8eaqvKVXmsrZw4rmHewBxa4Af/ChI6pTWdIMSrQbppDPAzvjhXDzzzjrDKxImsb2R1jZI2XIQseNwScNnzF5oNHogM4dGTPK1ASwnUfFtG5nSt+AEZGekZdglcFwrIjdQxZ0/6EKZuqPayxUAzn81Ol8EXYgPYqqDdh2daTultFCrfEc+eTgZo9aiJt2ye2XhA+kQ/Z/eZA7PNwqO1gWYmNikwqlNiq7NiKy30r4O97gU+s07CjNQ1SI5Ilo9/Drx03PEgLRPYIrmYDP2V/I0JYdScd+Ww==
X-OriginatorOrg: sky.uk
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Apr 2017 14:50:39.1504 (UTC)
X-MS-Exchange-CrossTenant-Id: 68b865d5-cf18-4b2b-82a4-a4eddb9c5237
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=68b865d5-cf18-4b2b-82a4-a4eddb9c5237; Ip=[176.255.244.223];  Helo=[mail.bskyb.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR06MB1145
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/_pF0YaxltEELSqUpwlfEefDuaXo>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 14:50:49 -0000
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From nobody Thu Apr 20 08:24:24 2017
Return-Path: <tony.li@tony.li>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E16C4128B8F for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:24:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x8szu7cwyJZY for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:24:20 -0700 (PDT)
Received: from resqmta-ch2-12v.sys.comcast.net (resqmta-ch2-12v.sys.comcast.net [IPv6:2001:558:fe21:29:69:252:207:44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 952A2126E3A for <idr@ietf.org>; Thu, 20 Apr 2017 08:24:20 -0700 (PDT)
Received: from resomta-ch2-18v.sys.comcast.net ([69.252.207.114]) by resqmta-ch2-12v.sys.comcast.net with SMTP id 1Dqjd3EopdlFQ1DwSdfvRH; Thu, 20 Apr 2017 15:24:20 +0000
Received: from [10.120.1.165] ([12.1.72.210]) by resomta-ch2-18v.sys.comcast.net with SMTP id 1DuKdCmx6StKd1DuNd86WY; Thu, 20 Apr 2017 15:22:18 +0000
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Tony Li <tony.li@tony.li>
In-Reply-To: <88AF5CD0-3DA4-4CD0-877B-39925DC7D5F0@cisco.com>
Date: Thu, 20 Apr 2017 08:22:09 -0700
Cc: "idr@ietf.org" <idr@ietf.org>
Content-Transfer-Encoding: 7bit
Message-Id: <B45B000E-4F2F-4B9D-B6B5-2FF277E4500B@tony.li>
References: <20170419173711.71458B814DA@rfc-editor.org> <88AF5CD0-3DA4-4CD0-877B-39925DC7D5F0@cisco.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
X-Mailer: Apple Mail (2.3273)
X-CMAE-Envelope: MS4wfLkyN3KkWgQKsiZdiQr5e2TByCE3Ot3alRzkggyqPR3uvr4e2NUC2V9fTowzy5UjOftWDAom1OtppZzDwZ0UBX/Wum7YY5PjAN0xoyCfelqFB7354/6b ODUmksYIn4JG+Fqx/hnrDSNjYc7PvL4U/5ohi6gQp5nNhHbKwYqllJF0+i3wyFgJOHeG8TGmPHBqQQ==
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/gVaOeP4QUwNNBoghiv682jVd5qg>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 15:24:22 -0000

> b. s/MAY NOT/MUST NOT


Unequivocally.

Tony



From nobody Thu Apr 20 08:36:22 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09B7A129AC1 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:36:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zJGNzJI8NIo4 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:36:19 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F216129AAF for <idr@ietf.org>; Thu, 20 Apr 2017 08:36:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5088; q=dns/txt; s=iport; t=1492702579; x=1493912179; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=W9CefBswR1zml3xoIUwCb7SCaVUZAR4Sl2Jfv61RyH4=; b=DD53GTsQaufzOoxmhFQ2AqXBtVugUcj0IVGe+1MBPaCccu5s7IQwwOir JgkTIf3bYXCqLuJuEyb24VRB9DGrnm4D2KbFxNbBRUl4HAW8Mm+oXGO+3 TutxvOf81YTlUmEFZ1xjhV3GkNt7awNZs4mFc7M2KrHgFi3NggqfpvrGh I=;
X-IronPort-AV: E=Sophos;i="5.37,225,1488844800"; d="scan'208";a="415190561"
Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Apr 2017 15:36:18 +0000
Received: from [10.24.16.81] ([10.24.16.81]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id v3KFaGhV025799; Thu, 20 Apr 2017 15:36:17 GMT
To: Jared Mauch <jared@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net>
Cc: John G Scudder <jgs@juniper.net>, idr@ietf.org, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com>
Date: Thu, 20 Apr 2017 08:36:17 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/yaGy6K7VqlqAOEYh6jx9lnB0hIo>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 15:36:21 -0000

Hi, Jared:

If it is not obvious, let me state the I participate in IDR WG as an individual
contributor, just like you do I suppose.

Let me rephrase what I said, for a code base with a large and diverse customer base
I do not foresee any possibility for the default behavior change in this case. Again
please treat it as my personal opinion.

I am certainly aware of other cases where the default behavior has been changed. But
this one is different.  This case seems similar to the default behavior ("permit" or
"deny") for an empty ACL.  Once the "permit" or "deny" is set in the code and is
widely deployed for a long time, it is just not possible to make the switch between
"permit" and "deny".

Regards,  -- Enke

On 4/20/17 6:41 AM, Jared Mauch wrote:
> 
>> On Apr 19, 2017, at 6:53 PM, Enke Chen <enkechen@cisco.com> wrote:
>>
>> Hi, Folks:
>>
>> The document defines or changes the "default behavior" for EBGP.  However, the default
>> behavior for a particular code base or release was set long time ago, and in some cases
>> more than 20 years ago. To avoid breaking existing deployment in this case, the default
>> behavior in the code can not be changed (with or without this document). Then it becomes
>> a deployment practice for the policies to be configured.
>>
>> So it seems to me that "Standard Track" may not be the right classification for this
>> document.  "Deployment recommendation or Practice" might be more appropriate.
> 
> Please see my other thread on this topic.
> 
> I’m disappointed to see Cisco coming out for BGP insecurity.
> 
> - Jared
> 
>>
>> Thanks.  -- Enke
>>
>> On 4/19/17 9:49 AM, John G. Scudder wrote:
>>> IDR folks,
>>>
>>> As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has completed GROW WGLC and is now in IETF LC.
>>>
>>> As nobody other than Alvaro noticed (thank you for noticing, Alvaro!) draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that it mandates what a BGP implementation MUST do. See section 2 of the draft for the details. It's short and easy to read.
>>>
>>> If we had noticed this earlier, we would have either chosen to home the document in IDR, or explicitly made an exception to have GROW do the work. Given that we didn't, though, the plan is to continue progressing the draft as a GROW document. However:
>>>
>>> - As I understand it, the authors will add the Updates: 4271 header in addition to potentially taking in other comments from AD review.
>>> - If anyone has a strong objection to the unusual procedure, please say so (either on-list, or to the chairs + AD).
>>> - Please send any last call comments to the IETF LC (see below) although it's also OK to discuss here on the IDR list of course.
>>>
>>> Many IDR participants are also active in GROW and have had their say, but if you haven't, now's your chance.
>>>
>>> Thanks,
>>>
>>> --John
>>>
>>>> Begin forwarded message:
>>>>
>>>> From: The IESG <iesg-secretary@ietf.org>
>>>> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
>>>> Date: April 18, 2017 at 5:16:05 PM EDT
>>>> To: "IETF-Announce" <ietf-announce@ietf.org>
>>>> Cc: grow-chairs@ietf.org, grow@ietf.org, draft-ietf-grow-bgp-reject@ietf.org, christopher.morrow@gmail.com
>>>> Reply-To: ietf@ietf.org
>>>>
>>>>
>>>> The IESG has received a request from the Global Routing Operations WG
>>>> (grow) to consider the following document:
>>>> - 'Default EBGP Route Propagation Behavior Without Policies'
>>>> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>>>>
>>>> The IESG plans to make a decision in the next few weeks, and solicits
>>>> final comments on this action. Please send substantive comments to the
>>>> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments may be
>>>> sent to iesg@ietf.org instead. In either case, please retain the
>>>> beginning of the Subject line to allow automated sorting.
>>>>
>>>> Abstract
>>>>
>>>> This document defines the default behavior of a BGP speaker when
>>>> there is no import or export policy associated with an External BGP
>>>> session.
>>>>
>>>>
>>>> The file can be obtained via
>>>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>>>>
>>>> IESG discussion can be tracked via
>>>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>>>>
>>>> This IETF LC, which originally concluded on 2017-04-18, is being 
>>>> extended to allow for additional input to be provided. Ops AD (for GROW) 
>>>> and Routing AD (for IDR) wish to ensure that cross WG discussions have 
>>>> had a chance to occur.
>>>>
>>>> No IPR declarations have been submitted directly on this I-D.
>>>
>>> _______________________________________________
>>> Idr mailing list
>>> Idr@ietf.org
>>> https://www.ietf.org/mailman/listinfo/idr
>>>
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
> 


From nobody Thu Apr 20 08:41:57 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B27113149E for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:41:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, RCVD_IN_SORBS_SPAM=0.5] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QRVf5PO7eg3m for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:41:53 -0700 (PDT)
Received: from mail-wr0-f172.google.com (mail-wr0-f172.google.com [209.85.128.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D64AE129AD2 for <idr@ietf.org>; Thu, 20 Apr 2017 08:41:46 -0700 (PDT)
Received: by mail-wr0-f172.google.com with SMTP id c55so38333274wrc.3 for <idr@ietf.org>; Thu, 20 Apr 2017 08:41:46 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=s3hqa1eDmoiIJpbgpy3Nru8aPp+H38i2CbD6fKL1dJs=; b=OZYdRVAfTQh6PGqDYORsqOpi+diDAPSIAlDn6lRnuu3DAjLG+0kWOj/8kYTJ012wpc suuRCl1WIHNBdh4EfThQ6kj7Wnh92OS9hPmWquMytQyPLinkPS3qdh8we/BblqeMNRcg SnXvSVmKL8CCBSYn8y8AC4Xb1GB8mqjjk3LzByE5WMrvaMJWLw+25YaTq9SVLTYgqnGZ UCAS1t7pRQMy4eOPHlItgIJGYoDDw+C03oFHYhYPQfpQB6jDgEkgoOnDRQK/49ZfiQUf RR589vCa5QXBjMtq1ojQZ/JcAepoVpGAoj/ik8x96hzZBLloeoMmri/LttNPZlcZlxR9 1Qsg==
X-Gm-Message-State: AN3rC/4PSEHopBb4l0GNQTZgqOfL2uevVue1g8yaff6dww9Sq6Ddvywh EwIKdhNxr1Jsxg==
X-Received: by 10.223.154.240 with SMTP id a103mr3348315wrc.5.1492702905154; Thu, 20 Apr 2017 08:41:45 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id i21sm8049245wrc.50.2017.04.20.08.41.42 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 08:41:43 -0700 (PDT)
Date: Thu, 20 Apr 2017 17:41:42 +0200
From: Job Snijders <job@ntt.net>
To: Enke Chen <enkechen@cisco.com>
Cc: Jared Mauch <jared@puck.nether.net>, Hares Susan <shares@ndzh.com>, idr@ietf.org
Message-ID: <20170420154142.lacvtplusepy3qcf@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/RUApekmQu5-0z-p4P6ZSY90Raoc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 15:41:55 -0000

On Thu, Apr 20, 2017 at 08:36:17AM -0700, Enke Chen wrote:
> If it is not obvious, let me state the I participate in IDR WG as an
> individual contributor, just like you do I suppose.
> 
> Let me rephrase what I said, for a code base with a large and diverse
> customer base I do not foresee any possibility for the default
> behavior change in this case. Again please treat it as my personal
> opinion.
> 
> I am certainly aware of other cases where the default behavior has
> been changed. But this one is different.  This case seems similar to
> the default behavior ("permit" or "deny") for an empty ACL.  Once the
> "permit" or "deny" is set in the code and is widely deployed for a
> long time, it is just not possible to make the switch between "permit"
> and "deny".

You say "it is not possible", however there are examples where it turned
out to be possible. At least one implementer confirmed on this list that
they plan to change their default.

Perhaps, "impossible" should be phrased as "unwilling".

Kind regards,

Job


From nobody Thu Apr 20 08:57:12 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36B79129513 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:57:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aPsAU-CiwCCL for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:57:08 -0700 (PDT)
Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A967C129494 for <idr@ietf.org>; Thu, 20 Apr 2017 08:57:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1540; q=dns/txt; s=iport; t=1492703828; x=1493913428; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=bCuxRCalFv2tD5xE5aWtBgikvED7d3NQoHVagIz9j5Q=; b=mhrU859/dZfg0ECleGuEarKaVVaZK1p6uWiQgfU32CFb63w2Gz+H5MdN YbOijG324cIRnELiHnq8Ca1x+blZY3SAr9+zeHdUngXQSvb/Ar8h6L3Nm FHSoX5LuzBnBv5gHBwAlxmlebvOIqUHrLbUeblLQdCyWR/W8gG/yeOWMg g=;
X-IronPort-AV: E=Sophos;i="5.37,225,1488844800"; d="scan'208";a="412202619"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Apr 2017 15:57:08 +0000
Received: from [10.24.16.81] ([10.24.16.81]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v3KFv7dt029812; Thu, 20 Apr 2017 15:57:07 GMT
To: Job Snijders <job@ntt.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net>
Cc: Jared Mauch <jared@puck.nether.net>, Hares Susan <shares@ndzh.com>, idr@ietf.org, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <b57162ec-f806-6e86-7713-58608f72c468@cisco.com>
Date: Thu, 20 Apr 2017 08:57:07 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <20170420154142.lacvtplusepy3qcf@hanna.meerval.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/J1G9JNm0P2rbb-qCqJ_u1bLqKLE>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 15:57:10 -0000

Job,

It depends on the customer base and also how long the software has been deployed.
Just think about the scenario that a large number of customers would lose network
connectivity unexpectedly due to a default behavior change in the code. Such outages
could keep happening to different customers for years to come.

Perhaps, changing "impossible" to "impractical" :-)

Regards,  -- Enke

On 4/20/17 8:41 AM, Job Snijders wrote:
> On Thu, Apr 20, 2017 at 08:36:17AM -0700, Enke Chen wrote:
>> If it is not obvious, let me state the I participate in IDR WG as an
>> individual contributor, just like you do I suppose.
>>
>> Let me rephrase what I said, for a code base with a large and diverse
>> customer base I do not foresee any possibility for the default
>> behavior change in this case. Again please treat it as my personal
>> opinion.
>>
>> I am certainly aware of other cases where the default behavior has
>> been changed. But this one is different.  This case seems similar to
>> the default behavior ("permit" or "deny") for an empty ACL.  Once the
>> "permit" or "deny" is set in the code and is widely deployed for a
>> long time, it is just not possible to make the switch between "permit"
>> and "deny".
> 
> You say "it is not possible", however there are examples where it turned
> out to be possible. At least one implementer confirmed on this list that
> they plan to change their default.
> 
> Perhaps, "impossible" should be phrased as "unwilling".
> 
> Kind regards,
> 
> Job
> 


From nobody Thu Apr 20 08:59:05 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60C5A129513 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:59:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1j7UUc-4Wrzb for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:59:01 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [IPv6:2001:418:3f4::5]) by ietfa.amsl.com (Postfix) with ESMTP id 7D82E129AF6 for <idr@ietf.org>; Thu, 20 Apr 2017 08:58:58 -0700 (PDT)
Received: by puck.nether.net (Postfix, from userid 162) id 30C27540DFC; Thu, 20 Apr 2017 11:58:58 -0400 (EDT)
Date: Thu, 20 Apr 2017 11:58:58 -0400
From: Jared Mauch <jared@puck.Nether.net>
To: Enke Chen <enkechen@cisco.com>
Cc: Jared Mauch <jared@puck.nether.net>, John G Scudder <jgs@juniper.net>, idr@ietf.org, Hares Susan <shares@ndzh.com>
Message-ID: <20170420155858.GA15676@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com>
User-Agent: Mutt/1.8.0 (2017-02-23)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/ZI0ZsUouOMoL8RqB__ZRnVD-Blc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 15:59:03 -0000

On Thu, Apr 20, 2017 at 08:36:17AM -0700, Enke Chen wrote:
> Hi, Jared:
> 
> If it is not obvious, let me state the I participate in IDR WG as an individual
> contributor, just like you do I suppose.

	Of course.

	:-)

> Let me rephrase what I said, for a code base with a large and diverse customer base
> I do not foresee any possibility for the default behavior change in this case. Again
> please treat it as my personal opinion.
> 
> I am certainly aware of other cases where the default behavior has been changed. But
> this one is different.  This case seems similar to the default behavior ("permit" or
> "deny") for an empty ACL.  Once the "permit" or "deny" is set in the code and is
> widely deployed for a long time, it is just not possible to make the switch between
> "permit" and "deny".

	I think there is a very distinct issue here, I would of course love
for existing vendors to come in compliance with a "secure-by-default" strategy.
Many othr people with far more devices than BGP speakers have seen this
necessity and made the change, claiming that BGP is somehow unique or that
operators do not deserve this safety is inconsiderate.

	My intent isn't to update 4271, it's Alvaro that has raised that
spectre.

	Cisco (as an example) has many cases where defaults have changed,
the same is true of many pieces of software, either in development or after
deployment.  Sometimes thse are called bugs, sometimes a feature.

	I've outlind my recommendation of how I would like to see 
nvgen function work in Ciscos case, that these devices can simply
expose these defaults, just as config bits often are massively reordered
betwen even minor interims or rebuilds.

	If you take the line-by-line interpreted vs atomic model of
driving configuration, it is not possible to apply policy to a session before
the FSM starts running.  This is unsafe.

	I'm seeing the GROW WG advise what an operational safe default
practice is as there is no codified standard of the behavior.  Operators
value consistent behavior, and it's clear with much of the ongoing work
in IETF around standards based models that the vendors see value as well.

	I suspect many people in IDR have not seen a bank be MITM'ed
for months due to routing leakage.  They would say this must be the
intended policy of 'pass all'.

	With further BGP speakers coming online, we need to address
this technical debt that many of us bear the burden of.

	Re: the draft under discussion, did you look at any of the prior
versions of the text?  I suspect that many people have not.

The pre-GROW-WG text said:

https://tools.ietf.org/html/draft-mauch-bgp-reject-00

-- snip --
3.  Solution Requirements

   The following requirements apply to the solution described in this
   document:

   o  Software MUST NOT accept routes from an eBGP peer without an
      operator configuring a policy

   o  Software MUST NOT require a configuration directive to operate in
      this mode.

   o  Software MUST NOT send routes to an eBGP peer without an operator
      configuring a policy

   o  Software MUST provide protection from internal failures preventing
      the advertisement and acceptance of routes

   o  Software MAY provide a configuration option to disable this
      security capability.
-- snip --


After advisement of BGP implementors, and post-adoption it seemed
an implementor may require a pointer to actually when and how to
reject the routes, as this guidance was seen as unclear.

This is when section 3 was updated:

https://tools.ietf.org/html/draft-ietf-grow-bgp-reject-00

-- snip --
   o  Software MUST mark any routes from an eBGP peer as 'invalid' in
      the Adj-RIB-In, if no explicit policy was configured.
-- snip --

And eventually morphed into something that cited a Informative Reference
and gave detailed guidance:

https://tools.ietf.org/html/draft-ietf-grow-bgp-reject-05

-- snip --

   o  A BGP speaker MUST consider any routes advertised by an EBGP peer
      ineligible for route selection (section 9.1.1 [RFC4271]), if no
      import policy was configured for the peer.

-- snip --

Is one of these previous iterations of the text more acceptable to you
or the IDR WG?

	- Jared

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


From nobody Thu Apr 20 09:07:39 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E774B129487 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 09:07:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ToqaReg4ZEo for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 09:07:36 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [IPv6:2001:418:3f4::5]) by ietfa.amsl.com (Postfix) with ESMTP id 80250127871 for <idr@ietf.org>; Thu, 20 Apr 2017 09:07:36 -0700 (PDT)
Received: by puck.nether.net (Postfix, from userid 162) id 0E71E540D51; Thu, 20 Apr 2017 12:07:36 -0400 (EDT)
Date: Thu, 20 Apr 2017 12:07:36 -0400
From: Jared Mauch <jared@puck.Nether.net>
To: Enke Chen <enkechen@cisco.com>, aretana@cisco.com
Cc: Job Snijders <job@ntt.net>, Jared Mauch <jared@puck.nether.net>, Hares Susan <shares@ndzh.com>, idr@ietf.org
Message-ID: <20170420160736.GB15676@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <b57162ec-f806-6e86-7713-58608f72c468@cisco.com>
User-Agent: Mutt/1.8.0 (2017-02-23)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/QVjVE3aH-kGlcsY73gSYjCIT26o>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 16:07:38 -0000

On Thu, Apr 20, 2017 at 08:57:07AM -0700, Enke Chen wrote:
> Job,
> 
> It depends on the customer base and also how long the software has been deployed.
> Just think about the scenario that a large number of customers would lose network
> connectivity unexpectedly due to a default behavior change in the code. Such outages
> could keep happening to different customers for years to come.
> 
> Perhaps, changing "impossible" to "impractical" :-)

	I'd like to call it well-considered. :-)

	I'm operating a network with Juniper, NX-OS, IOS-XR, IOS-Classic, IOS-XE,
and various implementations that require custom policy to be implemented.

	There can be a path forward plotted that would prevent currently
deployed people from having issues, we're surely bright enough to do that.

	To make it clear: I don't want to break someones routers.

	I do want to make it harder for someone to leak a table when they
have a new router.

	I don't belive the bar should be high, it can be embedded in whatever
configuration/ZTP/automation/cut+paste template out there.  It could come
in the form of yang over netconf, or a DHCPv6/DHCPv4 option.  It could
come from a TXT record in DNS, or wahtever configuration method the vendor
invents that is new and unimagined by th WG today.

	I don't feel it requires updating 4271 to attain that goal, it's
clear implementors have seen a path to do this today without having
a concern with 4271, and I believe that Alvaro is wrong in the presumption
this document updates 4271.  (I'm also willing to be told that I'm too rough
for consensus :-).

	- Jared

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


From nobody Thu Apr 20 09:43:21 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4238E129AF6 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 09:43:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.699
X-Spam-Level: 
X-Spam-Status: No, score=-4.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vDSE7BbaXxjg for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 09:43:18 -0700 (PDT)
Received: from mail-wr0-f178.google.com (mail-wr0-f178.google.com [209.85.128.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B03A112422F for <idr@ietf.org>; Thu, 20 Apr 2017 09:43:18 -0700 (PDT)
Received: by mail-wr0-f178.google.com with SMTP id z109so39481216wrb.1 for <idr@ietf.org>; Thu, 20 Apr 2017 09:43:18 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=zlzozVXMQHZE2/Y9IsGNtgPuTETEkFYRIxMCTdIC3Uk=; b=XnBTrVIeZTzDXgq7jZYuIx2s33cTX5DRLKNlizxbsiXC864hm1NKea9H+WU0P6YyCP DvsOhKhyVXl89OCPwMV6wbHCWtJ55rYXV6Ovbq0VEJGOn8yaxdLk4s1axWO5AaKR/ctD V66U0dShVBjNXmBYhXnP9eAJnqOR94x/ZKSXOZx1bktElUx+2omIkJfpemR0sUP4TnhP FCasDB6srj0ZzfDjJprwENDWaee1VmLrEqtJ65n2tAMqUZwneb1v8JfcKGX9muu0YbMV u9j4lrDhyKZYb6ciGbz2EaBzq66UWX4LDMnZjdcz60DfEIchhqZOTqyxYr5oWHv74I7a Eqaw==
X-Gm-Message-State: AN3rC/4mswQQGPS9DU91MkON5aX/4RB1nZZL0uQBiJiQFNDuOXINFtgH XgiSWCdbSTmMjtpbW1M=
X-Received: by 10.223.155.134 with SMTP id d6mr8153093wrc.113.1492706596974; Thu, 20 Apr 2017 09:43:16 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id i144sm8708767wmf.13.2017.04.20.09.43.15 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 09:43:15 -0700 (PDT)
Date: Thu, 20 Apr 2017 18:43:14 +0200
From: Job Snijders <job@ntt.net>
To: Enke Chen <enkechen@cisco.com>
Cc: idr@ietf.org, Hares Susan <shares@ndzh.com>
Message-ID: <20170420164314.av26kcxvxglg4oet@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <b57162ec-f806-6e86-7713-58608f72c468@cisco.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/L2RnbwnCe7ZvqhaIV9BtygIFIJ4>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 16:43:20 -0000

On Thu, Apr 20, 2017 at 08:57:07AM -0700, Enke Chen wrote:
> It depends on the customer base and also how long the software has
> been deployed. Just think about the scenario that a large number of
> customers would lose network connectivity unexpectedly due to a
> default behavior change in the code. Such outages could keep happening
> to different customers for years to come.

If these outages occur, they'll be quickly remedied since the service is
down, which provides incentive to either roll back or deploy a fix.  We
call this "fail hard". However, it is a failure mode that is
preventable, and vendors have a big role in this.

This outage only occurs if and only if there a sequence of process
errors that together are a cascading failure: e.g. absolutely no reading
or reviewing of the release notes by anyone in the organisation, no
taking heed of prior notifications (through for instance operational
mailing lists or customer/vendor meetings), no testing, and no staggered
canary deployment, all of this on top of reliance on the operating
system's default (whatever it may be) when there is no policy configured
for the EBGP peer. 

Why would anyone download a new software if one are not going to read
the release notes? Why would one upgrade a software if one does not know
what it will do? Any problems will be self-inflicted, and easy to remedy
by rolling back or configuring a policy.

Your perceived risk, which can be managed, does not legitimize a
continuation of inconsistent or insecure behaviour.

Kind regards,

Job


From nobody Thu Apr 20 09:47:20 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECEBC13147F for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 09:47:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level: 
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ksEtUgP7KZ0j for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 09:47:17 -0700 (PDT)
Received: from relais-inet.orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C88C129B08 for <idr@ietf.org>; Thu, 20 Apr 2017 09:47:17 -0700 (PDT)
Received: from opfednr01.francetelecom.fr (unknown [xx.xx.xx.65]) by opfednr23.francetelecom.fr (ESMTP service) with ESMTP id B36E6C03D0; Thu, 20 Apr 2017 18:47:15 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.21]) by opfednr01.francetelecom.fr (ESMTP service) with ESMTP id 6E9291A0064; Thu, 20 Apr 2017 18:47:15 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM6C.corporate.adroot.infra.ftgroup ([fe80::d9f5:9741:7525:a199%18]) with mapi id 14.03.0319.002; Thu, 20 Apr 2017 18:47:15 +0200
From: <bruno.decraene@orange.com>
To: Jared Mauch <jared@puck.Nether.net>
CC: "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>, "aretana@cisco.com" <aretana@cisco.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSufA5Fx6qnNOc8UaJCUOYEKex/KHOdQgQ
Date: Thu, 20 Apr 2017 16:47:14 +0000
Message-ID: <28100_1492706835_58F8E613_28100_2329_1_53C29892C857584299CBF5D05346208A31CC1989@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net>
In-Reply-To: <20170420160736.GB15676@puck.nether.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/5Tv49elEpkbAbRPsbpw93Ce67ZY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 16:47:19 -0000

Jared,

> From: Jared Mauch > Sent: Thursday, April 20, 2017 6:08 PM
>=20
 > On Thu, Apr 20, 2017 at 08:57:07AM -0700, Enke Chen wrote:
 > > Job,
 > >
 > > It depends on the customer base and also how long the software has bee=
n deployed.
 > > Just think about the scenario that a large number of customers would l=
ose network
 > > connectivity unexpectedly due to a default behavior change in the code=
. Such outages
 > > could keep happening to different customers for years to come.
 > >
 > > Perhaps, changing "impossible" to "impractical" :-)
 >=20
 > 	I'd like to call it well-considered. :-)
 >=20
 > 	I'm operating a network with Juniper, NX-OS, IOS-XR, IOS-Classic, IOS-X=
E,
 > and various implementations that require custom policy to be implemented.
 >=20
 > 	There can be a path forward plotted that would prevent currently
 > deployed people from having issues, we're surely bright enough to do tha=
t.
 >=20
 > 	To make it clear: I don't want to break someones routers.
 >=20
 > 	I do want to make it harder for someone to leak a table when they
 > have a new router.

Have you considered starting solving this issue with yang model? Although t=
his is more long term, this should be the target/long term solution and hen=
ce this has a significant value. Also the installed based is smaller so cha=
nge would be easier. And finally, this probably natively only applies to ne=
w EBGP sessions, i.e. would not affect existing deployed based.
e.g. the (mandatory) default import/export policy would be to filter all ro=
utes.=20
=20
Regards,
--Bruno (just trying to propose something, feel free to ignore)

 > 	I don't belive the bar should be high, it can be embedded in whatever
 > configuration/ZTP/automation/cut+paste template out there.  It could come
 > in the form of yang over netconf, or a DHCPv6/DHCPv4 option.  It could
 > come from a TXT record in DNS, or wahtever configuration method the vend=
or
 > invents that is new and unimagined by th WG today.
 >=20
 > 	I don't feel it requires updating 4271 to attain that goal, it's
 > clear implementors have seen a path to do this today without having
 > a concern with 4271, and I believe that Alvaro is wrong in the presumpti=
on
 > this document updates 4271.  (I'm also willing to be told that I'm too r=
ough
 > for consensus :-).
 >=20
 > 	- Jared
 >=20
 > --
 > Jared Mauch  | pgp key available via finger from jared@puck.nether.net
 > clue++;      | http://puck.nether.net/~jared/  My statements are only mi=
ne.
 >=20
 > _______________________________________________
 > Idr mailing list
 > Idr@ietf.org
 > https://www.ietf.org/mailman/listinfo/idr

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Thu Apr 20 09:51:12 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 938B1129ADC for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 09:51:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QC7HbLXCKbc2 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 09:51:09 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C64101314A3 for <idr@ietf.org>; Thu, 20 Apr 2017 09:50:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1875; q=dns/txt; s=iport; t=1492707055; x=1493916655; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=GNCx6COgTsqgb6uy+dI1eEnxXvyBELd8hD2hINOL82E=; b=hHK6pgUnnpmhXuSNfioISdVZ9Q1KJBMFMl61ydJQAJ0oOaJVvkT+w5ZS NBG4hZCfICTOxI7SyUcZEKqyQE80DA8FdwHR9cAqcIxqXekL879DSq10P OgLRv3Z3ViZatC6sU+YegTg4UeZjUKYeavwr6XvmEzBgGb2DLHGXUq3Pv M=;
X-IronPort-AV: E=Sophos;i="5.37,225,1488844800"; d="scan'208";a="413403265"
Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Apr 2017 16:50:55 +0000
Received: from [10.24.16.81] ([10.24.16.81]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id v3KGoske013295; Thu, 20 Apr 2017 16:50:55 GMT
To: Job Snijders <job@ntt.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420164314.av26kcxvxglg4oet@hanna.meerval.net>
Cc: idr@ietf.org, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <3b681e50-bf6d-df75-eb61-86be79a2fbb8@cisco.com>
Date: Thu, 20 Apr 2017 09:50:53 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <20170420164314.av26kcxvxglg4oet@hanna.meerval.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/kvc24gJD6wgJbF9gOfcQYAmxj18>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 16:51:10 -0000

Job,

My personal opinion:

Vendors are *not* in the business of intentionally creating network outages :-)
Those that do may not stay in the business for long :-)

Regards,  -- Enke 

On 4/20/17 9:43 AM, Job Snijders wrote:
> On Thu, Apr 20, 2017 at 08:57:07AM -0700, Enke Chen wrote:
>> It depends on the customer base and also how long the software has
>> been deployed. Just think about the scenario that a large number of
>> customers would lose network connectivity unexpectedly due to a
>> default behavior change in the code. Such outages could keep happening
>> to different customers for years to come.
> 
> If these outages occur, they'll be quickly remedied since the service is
> down, which provides incentive to either roll back or deploy a fix.  We
> call this "fail hard". However, it is a failure mode that is
> preventable, and vendors have a big role in this.
> 
> This outage only occurs if and only if there a sequence of process
> errors that together are a cascading failure: e.g. absolutely no reading
> or reviewing of the release notes by anyone in the organisation, no
> taking heed of prior notifications (through for instance operational
> mailing lists or customer/vendor meetings), no testing, and no staggered
> canary deployment, all of this on top of reliance on the operating
> system's default (whatever it may be) when there is no policy configured
> for the EBGP peer. 
> 
> Why would anyone download a new software if one are not going to read
> the release notes? Why would one upgrade a software if one does not know
> what it will do? Any problems will be self-inflicted, and easy to remedy
> by rolling back or configuring a policy.
> 
> Your perceived risk, which can be managed, does not legitimize a
> continuation of inconsistent or insecure behaviour.
> 
> Kind regards,
> 
> Job
> 


From nobody Thu Apr 20 09:58:03 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B483E1279EB for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 09:58:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.419
X-Spam-Level: 
X-Spam-Status: No, score=-1.419 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12Kq-TXHTANZ for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 09:58:01 -0700 (PDT)
Received: from mail-wm0-f46.google.com (mail-wm0-f46.google.com [74.125.82.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADCCF127078 for <idr@ietf.org>; Thu, 20 Apr 2017 09:58:01 -0700 (PDT)
Received: by mail-wm0-f46.google.com with SMTP id w64so108963799wma.0 for <idr@ietf.org>; Thu, 20 Apr 2017 09:58:01 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=ANG6lccjIAmlY3MA2ubhK5qTsbD0QzOYSI44P/brc6s=; b=mGuF2NBSKWJaD8oSLY+r2gVlCnWU+19EUsyotR5HyoGA6lOKnxXPh6wAOKcUV4eG/d SzvqJnKqSgaE1ODg+9iNYIuQcMyS9XrtvOUUtEZYiWz5cFBmO7AA7WupQgmoHM07Xd7v Pydac4fXVnoBXTiAmB/oqMlTkX1UDGpNiSSKS7V/ZHngpeysDM1TYIcYJr2MltYpcQlP FzlGYkJQojQvhR5b68cmOkQ6Sn4xRzyvKETTTXigkH46jlKIvyOhkBbeR1VBatUpJkW4 oKQU7Mq+2WzXsli7MQgH3esQfL69/HISFykzvapKxCXoBW3H4faDTNjaq+TLSNSuHb4U dLiA==
X-Gm-Message-State: AN3rC/6Dlw9NavC5iHmLFk7oKm7k3HzcMeNBDcPdQ59SbGLVXd6PBHRM 85n+3/udJtHN9w==
X-Received: by 10.28.71.132 with SMTP id m4mr2018689wmi.130.1492707480022; Thu, 20 Apr 2017 09:58:00 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:4cc4:bdef:de0c:32e0]) by smtp.gmail.com with ESMTPSA id e129sm24363595wma.13.2017.04.20.09.57.58 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2017 09:57:58 -0700 (PDT)
Date: Thu, 20 Apr 2017 18:57:57 +0200
From: Job Snijders <job@ntt.net>
To: Enke Chen <enkechen@cisco.com>
Cc: idr@ietf.org, Hares Susan <shares@ndzh.com>
Message-ID: <20170420165757.safd32x2xu5awwxp@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420164314.av26kcxvxglg4oet@hanna.meerval.net> <3b681e50-bf6d-df75-eb61-86be79a2fbb8@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <3b681e50-bf6d-df75-eb61-86be79a2fbb8@cisco.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/VEx2vqUE6e2pUNnM6x1Ub08jU1Y>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 16:58:03 -0000

On Thu, Apr 20, 2017 at 09:50:53AM -0700, Enke Chen wrote:
> My personal opinion:
> 
> Vendors are *not* in the business of intentionally creating network outages :-)
> Those that do may not stay in the business for long :-)

You could also argue, that by not implementing the bgp-reject guidance,
a vendor intentionally creates outages which result from inadvertent
propagation of full routing tables.

If a vendor implements bgp-reject, the customers enjoy mitigation of the
risk of hitting the timer penalty on a 'maximum prefix reached'
shutdown, or perhaps someone configured their router to not
automatically re-enable the session after maximum-prefix is hit, in this
case the outage prolongs.

If you are committed to preventing outages, implementing bgp-reject
seems the right thing to do.

Kind regards,

Job


From nobody Thu Apr 20 10:08:53 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2305129B26 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 10:08:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 28m2TwZH59Qy for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 10:08:51 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BFA57129B2F for <idr@ietf.org>; Thu, 20 Apr 2017 10:08:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=986; q=dns/txt; s=iport; t=1492708131; x=1493917731; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=18Z578DiixUI68Rd5uryJV7ARZ5YbaR+PmFjVhHuZpg=; b=hjhSuN3HQWGxqE+TxrEpadmVFAMpV6kx0gMaGX3rERl6z5gLZxkkFxLe zyqWhoqxfuOKNIML7pgAhMgDXq4klXec4gRvVM+6ngHU+kA3KBhO1y0Kl Wl0VuA5Ze1HpifXUYBKMWdaf8X2UXTrNhOLMRj8WLJiNFOgnKPmTu/Vze Y=;
X-IronPort-AV: E=Sophos;i="5.37,225,1488844800"; d="scan'208";a="413412595"
Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Apr 2017 17:08:51 +0000
Received: from [10.24.16.81] ([10.24.16.81]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v3KH8oRx000594; Thu, 20 Apr 2017 17:08:50 GMT
To: Job Snijders <job@ntt.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420164314.av26kcxvxglg4oet@hanna.meerval.net> <3b681e50-bf6d-df75-eb61-86be79a2fbb8@cisco.com> <20170420165757.safd32x2xu5awwxp@hanna.meerval.net>
Cc: idr@ietf.org, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <b8b4f2ad-d32d-8e08-d254-5c596e82e1d4@cisco.com>
Date: Thu, 20 Apr 2017 10:08:50 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <20170420165757.safd32x2xu5awwxp@hanna.meerval.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/tOddAKUmO43CWKbtTK43kElPRJY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 17:08:53 -0000

Job,

I have nothing new to add :-(

Regards,  -- Enke

On 4/20/17 9:57 AM, Job Snijders wrote:
> On Thu, Apr 20, 2017 at 09:50:53AM -0700, Enke Chen wrote:
>> My personal opinion:
>>
>> Vendors are *not* in the business of intentionally creating network outages :-)
>> Those that do may not stay in the business for long :-)
> 
> You could also argue, that by not implementing the bgp-reject guidance,
> a vendor intentionally creates outages which result from inadvertent
> propagation of full routing tables.
> 
> If a vendor implements bgp-reject, the customers enjoy mitigation of the
> risk of hitting the timer penalty on a 'maximum prefix reached'
> shutdown, or perhaps someone configured their router to not
> automatically re-enable the session after maximum-prefix is hit, in this
> case the outage prolongs.
> 
> If you are committed to preventing outages, implementing bgp-reject
> seems the right thing to do.
> 
> Kind regards,
> 
> Job
> 


From nobody Thu Apr 20 10:15:14 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4D05129ADC for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 10:15:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Cbo-qDexogrd for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 10:15:11 -0700 (PDT)
Received: from mail-io0-x22f.google.com (mail-io0-x22f.google.com [IPv6:2607:f8b0:4001:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16E66129AD4 for <idr@ietf.org>; Thu, 20 Apr 2017 10:15:11 -0700 (PDT)
Received: by mail-io0-x22f.google.com with SMTP id k87so78896431ioi.0 for <idr@ietf.org>; Thu, 20 Apr 2017 10:15:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=oQ79CQYaQwx9Mgw0cNn5LHsAZslW01tJ6Hh/iYPxFPc=; b=iYPLDzuMtdecp07bjQsV9C10k+sgEXTHneSXTgAOiScgZsISygz6tMBQQVOri8M8Ui O5VUkOLsQY1mCGyLcDR7Ynegwzt+3Lzh7j7z4KB13zsbYMwul3F3BHYrgtGP5WQaOTiS Y0Nt6qnU5Cca2SsKSXmBkNm+Qqyk3OK5A08bj7ETRc/1Uz3K7V+uvXoOzCT5LutcDGot 2A7GsWDBBBh//HkTB+i4wFZchfBrvm6bT2NWq9MT72HWzVkjmG3YdUGhLaL7nIX2CRi/ mY7px8pi1sHSu0ahCkK3t3ma8A1K9HZq1lM85Jb33QLi3s777TcYM4U1kgrPiXZKCXzY mSZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=oQ79CQYaQwx9Mgw0cNn5LHsAZslW01tJ6Hh/iYPxFPc=; b=U9IwSn294GYQw/Od7oA13yleT7o0gNRpyujF0i+TUpRfA04eUzDc3secJEcDn55JKX vnKacxPPE1JxjH8W4AMe7qRRpUJN725OEF/X8Igao08gXVaPrj7I+3u1f7twQruhObmz 4F+Wp7+Qegkdg0rDuVCLpwOJsBqfm6FCks36RRkiut4lfNjdz3f33ADUlwHYYQc4l1ly Dm6ZOMqra8bxdB0ht4Gnbu4vxj5Xyi5jkpZ6fwaG248j9Vtrkq7xhGXv312unKuAKvzX uLYxaowStpivJa8ZhUeu6azLV/wBCSD0EiZgk1C7iaMVVT0McgHFTiYH1H9GMivcRPbm 5jRA==
X-Gm-Message-State: AN3rC/62ywCeFc97ogUDDgygPGqbqtvfm9wF0DGcA3TYVO+6QyCLRU2b Ibbe4T6GJToldXCipjpzZQxx9R9Hlg==
X-Received: by 10.107.33.135 with SMTP id h129mr11207085ioh.57.1492708508783;  Thu, 20 Apr 2017 10:15:08 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Thu, 20 Apr 2017 10:15:07 -0700 (PDT)
In-Reply-To: <20170420165757.safd32x2xu5awwxp@hanna.meerval.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420164314.av26kcxvxglg4oet@hanna.meerval.net> <3b681e50-bf6d-df75-eb61-86be79a2fbb8@cisco.com> <20170420165757.safd32x2xu5awwxp@hanna.meerval.net>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 20 Apr 2017 19:15:07 +0200
X-Google-Sender-Auth: hpbpiGDnzqrqwseDEmyOrRI7dNI
Message-ID: <CA+b+ER=4gRPGf6rZRvwmB8SX51Pfq5CDQE3p2z=2akFRdettLg@mail.gmail.com>
To: Job Snijders <job@ntt.net>
Cc: Enke Chen <enkechen@cisco.com>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Type: multipart/alternative; boundary=001a1140f5e86b74e8054d9c4899
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/2GAfUeJ4McAYG8P8wcqV7Hb3icQ>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 17:15:13 -0000

--001a1140f5e86b74e8054d9c4899
Content-Type: text/plain; charset=UTF-8

Job,

Enke observed a difference between operational outages and vendor
implementation caused outages. Those are different things so I suggest to
separate them.

But as I pointed out two ways already it is doable to implement it in a way
that outage will not happen even if someone would never read release notes
and upgrade routers via web gui with new OS.

So instead this ping pong how about we focus on point what constitutes a
policy and what you expect associated behavior of complaint implementation
to be.  I asked that already but your answer that you left it loosely
defined does not seems good enough for the spec implementer.

*A* Must it be per neighbor ? Can it be per VRF/table/bRIB  ?

*B* Does enabling BGP Origin Validation should be considered as such policy
or not ?

*C* Should received routes still reside in Adj_RIB_In ? Should BMP still
send all routes to collector even if those would be considered not
complaint with RFC ?

*D* If we do eBGP auto discovery in IX env of peers would that overwrite
such RFC ?

*E* If someone does LLDP based eBGP peer discovery on p2p would that also
be exempt from such enforcement ?

Thx a lot,
Robert.


On Thu, Apr 20, 2017 at 6:57 PM, Job Snijders <job@ntt.net> wrote:

> On Thu, Apr 20, 2017 at 09:50:53AM -0700, Enke Chen wrote:
> > My personal opinion:
> >
> > Vendors are *not* in the business of intentionally creating network
> outages :-)
> > Those that do may not stay in the business for long :-)
>
> You could also argue, that by not implementing the bgp-reject guidance,
> a vendor intentionally creates outages which result from inadvertent
> propagation of full routing tables.
>
> If a vendor implements bgp-reject, the customers enjoy mitigation of the
> risk of hitting the timer penalty on a 'maximum prefix reached'
> shutdown, or perhaps someone configured their router to not
> automatically re-enable the session after maximum-prefix is hit, in this
> case the outage prolongs.
>
> If you are committed to preventing outages, implementing bgp-reject
> seems the right thing to do.
>
> Kind regards,
>
> Job
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a1140f5e86b74e8054d9c4899
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Job,</div><div class=3D"gmail_default" =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div>=
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">Enke observed a difference between operational outages a=
nd vendor implementation caused outages. Those are different things so I su=
ggest to separate them.</div><div class=3D"gmail_default" style=3D"font-fam=
ily:arial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gma=
il_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small=
">But as I pointed out two ways already it is doable to implement it in a w=
ay that outage will not happen even if someone would never read release not=
es and upgrade routers via web gui with new OS.</div><div class=3D"gmail_de=
fault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br=
></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sa=
ns-serif;font-size:small">So instead this ping pong how about we focus on p=
oint what constitutes a policy and what you expect associated behavior of c=
omplaint implementation to be.=C2=A0 I asked that already but your answer t=
hat you left it loosely defined does not seems good enough for the spec imp=
lementer.</div><div class=3D"gmail_default" style=3D"font-family:arial,helv=
etica,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" st=
yle=3D"font-family:arial,helvetica,sans-serif;font-size:small">*A* Must it =
be per neighbor ? Can it be per VRF/table/bRIB =C2=A0? =C2=A0</div><div cla=
ss=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-s=
ize:small"><br></div><div class=3D"gmail_default" style=3D"font-family:aria=
l,helvetica,sans-serif;font-size:small">*B* Does enabling BGP Origin Valida=
tion should be considered as such policy or not ?=C2=A0</div><div class=3D"=
gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:sm=
all"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,helv=
etica,sans-serif;font-size:small">*C* Should received routes still reside i=
n Adj_RIB_In ? Should BMP still send all routes to collector even if those =
would be considered not complaint with RFC ?=C2=A0</div><div class=3D"gmail=
_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">=
<br></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica=
,sans-serif;font-size:small">*D* If we do eBGP auto discovery in IX env of =
peers would that overwrite such RFC ?=C2=A0</div><div class=3D"gmail_defaul=
t" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></d=
iv><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-s=
erif;font-size:small">*E* If someone does LLDP based eBGP peer discovery on=
 p2p would that also be exempt from such enforcement ?=C2=A0</div><div clas=
s=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-si=
ze:small"><br></div><div class=3D"gmail_default" style=3D"font-family:arial=
,helvetica,sans-serif;font-size:small">Thx a lot,</div><div class=3D"gmail_=
default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">R=
obert.</div><div class=3D"gmail_default" style=3D"font-family:arial,helveti=
ca,sans-serif;font-size:small"><br></div></div><div class=3D"gmail_extra"><=
br><div class=3D"gmail_quote">On Thu, Apr 20, 2017 at 6:57 PM, Job Snijders=
 <span dir=3D"ltr">&lt;<a href=3D"mailto:job@ntt.net" target=3D"_blank">job=
@ntt.net</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span cl=
ass=3D"">On Thu, Apr 20, 2017 at 09:50:53AM -0700, Enke Chen wrote:<br>
&gt; My personal opinion:<br>
&gt;<br>
&gt; Vendors are *not* in the business of intentionally creating network ou=
tages :-)<br>
&gt; Those that do may not stay in the business for long :-)<br>
<br>
</span>You could also argue, that by not implementing the bgp-reject guidan=
ce,<br>
a vendor intentionally creates outages which result from inadvertent<br>
propagation of full routing tables.<br>
<br>
If a vendor implements bgp-reject, the customers enjoy mitigation of the<br=
>
risk of hitting the timer penalty on a &#39;maximum prefix reached&#39;<br>
shutdown, or perhaps someone configured their router to not<br>
automatically re-enable the session after maximum-prefix is hit, in this<br=
>
case the outage prolongs.<br>
<br>
If you are committed to preventing outages, implementing bgp-reject<br>
seems the right thing to do.<br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
Kind regards,<br>
<br>
Job<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--001a1140f5e86b74e8054d9c4899--


From nobody Thu Apr 20 10:29:10 2017
Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E9E1129B31 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 10:29:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qgvNnzFmpdCq for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 10:29:07 -0700 (PDT)
Received: from mobil.space.net (mobil.space.net [IPv6:2001:608:2:81::67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 300B2129B26 for <idr@ietf.org>; Thu, 20 Apr 2017 10:29:06 -0700 (PDT)
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id 471F160A24 for <idr@ietf.org>; Thu, 20 Apr 2017 19:29:05 +0200 (CEST)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id F2FC8609A1; Thu, 20 Apr 2017 19:29:04 +0200 (CEST)
Received: by moebius4.space.net (Postfix, from userid 1007) id E325922E8D; Thu, 20 Apr 2017 19:29:04 +0200 (CEST)
Date: Thu, 20 Apr 2017 19:29:04 +0200
From: Gert Doering <gert@space.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: Job Snijders <job@ntt.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170420172904.GD25069@Space.Net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420164314.av26kcxvxglg4oet@hanna.meerval.net> <3b681e50-bf6d-df75-eb61-86be79a2fbb8@cisco.com> <20170420165757.safd32x2xu5awwxp@hanna.meerval.net> <CA+b+ER=4gRPGf6rZRvwmB8SX51Pfq5CDQE3p2z=2akFRdettLg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CA+b+ER=4gRPGf6rZRvwmB8SX51Pfq5CDQE3p2z=2akFRdettLg@mail.gmail.com>
X-NCC-RegID: de.space
User-Agent: Mutt/1.7.2 (2016-11-26)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/fwsAi3jfOrFQw8UFPuX4DWoUsJE>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 17:29:09 -0000

Hi,

On Thu, Apr 20, 2017 at 07:15:07PM +0200, Robert Raszuk wrote:
> *A* Must it be per neighbor ? Can it be per VRF/table/bRIB  ?

per neighbour, or per peer-group/neighbour-group

> *B* Does enabling BGP Origin Validation should be considered as such policy
> or not ?

certainly not for egress.

for ingress, it *is* a policy, so I'd see it as "good enough"

> *C* Should received routes still reside in Adj_RIB_In ? Should BMP still
> send all routes to collector even if those would be considered not
> complaint with RFC ?

I see this as an issue of minor importance.  Both approaches serve the
goal of avoiding to send or accept prefixes unless said activity is
enabled by policy.

> *D* If we do eBGP auto discovery in IX env of peers would that overwrite
> such RFC ?
> 
> *E* If someone does LLDP based eBGP peer discovery on p2p would that also
> be exempt from such enforcement ?

Both would be something that the box wouldn't do out of the box, so 
I would expect some sort of parent/inheritance config for IX/p2p 
magic config, which would be able to specify policy.

As such, *of course* eBGP sessions at IXPs or p2p to customers/peers/
upstreams, MUST follow the same rules: no policy = no prefixes.

Which is the whole point: do not leak full tables to any random peer, 
unless you *want* to do so - and if so, it must be turned ON.

Gert Doering
        -- Operator, having received his share of full-table leaks over time
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279


From nobody Thu Apr 20 10:37:01 2017
Return-Path: <job@ntt.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 182271314A3 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 10:37:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zw6mekC7FaEJ for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 10:36:58 -0700 (PDT)
Received: from mail3.dllstx09.us.to.gin.ntt.net (mail3.dllstx09.us.to.gin.ntt.net [IPv6:2001:418:3ff:5::26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 93C45129B3A for <idr@ietf.org>; Thu, 20 Apr 2017 10:36:54 -0700 (PDT)
Received: by mail3.dllstx09.us.to.gin.ntt.net with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from <job@ntt.net>) id 1d1G0k-0002QH-2u (job@us.ntt.net) for idr@ietf.org; Thu, 20 Apr 2017 17:36:54 +0000
Received: by mail-wr0-f172.google.com with SMTP id c55so40342570wrc.3 for <idr@ietf.org>; Thu, 20 Apr 2017 10:36:53 -0700 (PDT)
X-Gm-Message-State: AN3rC/7jlNGjtvD/at+FIWQyXZHvNvRO6EDPC6d3P54xz7b3geMxetXd rqPo4DOSva65VQL6TXLpv3Nojf8+zw==
X-Received: by 10.223.148.199 with SMTP id 65mr8539819wrr.37.1492709812694; Thu, 20 Apr 2017 10:36:52 -0700 (PDT)
MIME-Version: 1.0
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420164314.av26kcxvxglg4oet@hanna.meerval.net> <3b681e50-bf6d-df75-eb61-86be79a2fbb8@cisco.com> <20170420165757.safd32x2xu5awwxp@hanna.meerval.net> <CA+b+ER=4gRPGf6rZRvwmB8SX51Pfq5CDQE3p2z=2akFRdettLg@mail.gmail.com> <20170420172904.GD25069@Space.Net>
In-Reply-To: <20170420172904.GD25069@Space.Net>
From: Job Snijders <job@ntt.net>
Date: Thu, 20 Apr 2017 17:36:41 +0000
X-Gmail-Original-Message-ID: <CACWOCC-2HfeN4mANmXMxts_ReyR61Utey=pMTiyr9M6x72Q5Ag@mail.gmail.com>
Message-ID: <CACWOCC-2HfeN4mANmXMxts_ReyR61Utey=pMTiyr9M6x72Q5Ag@mail.gmail.com>
To: Gert Doering <gert@space.net>, Robert Raszuk <robert@raszuk.net>
Cc: Hares Susan <shares@ndzh.com>, Job Snijders <job@ntt.net>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=94eb2c0d2266238fca054d9c96fd
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/e9EncizFXG3ks5MoiXbK6rIvBi8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 17:37:00 -0000

--94eb2c0d2266238fca054d9c96fd
Content-Type: text/plain; charset=UTF-8

On Thu, 20 Apr 2017 at 19:29, Gert Doering <gert@space.net> wrote:

> On Thu, Apr 20, 2017 at 07:15:07PM +0200, Robert Raszuk wrote:
> > *A* Must it be per neighbor ? Can it be per VRF/table/bRIB  ?
>
> per neighbour, or per peer-group/neighbour-group



The purpose is per neighbor. Questioning this aspect makes me suspect you
might not grok the concept and problem space at all.


> *B* Does enabling BGP Origin Validation should be considered as such
> policy
> > or not ?
>
> certainly not for egress.
>
> for ingress, it *is* a policy, so I'd see it as "good enough"



BGP origin validation in itself is not a policy, but a database against
which you can lodge lookups. An operator has to configure the device to
drop or accept RPKI invalids. If the operator has formulated that policy
and associated it with the session, you have a policy.


> *C* Should received routes still reside in Adj_RIB_In ? Should BMP still
> > send all routes to collector even if those would be considered not
> > complaint with RFC ?
>


Alvaro suggested text to that extend.


> *D* If we do eBGP auto discovery in IX env of peers would that overwrite
> > such RFC ?



Why would it?

>

> *E* If someone does LLDP based eBGP peer discovery on p2p would that also
> > be exempt from such enforcement ?



Why would it?


Kind regards,

Job

--94eb2c0d2266238fca054d9c96fd
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div><div class=3D"gmail_quote"><div>On Thu, 20 Apr 2017 at 19:29, Gert Doe=
ring &lt;<a href=3D"mailto:gert@space.net" target=3D"_blank">gert@space.net=
</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:=
0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Thu, Apr 20, 201=
7 at 07:15:07PM +0200, Robert Raszuk wrote:<br>
&gt; *A* Must it be per neighbor ? Can it be per VRF/table/bRIB=C2=A0 ?<br>
<br>
per neighbour, or per peer-group/neighbour-group</blockquote><div><br></div=
><div><br></div><div>The purpose is per neighbor. Questioning this aspect m=
akes me suspect you might not grok the concept and problem space at all.=C2=
=A0</div><div><br></div><div><br></div><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">&gt; =
*B* Does enabling BGP Origin Validation should be considered as such policy=
<br>
&gt; or not ?<br>
<br>
certainly not for egress.<br>
<br>
for ingress, it *is* a policy, so I&#39;d see it as &quot;good enough&quot;=
</blockquote><div><br></div><div><br></div></div></div><div><div><div class=
=3D"gmail_quote"><div>BGP origin validation in itself is not a policy, but =
a database against which you can lodge lookups. An operator has to configur=
e the device to drop or accept RPKI invalids. If the operator has formulate=
d that policy and associated it with the session, you have a policy.=C2=A0<=
/div></div></div></div><div><div><div class=3D"gmail_quote"><div><br></div>=
<div><br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex=
;border-left:1px #ccc solid;padding-left:1ex">
&gt; *C* Should received routes still reside in Adj_RIB_In ? Should BMP sti=
ll<br>
&gt; send all routes to collector even if those would be considered not<br>
&gt; complaint with RFC ?<br>
</blockquote><div><br></div><div><br></div></div></div></div><div><div><div=
 class=3D"gmail_quote"><div>Alvaro suggested text to that extend.=C2=A0</di=
v></div></div></div><div><div class=3D"gmail_quote"><div><br></div><div><br=
></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-=
left:1px #ccc solid;padding-left:1ex">
&gt; *D* If we do eBGP auto discovery in IX env of peers would that overwri=
te<br>
&gt; such RFC ?</blockquote><div><br></div><div><br></div><div>Why would it=
?=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;b=
order-left:1px #ccc solid;padding-left:1ex"></blockquote><div><br></div><di=
v><br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bo=
rder-left:1px #ccc solid;padding-left:1ex"></blockquote><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex">
&gt; *E* If someone does LLDP based eBGP peer discovery on p2p would that a=
lso<br>
&gt; be exempt from such enforcement ?</blockquote><div><br></div><div><br>=
</div><div>Why would it?</div><div><br></div><div><br></div><div>Kind regar=
ds,</div><div><br></div><div>Job</div></div></div>

--94eb2c0d2266238fca054d9c96fd--


From nobody Thu Apr 20 10:45:30 2017
Return-Path: <zzhang@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08B9C1293DF; Thu, 20 Apr 2017 08:31:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level: 
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ngOjrzrqTwsK; Thu, 20 Apr 2017 08:31:46 -0700 (PDT)
Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0092.outbound.protection.outlook.com [104.47.41.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B9F3A129AAF; Thu, 20 Apr 2017 08:31:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=HS4LRViKML3QesZ3LS/RemEh7FuatDs6hFj0c47A4Ik=; b=HfRgfE5Rag4bTQJf/yGKV6I6FiH5BQ7R8jQHrtWH7SzYvza9DF/YfkDYt69SRB+OCPf90QfHrbZZ1BOKdIA2GPm43fa7GTfR3rk4+05xLMWvi6uIuu9NFLOAncDotP3JeQdBQTLOPLc5l/V+zFNSxypa4NAk2NOY9shH98j/E5E=
Received: from MWHPR05MB3151.namprd05.prod.outlook.com (10.173.229.17) by MWHPR05MB3149.namprd05.prod.outlook.com (10.173.229.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Thu, 20 Apr 2017 15:31:44 +0000
Received: from MWHPR05MB3151.namprd05.prod.outlook.com ([10.173.229.17]) by MWHPR05MB3151.namprd05.prod.outlook.com ([10.173.229.17]) with mapi id 15.01.1047.008; Thu, 20 Apr 2017 15:31:44 +0000
From: "Jeffrey (Zhaohui) Zhang" <zzhang@juniper.net>
To: "Acee Lindem (acee)" <acee@cisco.com>, Loa Andersson <loa@pi.nu>, "mpls@ietf.org" <mpls@ietf.org>, "idr@ietf.org" <idr@ietf.org>, BESS <bess@ietf.org>
CC: "<rtg-ads@ietf.org>" <rtg-ads@ietf.org>, "idr-chairs@ietf.org" <idr-chairs@ietf.org>, "bess-chairs@ietf.org" <bess-chairs@ietf.org>, "mpls-chairs@ietf.org" <mpls-chairs@ietf.org>, "draft-ietf-mpls-rfc3107bis@ietf.org" <draft-ietf-mpls-rfc3107bis@ietf.org>
Thread-Topic: [bess] [Idr] Working Group Last Call on draft-ietf-mpls-rfc3107bis
Thread-Index: AQHSuU4oZy7oQxkWrEWxCTKxQwoEPqHOY4Kg
Date: Thu, 20 Apr 2017 15:31:44 +0000
Message-ID: <MWHPR05MB3151FA034C08F9A0605C89B0D41B0@MWHPR05MB3151.namprd05.prod.outlook.com>
References: <5398C64D-3794-43FD-8118-B63202F67958@cisco.com>
In-Reply-To: <5398C64D-3794-43FD-8118-B63202F67958@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=juniper.net;
x-originating-ip: [66.129.241.13]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; MWHPR05MB3149; 7:JCT1TGvH8CWeOEIbmMZcaqcfVWYlgBvUI1NMFk9Jk+md1DGKX+pRLQ0R8m5YzTkQ6rtl7OH60g7a6lwSQf6mwm1uoMNxzolJfT9VXJsPYHawR8h7Djx0TJajlLY2yFhTCPjhfW2sacfTcyjeT8iQQhJJGTcxa60KCcDtA9DWrb3HQvWJ9XMkSEZ1BRnsxeSuHlfo1qJ72ZkrVBCQOZcXJSTV6EE0Tzf/Q/GDPEVAC9k349DCCtw9wUZQ/GIckgC+HrhO5OjOuRMZ4We1KsibUXyKQGyQmiVplbIOTqYcqSQqRPgZS/GJWZafv+9ZZcRRCBoQ+DoQUaMNbbAxKMBsyw==
x-ms-office365-filtering-correlation-id: 1ddc48ec-0af3-42d1-138d-08d4880259e1
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081);  SRVR:MWHPR05MB3149; 
x-microsoft-antispam-prvs: <MWHPR05MB3149EC9BF8069DD83851D512D41B0@MWHPR05MB3149.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(50582790962513)(95692535739014);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(10201501046)(93006095)(93001095)(3002001)(6055026)(6041248)(20161123564025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123560025)(20161123555025)(20161123562025)(6072148); SRVR:MWHPR05MB3149; BCL:0; PCL:0; RULEID:; SRVR:MWHPR05MB3149; 
x-forefront-prvs: 02830F0362
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39840400002)(39410400002)(39400400002)(39860400002)(39450400003)(39850400002)(377454003)(24454002)(252514010)(55016002)(2501003)(6506006)(305945005)(6306002)(50986999)(9686003)(7736002)(8936002)(2900100001)(66066001)(99286003)(122556002)(54356999)(3660700001)(76176999)(74316002)(81166006)(3280700002)(229853002)(2906002)(4326008)(77096006)(2950100002)(53546009)(7696004)(33656002)(189998001)(6116002)(2201001)(5660300001)(86362001)(6246003)(25786009)(8676002)(3846002)(102836003)(53936002)(230783001)(38730400002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR05MB3149; H:MWHPR05MB3151.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Apr 2017 15:31:44.3616 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3149
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Y4y1c_mt4L6rdJK9_ctzcBnciCk>
X-Mailman-Approved-At: Thu, 20 Apr 2017 10:45:29 -0700
Subject: Re: [Idr] [bess] Working Group Last Call on draft-ietf-mpls-rfc3107bis
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 15:31:48 -0000

I support as well.

> On 4/19/17, 12:54 PM, "Idr on behalf of Acee Lindem (acee)" <idr-
> bounces@ietf.org on behalf of acee@cisco.com> wrote:
>=20
>     Hi Loa, et al,
>=20
>     I support publication of this draft as a standards track document. It=
 is
>     well-written and handles previously unspecified details of single and
>     multiple label BGP advertisement.
>=20
>     Thanks,
>     Acee
>=20
>     On 4/4/17, 8:33 AM, "BESS on behalf of Loa Andersson"
>     <bess-bounces@ietf.org on behalf of loa@pi.nu> wrote:
>=20
>     >Working Groups,
>     >
>     >This is to initiate a two week working group last call in four worki=
ng
>     >groups on draft-ietf-mpls-rfc3107bis-01.
>     >
>     >According to agreement when we decided to host this document in the
>     >MPLS working group, this last call is also copied to the IDR and BES=
S
>     >working groups.
>     >
>     >Please send your comments to the mpls wg mailing list (mpls@ietf.org=
),
>     >if you are not subscribed to the mpls wg list, send to "your own"
>     >working group mailing list, and we'll make sure they are posted to t=
he
>     >MPLS wg list.
>     >
>     >There are no IPR disclosures against this document.
>     >
>     >All the authors and contributors have stated on the working group
>     >mailing list that they are not aware of any other IPRs that relates
>     >to this document.
>     >
>     >This working group last call ends April 20, 2017.
>     >
>     >
>     >/Loa
>     >MPLS wg co-chairs
>     >--
>     >
>     >
>     >Loa Andersson                        email: loa@mail01.huawei.com
>     >Senior MPLS Expert                          loa@pi.nu
>     >Huawei Technologies (consultant)     phone: +46 739 81 21 64
>     >
>     >_______________________________________________
>     >BESS mailing list
>     >BESS@ietf.org
>     >https://www.ietf.org/mailman/listinfo/bess
>=20
>     _______________________________________________
>     Idr mailing list
>     Idr@ietf.org
>     https://www.ietf.org/mailman/listinfo/idr
>=20
>=20
> _______________________________________________
> BESS mailing list
> BESS@ietf.org
> https://www.ietf.org/mailman/listinfo/bess


From nobody Thu Apr 20 10:50:42 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76D811314B2 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 10:50:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IkIQT1V7C5n5 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 10:50:39 -0700 (PDT)
Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EDE401314A8 for <idr@ietf.org>; Thu, 20 Apr 2017 10:50:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3502; q=dns/txt; s=iport; t=1492710637; x=1493920237; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=AvsTHFcUfVwevP7TMTGqK1xs2228RFC72YPIqkAEuiw=; b=TyTwuxae9/4fYKRPaAu6o0yrN/8eKcsUMQ1B+wDrT18dDuqqAeDOodic 8iiTDyn0W8sSgQbZj22gizeWngUQnFufkxoRl4b002kPwOHd16vF3Pgzm ELl09xBFz64qGH52n4BOFdDdcxwTDC++1iqL+V2t6/1Y8kkLf61ldTRiP M=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DHAQC68/hY/4YNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1SBbQeDYIoVkUSWBIIPhiQCGoNjPxgBAgEBAQEBAQFrKIUWBiM?= =?us-ascii?q?RRRACAQYCGgIfBwICAjAVEAIEDgUbigGNIJ1dgiaLIAEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBHoELhUiBXSsLgmOEV4MGLoISHwEEhwGPP4Z0AY1uhRSRVZQTAR84gQV?= =?us-ascii?q?jFVUBhQmBSnWIIYENAQEB?=
X-IronPort-AV: E=Sophos;i="5.37,225,1488844800"; d="scan'208";a="233567906"
Received: from alln-core-12.cisco.com ([173.36.13.134]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Apr 2017 17:50:37 +0000
Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by alln-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id v3KHoaZA011388 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 20 Apr 2017 17:50:37 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 20 Apr 2017 12:50:35 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Thu, 20 Apr 2017 12:50:36 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: Jared Mauch <jared@puck.Nether.net>
CC: Job Snijders <job@ntt.net>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuV/NQxMnaaMdpE6dWAZuvCqOqKHOmJIAgAAgM4CAAAGEAIAABE6AgAAC7gD//9m4gA==
Date: Thu, 20 Apr 2017 17:50:36 +0000
Message-ID: <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net>
In-Reply-To: <20170420160736.GB15676@puck.nether.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: text/plain; charset="utf-8"
Content-ID: <07A403260893C74DBE65CA0806D45D9A@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/OIpZpaCwWObTzu0ZKkUzVv209cA>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 17:50:40 -0000
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==


From nobody Thu Apr 20 11:09:05 2017
Return-Path: <brian.peter.dickson@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 456711314A3 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 11:09:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ox8nFG59nvLR for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 11:08:59 -0700 (PDT)
Received: from mail-io0-x22c.google.com (mail-io0-x22c.google.com [IPv6:2607:f8b0:4001:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 969D6129B74 for <idr@ietf.org>; Thu, 20 Apr 2017 11:08:59 -0700 (PDT)
Received: by mail-io0-x22c.google.com with SMTP id r16so77361449ioi.2 for <idr@ietf.org>; Thu, 20 Apr 2017 11:08:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=zR5GFRMIC75zQIt7bBGiYI/3o5x59dT3A0qFIVHnkRk=; b=SecDVodYF8LaTjKbH+fmy2LM0upaXUPXioDes+OrmSEFYfW+Ejeo4mghNYu2Vrzdko gumsnKvsdYSum6oArWWtbH83eYaqfdGw2lzWSn1PAv+127ZfEe4PERavgx6Ri6Al3isp JVZDTV7UhDa6JYkLeNpV69BT2hg9oGoFDZ0ORcqQZs013iLfH1g6r+w7ZdgBevJHL0EX 7NaO88ovr2/rA6z1KRrCwxy8/xPH2EZ8Rjy42tj8y0+aAoKQt4VhUwlOMI3OWHx2TvJh H3+sa59FSGNeaoKUAMz4UQK/xTvkqauLZQTn8CPCBSaGPK/mECzCTpsRfT6BO051JV1G DiOg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=zR5GFRMIC75zQIt7bBGiYI/3o5x59dT3A0qFIVHnkRk=; b=g7GdAeVDAnmZQJGQ4ZEuNaHftNLRtq358nVLDL/fiWnG7VgXqQifn8GeZh/e8Th19E nIsJWCbbNukbKBXSeviQyDbBM+YFreSbVnkYwchts50UicXWM1YnS9ykP4LhqL7t10xo dBhvmmx5bE24/HDYmeQvTM9IquN8uc3QlJpvy1C5oPaT7adbZ6ffEklSGE9BUmLDTJfB 0eMKuE5LJmxEMJ5ql7bjamNUU/IoKHQhW0YsPS60+IjANZoAaXNNcSXeK9XNp3Oj8UIn 0shLu+MwH65wj4DNPmqk/r8uAEkoWF3iXhYPhLgoZocBJmvEa39lCVwxJzwNkyL/tMyU lXTQ==
X-Gm-Message-State: AN3rC/77T5t3cl+6D4Zg8L1SKfh6/6+uKufPnnwVf1edJDO5r3OI/+RB XqisCXt2+1Z2GeOk8qTxyDpF1GRg9w==
X-Received: by 10.107.146.139 with SMTP id u133mr11733201iod.160.1492711737459;  Thu, 20 Apr 2017 11:08:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.36.46.151 with HTTP; Thu, 20 Apr 2017 11:08:56 -0700 (PDT)
In-Reply-To: <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com>
From: Brian Dickson <brian.peter.dickson@gmail.com>
Date: Thu, 20 Apr 2017 11:08:56 -0700
Message-ID: <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
Cc: Jared Mauch <jared@puck.nether.net>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=94eb2c055f4edd29d0054d9d0876
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/pnMwi69iqcS5Ksr2OrDQUOJjqx8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 18:09:03 -0000

--94eb2c055f4edd29d0054d9d0876
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

TL;DR: BCPs don't work; operators vary in experience, diligence, etc;
vendors don't have common defaults; "open", "route-leaks", and "reject"
work differently and are all needed; code changes will have a long tail of
non-upgraded routers for a long time.

BCPs don't work - see BCP38 for the canonical example.

If operators were consistent (as in globally, uniform, ubiquitous without
exception) in applying best practices, these proposals would not even
exist. Their mere existence is proof that they are needed.

"reject" will only help once implemented, on upgraded or newly deployed
routers; ditto for "open"; "route-leaks" requires operator configuration,
but uses a transitive-optional attribute (and thus works alongside
non-upgraded routers). All three are needed, for their respective
attributes (on by default; stop leak origination; limit leak propagation).

The long tail on upgrades is what makes all three needed. No single one is
sufficient by itself, unless/until every router has been upgraded AND
configured. The three together are an imperfect but scalable and
incrementally deployable set of improvements with real global results.

Trying to move things in a productive direction.

My $0.02.

Brian

On Thu, Apr 20, 2017 at 10:50 AM, Alvaro Retana (aretana) <aretana@cisco.co=
m
> wrote:

> Jared:
>
> Hi!
>
> Not everyone in this thread was part of the initial conversations we had,
> so to give a little background:  I think (yes, still) that the document (=
as
> is in -05) should be marked as updating rfc4271 because it starts off
> saying that it =E2=80=9Cdefines the default behavior of a BGP speaker=E2=
=80=A6=E2=80=9D and later
> (Section 2) describes specific changes pointing at pieces of rfc4271:
> =E2=80=9C=E2=80=A6MUST consider any routes advertised by an EBGP peer ine=
ligible for route
> selection (section 9.1.1 [RFC4271])=E2=80=A6=E2=80=9D.
>
> Again, what gives me heartburn and the reason this document caught my
> attention is that change in the default =E2=80=93 and from this thread, I=
 can see
> that is an issue for others.
>
>
> Reading what you wrote below, about other potential options to achieve th=
e
> same result, I agree with you that the bar doesn=E2=80=99t have to be as =
high as
> changing the default in rfc4271.  But the current document doesn=E2=80=99=
t reflect
> that.
>
> Maybe what we need is to describe the solution in a way that is not so
> rfc4271-specific.  Explain what the behavior should be (not how to achiev=
e
> it), and even talk about the operational pain, and what operators should
> consider with the current not-specified behavior (which the document
> doesn=E2=80=99t do much of now).  I think that would be a very different =
document
> with a different set of discussion points, but one that could lead to the
> goal.
>
> During the early thread of this draft (a couple of years ago), several
> people suggested that the status should be a BCP.  I can see how a docume=
nt
> explaining the pains and the considerations for Internet routers could be=
 a
> BCP.
>
> Just trying to move the conversation forward.
>
> Alvaro.
>
>
>
> On 4/20/17, 12:07 PM, "Jared Mauch" <jared@puck.Nether.net> wrote:
>
>         To make it clear: I don't want to break someones routers.
>
>         I do want to make it harder for someone to leak a table when they
> have a new router.
>
>         I don't belive the bar should be high, it can be embedded in
> whatever
> configuration/ZTP/automation/cut+paste template out there.  It could come
> in the form of yang over netconf, or a DHCPv6/DHCPv4 option.  It could
> come from a TXT record in DNS, or wahtever configuration method the vendo=
r
> invents that is new and unimagined by th WG today.
>
>         I don't feel it requires updating 4271 to attain that goal, it's
> clear implementors have seen a path to do this today without having
> a concern with 4271, and I believe that Alvaro is wrong in the presumptio=
n
> this document updates 4271.  (I'm also willing to be told that I'm too
> rough
> for consensus :-).
>
>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--94eb2c055f4edd29d0054d9d0876
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">TL;DR: BCPs don&#39;t work; operators vary in experience, =
diligence, etc; vendors don&#39;t have common defaults; &quot;open&quot;, &=
quot;route-leaks&quot;, and &quot;reject&quot; work differently and are all=
 needed; code changes will have a long tail of non-upgraded routers for a l=
ong time.<div><br></div><div>BCPs don&#39;t work - see BCP38 for the canoni=
cal example.</div><div><br></div><div>If operators were consistent (as in g=
lobally, uniform, ubiquitous without exception) in applying best practices,=
 these proposals would not even exist. Their mere existence is proof that t=
hey are needed.</div><div><br></div><div>&quot;reject&quot; will only help =
once implemented, on upgraded or newly deployed routers; ditto for &quot;op=
en&quot;; &quot;route-leaks&quot; requires operator configuration, but uses=
 a transitive-optional attribute (and thus works alongside non-upgraded rou=
ters). All three are needed, for their respective attributes (on by default=
; stop leak origination; limit leak propagation).</div><div><br></div><div>=
The long tail on upgrades is what makes all three needed. No single one is =
sufficient by itself, unless/until every router has been upgraded AND confi=
gured. The three together are an imperfect but scalable and incrementally d=
eployable set of improvements with real global results.</div><div><br></div=
><div>Trying to move things in a productive direction.</div><div><br></div>=
<div>My $0.02.</div><div><br></div><div>Brian</div></div><div class=3D"gmai=
l_extra"><br><div class=3D"gmail_quote">On Thu, Apr 20, 2017 at 10:50 AM, A=
lvaro Retana (aretana) <span dir=3D"ltr">&lt;<a href=3D"mailto:aretana@cisc=
o.com" target=3D"_blank">aretana@cisco.com</a>&gt;</span> wrote:<br><blockq=
uote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc =
solid;padding-left:1ex">Jared:<br>
<br>
Hi!<br>
<br>
Not everyone in this thread was part of the initial conversations we had, s=
o to give a little background:=C2=A0 I think (yes, still) that the document=
 (as is in -05) should be marked as updating rfc4271 because it starts off =
saying that it =E2=80=9Cdefines the default behavior of a BGP speaker=E2=80=
=A6=E2=80=9D and later (Section 2) describes specific changes pointing at p=
ieces of rfc4271: =E2=80=9C=E2=80=A6MUST consider any routes advertised by =
an EBGP peer ineligible for route selection (section 9.1.1 [RFC4271])=E2=80=
=A6=E2=80=9D.<br>
<br>
Again, what gives me heartburn and the reason this document caught my atten=
tion is that change in the default =E2=80=93 and from this thread, I can se=
e that is an issue for others.<br>
<br>
<br>
Reading what you wrote below, about other potential options to achieve the =
same result, I agree with you that the bar doesn=E2=80=99t have to be as hi=
gh as changing the default in rfc4271.=C2=A0 But the current document doesn=
=E2=80=99t reflect that.<br>
<br>
Maybe what we need is to describe the solution in a way that is not so rfc4=
271-specific.=C2=A0 Explain what the behavior should be (not how to achieve=
 it), and even talk about the operational pain, and what operators should c=
onsider with the current not-specified behavior (which the document doesn=
=E2=80=99t do much of now).=C2=A0 I think that would be a very different do=
cument with a different set of discussion points, but one that could lead t=
o the goal.<br>
<br>
During the early thread of this draft (a couple of years ago), several peop=
le suggested that the status should be a BCP.=C2=A0 I can see how a documen=
t explaining the pains and the considerations for Internet routers could be=
 a BCP.<br>
<br>
Just trying to move the conversation forward.<br>
<span class=3D"HOEnZb"><font color=3D"#888888"><br>
Alvaro.<br>
</font></span><span class=3D"im HOEnZb"><br>
<br>
<br>
On 4/20/17, 12:07 PM, &quot;Jared Mauch&quot; &lt;<a href=3D"mailto:jared@p=
uck.Nether.net">jared@puck.Nether.net</a>&gt; wrote:<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 To make it clear: I don&#39;t want to break som=
eones routers.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 I do want to make it harder for someone to leak=
 a table when they<br>
have a new router.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 I don&#39;t belive the bar should be high, it c=
an be embedded in whatever<br>
configuration/ZTP/automation/<wbr>cut+paste template out there.=C2=A0 It co=
uld come<br>
in the form of yang over netconf, or a DHCPv6/DHCPv4 option.=C2=A0 It could=
<br>
come from a TXT record in DNS, or wahtever configuration method the vendor<=
br>
invents that is new and unimagined by th WG today.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 I don&#39;t feel it requires updating 4271 to a=
ttain that goal, it&#39;s<br>
clear implementors have seen a path to do this today without having<br>
a concern with 4271, and I believe that Alvaro is wrong in the presumption<=
br>
this document updates 4271.=C2=A0 (I&#39;m also willing to be told that I&#=
39;m too rough<br>
for consensus :-).<br>
<br>
<br>
<br>
</span><div class=3D"HOEnZb"><div class=3D"h5">____________________________=
__<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--94eb2c055f4edd29d0054d9d0876--


From nobody Thu Apr 20 11:25:12 2017
Return-Path: <tonysietf@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33E4D1314CA for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 11:25:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gvXn7JYqZWp8 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 11:25:07 -0700 (PDT)
Received: from mail-wr0-x22c.google.com (mail-wr0-x22c.google.com [IPv6:2a00:1450:400c:c0c::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2CE941314BB for <idr@ietf.org>; Thu, 20 Apr 2017 11:25:07 -0700 (PDT)
Received: by mail-wr0-x22c.google.com with SMTP id z109so41096285wrb.1 for <idr@ietf.org>; Thu, 20 Apr 2017 11:25:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=zavAmLCX6hIox0GKMQ4L/tdBttHfu6XmDRAlwCrlRBQ=; b=kXde5vmcvbHwstd3si0mYGleNYgfD/wUC7vBoBlGYL6wYzBjkqxOcEqn+HlTLcfxKO 6tpFnpUF6djY+OadlTflz0zNrVmzcalK8vFFM4Le9ISnO5TRou+rnf585Gr2yjjEapOx LtAf8tzdRo5qOSiyRDzFe35ozJyMGepxCxlzm1tPs8Qylbb1/sQEaB4S5rpaHaMAI1Sr Gglr9bXJWekqzj8qoNZQuIw9iMUU8wIqJnDxvwPkM8pRgNdvakINsj62P+Ql9lRXc0J9 ybgNog5kFd4BW5G3VdBp8JV/qEWyFXcjr7TK9wXt0wHkUCGjV+x7jvsiU/hDQ9aw8lkH zmpw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=zavAmLCX6hIox0GKMQ4L/tdBttHfu6XmDRAlwCrlRBQ=; b=aHq1el/wNdN5jSm0WuZ2omr6zlrAnk8FW/DB6ZxYeibEmIviJB+HKhmwo4YirDf2Hy oCgZKkiV2tlIszKKHw6yrOOcLI/7sB/6TU7wQIrwNlAvr8cL6hJAbfClS802p8nEYAfI rxj7URg4gBMFtOyXfYlIpYNwLhO9HKfrP0MB8Qo8/r+fbO7c7536xX46B/v97whdgXIy 1QCZ0EznddzKyFVM5KgMD+ua6QxPicBW5uqxjkXEojKjOtY7EnLoxSAD2Hpu6ATPe+UB Cx411OqBVoAqrdSFnEinF9AIlMQB+rokM2kn/xtJ/Z9cAjRxjn3BiMtp3UGCsGkE2nlk R8VQ==
X-Gm-Message-State: AN3rC/7DwvftSvQZkrSt0TKWw+2Zua4wGidgWY7sz1rx/RAm8K/l2xt3 lMrbpj7IoqIPBjpZYsIMIuS6FWQ0Vn32
X-Received: by 10.223.139.215 with SMTP id w23mr9240370wra.169.1492712705663;  Thu, 20 Apr 2017 11:25:05 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.80.136.9 with HTTP; Thu, 20 Apr 2017 11:24:24 -0700 (PDT)
In-Reply-To: <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com>
From: Tony Przygienda <tonysietf@gmail.com>
Date: Thu, 20 Apr 2017 11:24:24 -0700
Message-ID: <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com>
To: Brian Dickson <brian.peter.dickson@gmail.com>
Cc: "Alvaro Retana (aretana)" <aretana@cisco.com>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=f403045ec49892b237054d9d421b
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/gSksbf85n4TAGAqu4fPlUx8nZHY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 18:25:10 -0000

--f403045ec49892b237054d9d421b
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Can't miss that food fight ;-) So couple observations:

i) as often, when an RFC tries to mandate anything beyond things on the
wire & the procedures to treat it, it tries ultimately to mandate
implementations and this is seldom wise
ii) +1 Enke, +1 Acee.  I understand operators here wanting "their default"
but large, diversified codebases have to serve (especially with BGP) a wide
spectrum of customers with different needs and with that, different
defaults make sense. And I remember routers booting up with a question list
of "press 1 if you're an evil syndicate, press 2 if you're a bedroom ISP,
press 3 if you think this is a toaster" to get the right defaults set ...

Having said that, I think this is BCP material at best and if this is a BCP
then

i) a "backward compatibility a.k.a which end of the stick is sharp" section
is very advisable
ii) the BCP should describe which customer segment is best served with
which default

--- tony

On Thu, Apr 20, 2017 at 11:08 AM, Brian Dickson <
brian.peter.dickson@gmail.com> wrote:

> TL;DR: BCPs don't work; operators vary in experience, diligence, etc;
> vendors don't have common defaults; "open", "route-leaks", and "reject"
> work differently and are all needed; code changes will have a long tail o=
f
> non-upgraded routers for a long time.
>
> BCPs don't work - see BCP38 for the canonical example.
>
> If operators were consistent (as in globally, uniform, ubiquitous without
> exception) in applying best practices, these proposals would not even
> exist. Their mere existence is proof that they are needed.
>
> "reject" will only help once implemented, on upgraded or newly deployed
> routers; ditto for "open"; "route-leaks" requires operator configuration,
> but uses a transitive-optional attribute (and thus works alongside
> non-upgraded routers). All three are needed, for their respective
> attributes (on by default; stop leak origination; limit leak propagation)=
.
>
> The long tail on upgrades is what makes all three needed. No single one i=
s
> sufficient by itself, unless/until every router has been upgraded AND
> configured. The three together are an imperfect but scalable and
> incrementally deployable set of improvements with real global results.
>
> Trying to move things in a productive direction.
>
> My $0.02.
>
> Brian
>
> On Thu, Apr 20, 2017 at 10:50 AM, Alvaro Retana (aretana) <
> aretana@cisco.com> wrote:
>
>> Jared:
>>
>> Hi!
>>
>> Not everyone in this thread was part of the initial conversations we had=
,
>> so to give a little background:  I think (yes, still) that the document =
(as
>> is in -05) should be marked as updating rfc4271 because it starts off
>> saying that it =E2=80=9Cdefines the default behavior of a BGP speaker=E2=
=80=A6=E2=80=9D and later
>> (Section 2) describes specific changes pointing at pieces of rfc4271:
>> =E2=80=9C=E2=80=A6MUST consider any routes advertised by an EBGP peer in=
eligible for route
>> selection (section 9.1.1 [RFC4271])=E2=80=A6=E2=80=9D.
>>
>> Again, what gives me heartburn and the reason this document caught my
>> attention is that change in the default =E2=80=93 and from this thread, =
I can see
>> that is an issue for others.
>>
>>
>> Reading what you wrote below, about other potential options to achieve
>> the same result, I agree with you that the bar doesn=E2=80=99t have to b=
e as high
>> as changing the default in rfc4271.  But the current document doesn=E2=
=80=99t
>> reflect that.
>>
>> Maybe what we need is to describe the solution in a way that is not so
>> rfc4271-specific.  Explain what the behavior should be (not how to achie=
ve
>> it), and even talk about the operational pain, and what operators should
>> consider with the current not-specified behavior (which the document
>> doesn=E2=80=99t do much of now).  I think that would be a very different=
 document
>> with a different set of discussion points, but one that could lead to th=
e
>> goal.
>>
>> During the early thread of this draft (a couple of years ago), several
>> people suggested that the status should be a BCP.  I can see how a docum=
ent
>> explaining the pains and the considerations for Internet routers could b=
e a
>> BCP.
>>
>> Just trying to move the conversation forward.
>>
>> Alvaro.
>>
>>
>>
>> On 4/20/17, 12:07 PM, "Jared Mauch" <jared@puck.Nether.net> wrote:
>>
>>         To make it clear: I don't want to break someones routers.
>>
>>         I do want to make it harder for someone to leak a table when the=
y
>> have a new router.
>>
>>         I don't belive the bar should be high, it can be embedded in
>> whatever
>> configuration/ZTP/automation/cut+paste template out there.  It could com=
e
>> in the form of yang over netconf, or a DHCPv6/DHCPv4 option.  It could
>> come from a TXT record in DNS, or wahtever configuration method the vend=
or
>> invents that is new and unimagined by th WG today.
>>
>>         I don't feel it requires updating 4271 to attain that goal, it's
>> clear implementors have seen a path to do this today without having
>> a concern with 4271, and I believe that Alvaro is wrong in the presumpti=
on
>> this document updates 4271.  (I'm also willing to be told that I'm too
>> rough
>> for consensus :-).
>>
>>
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>
>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>
>


--=20
*We=E2=80=99ve heard that a million monkeys at a million keyboards could pr=
oduce
the complete works of Shakespeare; now, thanks to the Internet, we know
that is not true.*
=E2=80=94Robert Wilensky

--f403045ec49892b237054d9d421b
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Can&#39;t miss that food fight ;-) So couple observations:=
=C2=A0<div><br></div><div>i) as often, when an RFC tries to mandate anythin=
g beyond things on the wire &amp; the procedures to treat it, it tries ulti=
mately to mandate implementations and this is seldom wise=C2=A0</div><div>i=
i) +1 Enke, +1 Acee.=C2=A0 I understand operators here wanting &quot;their =
default&quot; but large, diversified codebases have to serve (especially wi=
th BGP) a wide spectrum of customers with different needs and with that, di=
fferent defaults make sense. And I remember routers booting up with a quest=
ion list of &quot;press 1 if you&#39;re an evil syndicate, press 2 if you&#=
39;re a bedroom ISP, press 3 if you think this is a toaster&quot; to get th=
e right defaults set ...=C2=A0</div><div><br></div><div>Having said that, I=
 think this is BCP material at best and if this is a BCP then=C2=A0</div><d=
iv><br></div><div>i) a &quot;backward compatibility a.k.a which end of the =
stick is sharp&quot; section is very advisable</div><div>ii) the BCP should=
 describe which customer segment is best served with which default=C2=A0</d=
iv><div><br></div><div>--- tony=C2=A0</div></div><div class=3D"gmail_extra"=
><br><div class=3D"gmail_quote">On Thu, Apr 20, 2017 at 11:08 AM, Brian Dic=
kson <span dir=3D"ltr">&lt;<a href=3D"mailto:brian.peter.dickson@gmail.com"=
 target=3D"_blank">brian.peter.dickson@gmail.com</a>&gt;</span> wrote:<br><=
blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px=
 #ccc solid;padding-left:1ex"><div dir=3D"ltr">TL;DR: BCPs don&#39;t work; =
operators vary in experience, diligence, etc; vendors don&#39;t have common=
 defaults; &quot;open&quot;, &quot;route-leaks&quot;, and &quot;reject&quot=
; work differently and are all needed; code changes will have a long tail o=
f non-upgraded routers for a long time.<div><br></div><div>BCPs don&#39;t w=
ork - see BCP38 for the canonical example.</div><div><br></div><div>If oper=
ators were consistent (as in globally, uniform, ubiquitous without exceptio=
n) in applying best practices, these proposals would not even exist. Their =
mere existence is proof that they are needed.</div><div><br></div><div>&quo=
t;reject&quot; will only help once implemented, on upgraded or newly deploy=
ed routers; ditto for &quot;open&quot;; &quot;route-leaks&quot; requires op=
erator configuration, but uses a transitive-optional attribute (and thus wo=
rks alongside non-upgraded routers). All three are needed, for their respec=
tive attributes (on by default; stop leak origination; limit leak propagati=
on).</div><div><br></div><div>The long tail on upgrades is what makes all t=
hree needed. No single one is sufficient by itself, unless/until every rout=
er has been upgraded AND configured. The three together are an imperfect bu=
t scalable and incrementally deployable set of improvements with real globa=
l results.</div><div><br></div><div>Trying to move things in a productive d=
irection.</div><div><br></div><div>My $0.02.</div><span class=3D"HOEnZb"><f=
ont color=3D"#888888"><div><br></div><div>Brian</div></font></span></div><d=
iv class=3D"HOEnZb"><div class=3D"h5"><div class=3D"gmail_extra"><br><div c=
lass=3D"gmail_quote">On Thu, Apr 20, 2017 at 10:50 AM, Alvaro Retana (areta=
na) <span dir=3D"ltr">&lt;<a href=3D"mailto:aretana@cisco.com" target=3D"_b=
lank">aretana@cisco.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail=
_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:=
1ex">Jared:<br>
<br>
Hi!<br>
<br>
Not everyone in this thread was part of the initial conversations we had, s=
o to give a little background:=C2=A0 I think (yes, still) that the document=
 (as is in -05) should be marked as updating rfc4271 because it starts off =
saying that it =E2=80=9Cdefines the default behavior of a BGP speaker=E2=80=
=A6=E2=80=9D and later (Section 2) describes specific changes pointing at p=
ieces of rfc4271: =E2=80=9C=E2=80=A6MUST consider any routes advertised by =
an EBGP peer ineligible for route selection (section 9.1.1 [RFC4271])=E2=80=
=A6=E2=80=9D.<br>
<br>
Again, what gives me heartburn and the reason this document caught my atten=
tion is that change in the default =E2=80=93 and from this thread, I can se=
e that is an issue for others.<br>
<br>
<br>
Reading what you wrote below, about other potential options to achieve the =
same result, I agree with you that the bar doesn=E2=80=99t have to be as hi=
gh as changing the default in rfc4271.=C2=A0 But the current document doesn=
=E2=80=99t reflect that.<br>
<br>
Maybe what we need is to describe the solution in a way that is not so rfc4=
271-specific.=C2=A0 Explain what the behavior should be (not how to achieve=
 it), and even talk about the operational pain, and what operators should c=
onsider with the current not-specified behavior (which the document doesn=
=E2=80=99t do much of now).=C2=A0 I think that would be a very different do=
cument with a different set of discussion points, but one that could lead t=
o the goal.<br>
<br>
During the early thread of this draft (a couple of years ago), several peop=
le suggested that the status should be a BCP.=C2=A0 I can see how a documen=
t explaining the pains and the considerations for Internet routers could be=
 a BCP.<br>
<br>
Just trying to move the conversation forward.<br>
<span class=3D"m_-3216329882927264548HOEnZb"><font color=3D"#888888"><br>
Alvaro.<br>
</font></span><span class=3D"m_-3216329882927264548im m_-321632988292726454=
8HOEnZb"><br>
<br>
<br>
On 4/20/17, 12:07 PM, &quot;Jared Mauch&quot; &lt;<a href=3D"mailto:jared@p=
uck.Nether.net" target=3D"_blank">jared@puck.Nether.net</a>&gt; wrote:<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 To make it clear: I don&#39;t want to break som=
eones routers.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 I do want to make it harder for someone to leak=
 a table when they<br>
have a new router.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 I don&#39;t belive the bar should be high, it c=
an be embedded in whatever<br>
configuration/ZTP/automation/c<wbr>ut+paste template out there.=C2=A0 It co=
uld come<br>
in the form of yang over netconf, or a DHCPv6/DHCPv4 option.=C2=A0 It could=
<br>
come from a TXT record in DNS, or wahtever configuration method the vendor<=
br>
invents that is new and unimagined by th WG today.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 I don&#39;t feel it requires updating 4271 to a=
ttain that goal, it&#39;s<br>
clear implementors have seen a path to do this today without having<br>
a concern with 4271, and I believe that Alvaro is wrong in the presumption<=
br>
this document updates 4271.=C2=A0 (I&#39;m also willing to be told that I&#=
39;m too rough<br>
for consensus :-).<br>
<br>
<br>
<br>
</span><div class=3D"m_-3216329882927264548HOEnZb"><div class=3D"m_-3216329=
882927264548h5">______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/idr</a><br>
</div></div></blockquote></div><br></div>
</div></div><br>______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
<br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div cla=
ss=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=3D"ltr">=
<div><span style=3D"font-size:12.8000001907349px"><font face=3D"georgia, se=
rif"><i>We=E2=80=99ve heard that a million monkeys at a million keyboards c=
ould produce the complete works of Shakespeare; now, thanks to the Internet=
, we know that is not true.</i></font></span><i><font face=3D"garamond, ser=
if"><br></font></i></div><div><span style=3D"font-size:12.8000001907349px">=
<font face=3D"times new roman, serif">=E2=80=94Robert Wilensky</font></span=
><br></div></div></div>
</div>

--f403045ec49892b237054d9d421b--


From nobody Thu Apr 20 11:31:40 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D0F0129B70 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 11:31:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.022
X-Spam-Level: 
X-Spam-Status: No, score=-2.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8_wj-K199YaT for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 11:31:38 -0700 (PDT)
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0130.outbound.protection.outlook.com [104.47.33.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEE4C129B5B for <idr@ietf.org>; Thu, 20 Apr 2017 11:31:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=nVczZS7tpZbj9XXkQHaovovMIlovKWBK/iktGx/zqg8=; b=XC2zzgsOIgUa0x1pJwZq7LRwd5mkVHsHmnDIE6O3ZtrELLEoDqwD5ZexP65DyMVjghpLMNSxCj1IoXqNeS+9YbA54St7gcoXnQNqllq652bsgWe16+X4rYvePKRHkNLPhGyZY7kOx/Rp+9yAkr3WvE0KcakLAqOSn1/6sPerPDE=
Authentication-Results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.33.8] (66.129.241.12) by SN2PR05MB2512.namprd05.prod.outlook.com (10.166.213.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Thu, 20 Apr 2017 18:31:35 +0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com>
Date: Thu, 20 Apr 2017 14:31:29 -0400
CC: Jared Mauch <jared@puck.Nether.net>, "idr@ietf.org" <idr@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-ID: <18A434D0-CA0F-4913-B4DB-8AF5575E0473@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR11CA0011.namprd11.prod.outlook.com (10.172.17.21) To SN2PR05MB2512.namprd05.prod.outlook.com (10.166.213.21)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 67391201-5d56-466d-1bd5-08d4881b7a40
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:SN2PR05MB2512; 
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2512; 3:3YkAucGfvWL/NdvO64XMPXbCmT2SaRU7mYGA56ZUUi40nQq1jhqCCZ7lfEA/sApgef/CFMkHaCMiP5eJ1Q7/gv6QmR8RK/c8kNBjUQmVqKJjfxKJxxhoiDEpU16WAS6bkW3lm9JNVr51Vsjs5xQBfrHys/ZJpQOo7q4nWKaj9QuBZprnnfWigrQEbt0IbpUuYONqSZEZaBQLwLoc+oMxBXFenRIpYbj2UGCQcbBmEBdMvCp2Lex5naGHy2ZIb956YKkgRmeJ5nkPZ2Q4PaaBARxS8ov89q+79JChVfneOpSIVAMxYcfIpLxNdPHWD2YR/EEHHFuWvkkTD+yEj2ow78Fim0B01QX96Bigbxrbj+U=; 25:bFax0kP9Ssj7Aj2RSXLaAer9wdaxhtkavjbFwyZyXrquC8d0/stlGGivwHzC7jaGt68nU2Hpb2XfcP5CR0J6xXF9RV9Q0UpabEd2m56hgQWa1Kzs1Bpg2fhbKLPgR3IO0L3YDagNawAdI5Vzi8cldySBzt40k/7dhyTVp3cbhJ0oFagHXi2/ECPY5ZNaEWQmVIEv3KVLLz8YxxQxcfm4DJ7hYV+iBOFkxSEjKdoBo7hQqQcr25ku98IX52Y5baVE9b9Yf8pF7qW/J5fv3PQwJd3GRerdBQjtWw40EZbg7czWrxt32mjWGaxEtB/UDvMfPhFMUPZqehhRms0otTqOp2egTI11UX382fQACYiWYl7B3/NAgCn6hf2dZJL4IWlYm23yXuH8AwIqijdo6Sf8ZofHcsfoqZFgf081tmHf0CJOnHMsHsOnUndD+/dxb3+ZYqM8wdZZRMVVOZWkToq+FIf16/gLm+C7AfWPcBlgFVA=
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2512; 31:eXDqWEm8nb3i3xTCgcOJbb/wuqlre5qAiTxQVf00/eMeiD8t74UlDWxrceGshfkJ+cEojM5kpIvhGeR1yngjQDpbR/1tENmnu2xWwPByAeVabj2UPTEKkbDbODOyy8NcyF3nckRIvn2PZeNX3dXR4s4XOqrgIcuG7MOipBXgphAUYS/Ep6wwNtTHqet/oQ5/8EWX19TNKYi30nZlv50/d+xJQIxQiSLiMxLciBlnHEt8sD593hYPWc5YEc8j4DX2JVlsacr3w2rnWx+poZYzkg==; 20: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
X-Microsoft-Antispam-PRVS: <SN2PR05MB2512799418B0AB009ECC4D67AA1B0@SN2PR05MB2512.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(100405760836317)(95692535739014);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3002001)(6055026)(6041248)(20161123564025)(20161123560025)(20161123562025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123555025)(6072148); SRVR:SN2PR05MB2512; BCL:0; PCL:0; RULEID:; SRVR:SN2PR05MB2512; 
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2512; 4:FkltbltGs02k/8iNdpXSISeXvMS/WAHXWGa0c5Z1J8f0Ro/j2YzAZ1X5UOSrU6hgiEWeLUSkGQdRFF7cEN1SAH5oUGhxc0PnlkyP+XYRJ528XnIgxj4Oju9Qvu92g7d1fNo+HHJeQn31g9Q17BawjOGSXXEmw6FBm0yy+SjscpTC8gKe1V53icXVbYWnOJNLLhE3DeRrcE3dhXEt7OvMol8mfpf2r62eMi1mE0BiahDjdKt+/EyEC+ypDhhPUfywbV3saiaSOBkTOLVWCsjyDJ9a1vWqyQMUzgCoetRTSwd8mQjLjK//Vx++dVybln8agDWpZzX+sCVWyXMkohXVeFDH386n0D+fJorhhIf41IRQk60TTblURgyTcvmDj+m320P8lSEjc91buineZB3twJD0jw93A57ojKIe8M85Vy0jbmR3QH3KG8/lJ5gRFW2PkOO0x4/bVUgEldt5hZWvsRXmATIitLOukC/sfPHl6oL4Hpwxe936tXmKYkWHHwPJrDBY/Iw8OVwQ1iVJ1y/BLuk46AXhm+lLqynqUfkxnlqA7uJ8I1zfZ1tYnzoWevidCp+4hvAYAZarr8y+DlqoEDfc7KuL3I8aNwqP9oc0yzlq8B4aXqoAj1aPYjs+ShZX8QG1+86rZ2jGflrz5aDXyvBRvHTpUZsYwo9UETPP5NzPwlRf5lOgeoCbELTKQx7kMqu3Xpz5nojjihmN8nn0T91gkOR/2m3ehLmkflah5buSaOt+5DswcllCYpxF66gRPHEX1OcoI6+2jmkQ5S+A9FI/KGo2J+mfkebCsiciazK0sb9livJMNCJk+5ytPU3nfbJO63HGBUhVWMDRRlu5N57hkVI1QNk+K3N/4eCl3t0=
X-Forefront-PRVS: 02830F0362
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(39450400003)(39850400002)(39400400002)(39840400002)(39410400002)(39860400002)(377454003)(24454002)(6246003)(3846002)(8676002)(8746002)(53936002)(2906002)(77096006)(81166006)(76176999)(50986999)(33656002)(25786009)(6116002)(42186005)(50226002)(6486002)(189998001)(86362001)(93886004)(4326008)(230783001)(7736002)(57306001)(54906002)(83716003)(38730400002)(50466002)(47776003)(110136004)(66066001)(6666003)(82746002)(5660300001)(36756003)(229853002)(6916009)(2950100002)(305945005)(23676002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN2PR05MB2512; H:[172.29.33.8]; FPR:; SPF:None;  MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtTTjJQUjA1TUIyNTEyOzIzOmJEVmFlVUlXS3h5MnVCbDFMeGlIb3VLdHpB?= =?utf-8?B?UUZUaXJtbEZxWGRmV3NhajBYcEg1SVJNK0l6N1hPN0UrQ2RkWkQwck9ET0xv?= =?utf-8?B?cFg3S05teE5Zc2xQRUtweFNNYVdLaFFDNW1mYllIVHdXdXdwMVhnSlM0Vmh5?= =?utf-8?B?YXMvUUxPeVJ0d1ZXVEpEbUEvSGZzRzVMenF2bkpXUE9pTjQzUWU5OTIyZkpU?= =?utf-8?B?YUtFSHU2MUF0TTRmU3pZWFhGOUl5d0Fpc2p0WmZQdHk3Lzd3b2Y0amlxODRF?= =?utf-8?B?UzNxdWhCT2F6UW04ZjZFanRYeFBRRERaTE1oOGtmWG93T2dPL2huVVk3aUtT?= =?utf-8?B?TzNBUmVCSEVqbjAxaFFueTd1S1VKNXMzbFdvRUJ0MERwSlJMNDM5Y29nVHlk?= =?utf-8?B?dGdROWRIRmo3OHo5ODlYSmxVcU5nY2V2RktTRGRlLzZiUEZkakh4czBzUExo?= =?utf-8?B?VmJoNlFTR2lKT3ZYdDh4aXJieXV5TEFkOXQrSGh4b2haTzVwVXhVUHY3TzJ6?= =?utf-8?B?cFd0Y1VyZXJ6ekN6b3JRU3NsQjljVC9WcE9nRGwwcFJ6QUl5Z0g1bnpOWC84?= =?utf-8?B?RitqRVI5M25oTUZHMjJvTTRQREN0cThaNTErMkM4SDNVNEtqRnFxYWhXRnU2?= =?utf-8?B?STFJZm5NdGduYlhWT1E3LzVkRWNHdjNpMEVVVjJ1Q3F1aGk2OU5NNnFmRkFo?= =?utf-8?B?SE50WFdUNTJNZ0dLRit2L2R1ZGY3L0JKQ0FsOHMrOFpocjg5d3NzS2FNbzdC?= =?utf-8?B?SWdzOXFraHE3WFZIbGNTb21qZFl1VE5kOWp1aS9PbnVONFYwQ01PNjFtWmxG?= =?utf-8?B?Um95VEZJYWEwamVTUTFpbzN0YzNFQTBVOG55YnNkUU5abmM4cnlQeU94VENV?= =?utf-8?B?aGtOR3FRQzJNdnkxckxUdjhadEM0d2ZzelJUMWdreXE4c1hER2trR1BWSGIy?= =?utf-8?B?bHY3VzNkc2JLMEhpR0RobGYra1dXSGEyeHc5SDFaMmJQWVFhVHVCbzlZSHJ4?= =?utf-8?B?TjhTSCtGMzRNemtKVDFXTGFNdDJya0pVTmtFWkVkY2JQODhGZEdSejBsZUtv?= =?utf-8?B?d3p0b1h6UEp1d0dIa09NWUN1bzMwbmx4bUdkR1dxdnN0TW9mVjJKTHQxbFp5?= =?utf-8?B?QlAwNGg2MFRLTldKWUNMdSs1cWxOR3NDRi9BRUZrN1NqOWJEQXVVWDlONlNq?= =?utf-8?B?cUpUdFBTL0prNFJVSW1XMHpKQ0l3bDFGNjZvMXNMSHBWNng4anhhdEhPVU8x?= =?utf-8?B?NzhISXRGVW15ckE3L25WOStQcm9USEJ6VW1ibHlyQzRuQWNjYVoxd0RvWU05?= =?utf-8?B?QmxxUjlGcVIxY2hta1lSK0dBQTgzL3N6bUVUTVZFU1l2VUV4SmdaeFVvbXlu?= =?utf-8?B?bnFNZzVzNWJWYTZ5OHVPSkhqNjNveEpNMTVLWkM1R01CeWx0NDhwL2ozQ2xw?= =?utf-8?B?cHBCVnZkQ0c2MHhwa05hTG1wVUxKOVJ3Q3k5dmlyN3JFc1lMVlFNaktTVTY3?= =?utf-8?B?L2VFOHRzQXlEbGtlbzd4eVkzd0VvbGdHZ1pqT0tEenh4UDlaYXdwbERhd3Nr?= =?utf-8?B?WjE4S1F0cDVVb0lObXlHNkxHQWo2dTRLQ2EySnpPY3BUYnBjenYvYzlJdHdF?= =?utf-8?B?Z1EwbjE2SkJ3WGUwWDh5MnpNMFRhd2RUYlIvOUlCUXA2bTM5R1QxbGVKZGVo?= =?utf-8?Q?ONXsBoHOXRL+SI6R7c=3D?=
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2512; 6: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; 5:WKaZc+0dtj01DyxU3AJKbksBoX/F6w/BQlCwCsDnV33kuQ27AA9T0tmxY2tQt9oYdrt+4V2XQBWlLLGib/RIOULQQoZ44G7/cUzhwwXYFCsqjUwNucXPT4OrWgPgZIlv8E9p7m2nfobauBUTuuP/3w==; 24:5sst0mw+yFGolHupQQBomK7JGKImuv5bcl9+NN0ptHKh0QxKsSLeLryLxCUMp6p4NVF6bXV41SpTdRz3LwJrNFU7IrAxaQSV9CWWDoMmVI4=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2512; 7:xQ7waE955dLKb/GUN2wcP5fHjvEb5dhZVUGwpS+zssb1yhFuwu0zF50UeajX4vSRrsUHbKqbho+IZDEbfwc8LTRumX3EE0m4MDruhZaVU18HxF95boYsQqXue4W2lbHgSBpwFDjzYOoffKfckSeIVXz3JTbCWIuV9718fZW65yBJZm7Vt0ctRG8fNQBfsTKkcdNXjpFH7miD8GYhZeYvf5oe2cYuAGhKm41CSPdonCBxpiEjCFhF6Qj0syEBw6bTztJgEmLqI8AIGK/xLOFytmn0IYUMT2I0dnftdO0XLsB3oDFJwsvGzrRGag1H/VVH4OfMSRh4RbVOE4l1oXGQqw==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Apr 2017 18:31:35.6533 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR05MB2512
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/hhZ37kgfJykv9ubcNx4Z-4vq4LU>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 18:31:39 -0000

I agree that the document represents an update to RFC 4271, for the =
reasons you give.

I don't see any advantage to be gained by going back to square one as =
you talk about in your later paragraphs. If the goal of the authors is =
to say what what a BGP implementation MUST do (and as far as I can tell, =
it is) then it seems to me that this is the right vehicle. Furthermore, =
as of now I don't see any reason to despair of coming to consensus. =
Probably we should let the LC play out and then see where we've landed, =
don't you think? Maybe we will have (rough) consensus to advance the =
document; in that case, done. Maybe we will not; in that case we have to =
decide what to do next.

--John

> On Apr 20, 2017, at 1:50 PM, Alvaro Retana (aretana) =
<aretana@cisco.com> wrote:
>=20
> Jared:
>=20
> Hi!
>=20
> Not everyone in this thread was part of the initial conversations we =
had, so to give a little background:  I think (yes, still) that the =
document (as is in -05) should be marked as updating rfc4271 because it =
starts off saying that it =E2=80=9Cdefines the default behavior of a BGP =
speaker=E2=80=A6=E2=80=9D and later (Section 2) describes specific =
changes pointing at pieces of rfc4271: =E2=80=9C=E2=80=A6MUST consider =
any routes advertised by an EBGP peer ineligible for route selection =
(section 9.1.1 [RFC4271])=E2=80=A6=E2=80=9D.
>=20
> Again, what gives me heartburn and the reason this document caught my =
attention is that change in the default =E2=80=93 and from this thread, =
I can see that is an issue for others.
>=20
>=20
> Reading what you wrote below, about other potential options to achieve =
the same result, I agree with you that the bar doesn=E2=80=99t have to =
be as high as changing the default in rfc4271.  But the current document =
doesn=E2=80=99t reflect that.
>=20
> Maybe what we need is to describe the solution in a way that is not so =
rfc4271-specific.  Explain what the behavior should be (not how to =
achieve it), and even talk about the operational pain, and what =
operators should consider with the current not-specified behavior (which =
the document doesn=E2=80=99t do much of now).  I think that would be a =
very different document with a different set of discussion points, but =
one that could lead to the goal.
>=20
> During the early thread of this draft (a couple of years ago), several =
people suggested that the status should be a BCP.  I can see how a =
document explaining the pains and the considerations for Internet =
routers could be a BCP.
>=20
> Just trying to move the conversation forward.
>=20
> Alvaro.
...=


From nobody Thu Apr 20 11:41:02 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4459E1314FD for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 11:41:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.022
X-Spam-Level: 
X-Spam-Status: No, score=-2.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yS6LhhkkmJhW for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 11:40:59 -0700 (PDT)
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0105.outbound.protection.outlook.com [104.47.38.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31BBD1314F9 for <idr@ietf.org>; Thu, 20 Apr 2017 11:40:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=3DYXE+S4IN0MnH7b0Ffvobog3ab0V1TV4BskFoX+fgM=; b=UX82B1qf2XIF++PdgtytRw4IP+SFbARJCJRIfLn9NtYWz7HKtPdkYa5KpBmJ18HI9gSKScaO3L7HLTjUen/Hxwr3HAySKqczHfP9mZG7+dXA5LETlypwO0zqiUn+rVMM79P0NUloLdSGAhwy49Dd/KBo2TaB+Ig1O7BVa6D18EE=
Authentication-Results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.33.8] (66.129.241.12) by BN3PR05MB2498.namprd05.prod.outlook.com (10.167.3.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1061.6; Thu, 20 Apr 2017 18:40:57 +0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <b57162ec-f806-6e86-7713-58608f72c468@cisco.com>
Date: Thu, 20 Apr 2017 14:40:52 -0400
CC: Job Snijders <job@ntt.net>, <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Transfer-Encoding: quoted-printable
Message-ID: <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com>
To: Enke Chen <enkechen@cisco.com>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR11CA0005.namprd11.prod.outlook.com (10.172.17.15) To BN3PR05MB2498.namprd05.prod.outlook.com (10.167.3.27)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 4efe2171-a8ab-46d9-fa0a-08d4881cc8cf
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:BN3PR05MB2498; 
X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 3:LkpfiZNsESY0glwINIX8aWtFjmbbDtp6hm+uaPljuVa0o0vY+hMat5ONHKOeIjR2wwkQ/ZpwbTOSDAQxXoJiJuqxJhu/lHIdLr7adpgIo1ikvZi+VLTeosdexY+q2uo3uZwsBwKUKjVyDWuAJvkLYxex1u+yJeGC+IzCSERrl7Di3XC+d7NERhriq/ACxumm3/B07FRmI2dwEmC7bSi5xvFmP0fofV9+PzfU7Iq/uTwGuAb4Dtcmk3f+F3Rcn7fRaH9sRqh54wI5ewn6DJD4YtcjSYRj7gHWdnKMgrUId/hcZJIpcBGVV3NTBQoJQkJo9BYcyJxFAXPPI7ztm9GFEBeRnBoZvszkgP9q+/gfCPQ=; 25:F5W/DvskVRDqFwy4kPUtip3n+ZDQOHNTZclhwwKs2cJWj8+sP2xlCSnsXQTxFAxUv4GY5TW3Dp+h4CHsw9q7DSwtAzRCi6ae/NY+JWAVPhzPDcU/GPeIjqtA3PGvIwDSGfTdt1CJfKOT4xSfFcngLoTlBm1fCkTN/vHb3cyPfwKp4LAm9RemkfZnO5Pr8SDf9QqgSEdvERgJ6MgA8PZq8y8C/edTK3FaJy/CBVmHXsPpWrguIsYyBCUdsU14B56ENrPVtHwyl4vKK24J55To2NtP4ntZB5LMFHoQpc3eBeSlfUodPJyMh2Vye85bYzaNzKE8jnyvaNnRazbad9DhhAmQwcLrost6by+VCQO5/DACZ3TjRDVMtc9Cm/W2SKTiwQrGTdnIzqXN/V5Ap+RYn3CbEPUrUYyMnOy6zZ3A6WuHuzpL51yYJUgn8RcqQ/f4E3tA+auqySsgFR4j47jJ+b+L6ZBocc412nARzH4rYXA=
X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 31:cN4cp0a++/da0Ow7IM2EIKQefKMYwSrJ7J7oWGLSfsSVfU/3mrKHZGlZZ559ESwDRzjOhpKM239lxFOIka1+mi2iUxNchLbJbhY9FcP6paQok/hV0jZe8Kx2I1sWM9Ecs/DewcZiL0+aouRfMKQzww7FtGvknYDpukd1DG9IcqQzGnNn+71mxsiXo2D2zwSt/FtoGLZlVUGypfnlUB69AouwpOCV1xtD+efKjpwMEcmPi8zVrYA02g3jki9qzWQvF5yUHUJJmkUDN2Cof57+sg==; 20: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
X-Microsoft-Antispam-PRVS: <BN3PR05MB2498C4C37BC366512E0AAD55AA1B0@BN3PR05MB2498.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(124276396282122)(192374486261705)(95692535739014); 
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(6055026)(6041248)(20161123564025)(20161123560025)(20161123555025)(20161123562025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(6072148); SRVR:BN3PR05MB2498; BCL:0; PCL:0; RULEID:; SRVR:BN3PR05MB2498; 
X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 4:wBIYmr7KNcVC0ICQPv4H5PZHQaaH7UuN+VXzQzqGkEAzmiqbd/1bcvbHrXHKArGqeJvP+xn5+ZdcPNSg2cp8nUhFrPUvlVh0lc3lJVRZ1+SuD45okyqdbjg+xo3oVnAAjKresPTDODbO6yAsBBCzezX1P9bwVvOUz6kfyGmGSBTwIyWiB9zAWLk++CrK7IZFYlYUoQwasIQPRD+qQAqe8grSj2nmhMBN6/+qnd8iwu14Tf1xCaGbN6/NSE9mN/e3EjIvD+RNRomhlqcXqyCOmaZ6fP2DodEG8fTiWfKzHu8wrctYeeFkisA1RhgLgdSl8xGbh/vfZ59+5ntqPS7t4QAdgDXtlPyXkf64+yuFR45p5iMMRRxsyRLNLK5D2PEuLUkPk0NbAAw+tY/qzEMmD0m9vwA81xr/sX+e8TWrp5L92M/Gzp9m1EAYmbnPmfIzRd/FPlsj+/3EXtiZQLzG+MRVh2YW03wWdt4rlRH4I272UxDq0zZiPRNMZQxuYC3He127cODD4WZj3NK19WxCXN3fGmCHWnZ+KVmFh40Rw+3CmbORGNPYV5mygx9qjmsTLdRLSvFD2M32egKFIhV2Pox1xjbSACKIawwkSOv+6sd1ClUrDIBGPKgBtS93VuMhvayKd69tV+LWydJcZrXh3e5rsQ5SaWDt4OKZp9rUNzSchzjQXmB/rPMXcrggbpkmsC9C8uH400QHMJHhp2e9EAz7rlgeKdBgLhO6FYYv55pp3qj2pn3bO938W/LRF7IhN20EHqwoFRjcR6uuDwGqa6Pe0NGruM2mJMUyJApcdOP+UH2BxMsiwyhCqEWj+y6xgJImOjg5oVeNKioAAp29fNlHV3AkqRmDHcf3fWbZuFYuPB5G87QCmLAa5Ud8mQkH
X-Forefront-PRVS: 02830F0362
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(39850400002)(39860400002)(39840400002)(39450400003)(39400400002)(39410400002)(377454003)(24454002)(2906002)(229853002)(5660300001)(50986999)(76176999)(6916009)(6666003)(2950100002)(33656002)(23676002)(6116002)(8746002)(7736002)(3846002)(305945005)(81166006)(8676002)(4326008)(42186005)(50226002)(38730400002)(110136004)(50466002)(189998001)(25786009)(230783001)(93886004)(82746002)(47776003)(36756003)(66066001)(83716003)(77096006)(6486002)(57306001)(86362001)(54906002)(53936002)(6246003)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR05MB2498; H:[172.29.33.8]; FPR:; SPF:None;  MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtCTjNQUjA1TUIyNDk4OzIzOlhVblV4dzNQMkk4SWdHVUdYUjloYVN4S2NV?= =?utf-8?B?VnhYVkVkMWRYRzQrdzJEbUtIam9SQ3JmdWdrRWYyQkhSMFFwS09BaUhZckcw?= =?utf-8?B?dG9EeHVveGs1T2lpdFJtQXJNUWxRZkR3RFdoSmdyNDhuSTRWRlI2Mk9QQ2Rt?= =?utf-8?B?a1N2eUFvdGJDMFBxU0E4QzNUSFRlRk9NZU9CNUVINHQ5M1h5OUFiTWZETmlV?= =?utf-8?B?Q2VuT1Q5QTBZcFlMUGpjcHVwcjE2bHJQMzFXYVM4UHdBVTE1Ylk2TkRpWkJy?= =?utf-8?B?eENzZUpSMFhFMEpUS2xQc1g1bkFHTVZZM1hiL202RUVZMXl3elZ1NHd4U3hk?= =?utf-8?B?aHovOWVNTERRZ1dmdElFeC9Kd2t5NjBuWEZYZU5RV2hIOWFZYXVVa0twelFR?= =?utf-8?B?bE02NWdGdTQ1Qzl2UFE1T0xTTmhZbmRVUWhqUkFlLzZaK3VFdlBsNTdtUVBz?= =?utf-8?B?aTBTRDdjWEZqaUE3emFRRmk0RVQyMGF2WmhobkJ3RE9JMUZpVjlIODJ5cGpZ?= =?utf-8?B?ZC91MUlSdjBpb0h6VVM4ckpLMEV1QWkzQW5FdjJjc3dGdWVYdTkxcUF3ZVpx?= =?utf-8?B?QVhCa0UxV1poMzYxQTlQNFhvTTd3ZU9DUDdmODFvKzc3MW0reUFmQ0grQmp5?= =?utf-8?B?Sk9NbjRRZ3FUdEpqU3ZVZXRGNm5FaUI1U3kzbGNWdkpVdmN1RmNibVYrS21I?= =?utf-8?B?WVNlc0REbllQeHJ6ZldiSGM4ZG4vaUswQ3c3SWkxUXJ5V21xUXJCUjY0WVZ2?= =?utf-8?B?U1FiSXBhNWw4cEQrdUx3WGJOK21RcVRCaXo0cXh4TzlpTk8vMmdZeXVxVlVo?= =?utf-8?B?dzYxanFCajhqYWNTZHlrSVl3azBOYmticmVCZTN5L3l5d0tqbHZkY3ZnSVdl?= =?utf-8?B?eDVQd3pkc0lsTWp3Z3JmSXhkSytBZ3d6K25sTHZOdVJ4ek9mNmdrdVpNdnhh?= =?utf-8?B?bVlDd0ttTXpUbE5Nc2FrYkQwZ24xWjZraWJHcVB5b2lrdlpuci9vb1JWc1RE?= =?utf-8?B?cE9GaTlET2ppTDZ5bVlFQXBlUWFhMVhWWFo2RUVqV0x0M2NEMUhDOEx0M2t4?= =?utf-8?B?cFFXcmdYVmhabmhud2kwSmVaT01jZFlHWXMzVkY1dm4vQkwra0J1bEdvZ2Ns?= =?utf-8?B?NEMyL1lSQnlvQ1dUWGZjVWtWdmE3QkxYVFpVR2ViOFJXMkdOK2RuSldleDBS?= =?utf-8?B?VlJ0bW1kbkxLL3JsbHhhSUo3MGFZcDhOOGxYOStCSGc2RHp6VnFmR3kyenU1?= =?utf-8?B?emJ5WmpUb0k3cDZoT2w1Y1RWRVBTRnhCMGlCNmxpNVdFQlowMTJ4WitIK1M1?= =?utf-8?B?NjBINGVzdWhKRHJld3B6cmNNZlJOOGpKaXY5RTRINlBkVmlZcTZIYURhZk5t?= =?utf-8?B?L2NjSWVGZTIyakp4QlBXY0FyZzRTZXNTd1FUNmRPRTZOUnpJMDRWS1d0S0xq?= =?utf-8?B?c0VSaU5qTmNGRk5EZUVqZlU1M3dRQnVGU3FWQkU3dzNabWhCaEp0WkdLbWRy?= =?utf-8?B?SXF6bmFsMEpNa2lvUEFVMWF3d0tKSmtDM2ZYZ0JPOERyS3RFZHNpYmo5UFA4?= =?utf-8?B?MHM0alJoTFhiVjI3TG9sTTB4d01FMjhOaHEwSERCSC8yWjRDSmRuVmZjL0xy?= =?utf-8?B?RDN3eUgyNlVvMEF1dHVVY1c5YnhYYnlXM2dBdmpDQndNQ3VlMWN4blhUeDVT?= =?utf-8?Q?hWeayb8Cv5HZLE/5kE=3D?=
X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 6:Si+GH5kmnavqxMsNyIGXI3SYWh3pg8+AUxWedlFWHHLon5y16NZdizmV0Biq0hw1iY0/bw0sEEL0fhzMpH+dvEs55lyOCfDzQwi7WO78+P/Ju0F9ZZ1O3+HOaldw9GQClau/DV16AOXw6d0HKhB8IYcq1cd3IaE+yKse0lqpmjDTWn79GUh3bPsAEFu5bZ5VsbmebP4emhbmLEAZgJdoMj+kF8Cc/QQhR2lk5X3efzbE11Fa16Wvc7M3/UwMGCVpBvw+zCStZPHhAf1CO8NLwM2zOhekeSgLF52IV+dZeIY//d49vL9+ioCM0VH0TzSs58JtzrVh8C6kYAs+4in5iWAYvVNyB2oGu35ngOpwcJp8JbdBLg+OuDbEMa5rxA+Sxg/pTopeWU4AweoctSHxDWmqCtq7J9l0YvDBFAVNfiuvkSREeD3tAGPT2qC6Eo/RpJmLEPUqV51RtuS/Eoz28v1loP6nN9JDDk9Ws324mO3bD4ZuUa2/ittY0UsVj7bSuLS0O12ppD6AVDZMEPAyxSVPAk3uPCd+Dz7VKho1paU=; 5:lntQHWGeJsXV25o40H9mRVqIxdsyQmDfpC+LV4X9iai3nLeqKT+GMc503Kpc8vCww6bO5qlz52RIp3S7uXFjnsd6bZsYnLaWx4RSc+VArfPxg3CaQbGjDmunU0x7DoQt6Um9v3qpXVHDs0I3USLZmw==; 24:HqJhTvUeTqprBwnrLs+jZquf/oqW0lcTO3Uk7gt199KC1CNMSEL2319l6yL4mo7X+0HfHAgUOw7KM3biO+iZy9N+Z5KrJjUzeZZnE9kcHXA=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 7:L0sB6TqW75WqFvT5KMQXgaLvSr8S6YpL8YOlIuJBav+N2ZaXRLJxS12GdGzsZ18nWpIquSPIe/VrQHn/UvEEErKZCNp5rRs4aeQPCc3kVl0pfT/YzaAXjyap4jhpRvvrt+LBJ0aWzm/NtLB/VUrfuevksvlOI+cRHK2lbJbvD/oNnhfCEdjKneA88U1EaYjOHkUJnRZ+FjwIwoJML+dXZtoKM+v0gDo9pwvBsSgiXMntWIAiI/jdGySaVzMnWApgFl4Lkw0cDwLfqs47zKnphskFucUaRbJ8V9207JIK0R2U1WKlXSz1uE+1GKww/+5ksDj9bJVgS7xwVnJI4epopg==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Apr 2017 18:40:57.1864 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR05MB2498
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/XWEq5OFQyD0GnGDZSFORfDFFjOk>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 18:41:01 -0000

Enke,

On Apr 20, 2017, at 11:57 AM, Enke Chen <enkechen@cisco.com> wrote:

> It depends on the customer base and also how long the software has =
been deployed.
> Just think about the scenario that a large number of customers would =
lose network
> connectivity unexpectedly due to a default behavior change in the =
code. Such outages
> could keep happening to different customers for years to come.
>=20
> Perhaps, changing "impossible" to "impractical" :-)

Various people have provided worked examples of how they think this =
change could be effected without causing the disruptions you warn of. =
I've pasted one example (from Jared) below. I haven't seen any response =
or acknowledgement from you, to those suggestions, just the repetition =
of your initial concern. I for one don't understand why you think a =
scheme such as Jared describes would be either "impossible" or =
"impractical".

If you are unconvinced about the practicality of such a scheme, it would =
be great if you could describe why.=20

Thanks,

--John

Jared's message:
> On Apr 20, 2017, at 9:40 AM, Jared Mauch <jared@puck.nether.net> =
wrote:
>=20
>=20
>> On Apr 19, 2017, at 6:26 PM, Robert Raszuk <robert@raszuk.net> wrote:
>>=20
>> Keyur,
>>=20
>> You can not set "insecure mode" before you reload the OS as current =
OS does not have such knob. Unless you delay the deployment across N =
releases and enforce sequenced upgrade.
>=20
> Infact, this is the recommendation that I=E2=80=99ve provided to =
vendors that have expressed concerns.  There are many defaults that have =
not always been displayed, but things like IOS have =E2=80=9Cshow run =
all=E2=80=9D so you can see these. =20
>=20
> Something like the =E2=80=98bgp unsafe-ebgp-policy=E2=80=99 could be =
generated on their respective implementations.  I didn=E2=80=99t think =
that GROW/IDR needed to tell implementors this level of how to manage =
their release, so this does seem somewhat out of scope, but a concern I =
can see needs to be thought about.
>=20
>> The only way to prevent massive reachability failure upon reload due =
to complete silent bgp prefix drop is to configure inbound policy for =
all EBGP sessions before the reload and run with new image.=20
>=20
> Since we=E2=80=99re talking about how to operate a network:
> - People who are taking advantage of an undefined behavior will always =
be surprised
> - Vendors can take the N+1.x and N+2.x release strategy, where in N =
and N+1 they generate their equivalent of IOS-XR and the "bgp =
unsafe-ebgp-policy=E2=80=9D policy to prevent their customers from =
breaking
> - In a release N+2(or more) that would become the =E2=80=9Cdefault=E2=80=
=9D.
>=20
>> Of course this is all assuming that someone will read carefully the =
release notes :)=20
>=20
> Most people don=E2=80=99t, and I=E2=80=99ve always suggested to =
vendors they implement some sort of incremental approach to resolving =
this.
>=20
> What worries me is that there is a major incumbent provider who =
doesn=E2=80=99t see this as the serious (and well-documented) security =
issue that it is for those operating large networks.
>=20
>> If they do not the troubleshooting of this will be really painful ! =
CE will see EBGP session as UP, will get all the routes and will send =
his routes. CE will have no clue if PE dropped or accepted his routes. =
Likewise on the other end .. Only imagine a network which has 10s of =
thousands of VPN CEs as Bruno mentioned and their provider not following =
all releases CEs are running.=20
>=20
>=20
> If they don=E2=80=99t know how to troubleshoot BGP, that isn=E2=80=99t =
the vendors fault.
>=20
>> At least doing it as part of OPEN msg will be immediately indicated =
to both ends.=20
>=20
> This is you promoting a different draft, I recommend another thread =
for that draft.
>=20
> - Jared
...=


From nobody Thu Apr 20 11:43:26 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24D0513150E for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 11:43:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h6dRmeWfJR9d for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 11:43:24 -0700 (PDT)
Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27ED413150A for <idr@ietf.org>; Thu, 20 Apr 2017 11:43:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2046; q=dns/txt; s=iport; t=1492713800; x=1493923400; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=LQiP8iSgoRzCU+NQRsL1snB8o1n1l957DRuB1UyGvt0=; b=SEfMysLTNKF0p2pbziH3h9jB5vZpWs37jBYDLhDk2B96+avAPsOi7Rc4 tbtdxHSS/da+kACD9VX7OlXcbzOC1CDuHFYBVjle2VO2+4JAGPrE/Y/FO jbTgRkUksyxcQi1/z7k/gFItRSTTdddcSwT7bTZhE7IkrdRrOUXvh4ao2 g=;
X-IronPort-AV: E=Sophos;i="5.37,225,1488844800"; d="scan'208";a="415265558"
Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Apr 2017 18:43:19 +0000
Received: from [10.24.16.81] ([10.24.16.81]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v3KIhHnX004359; Thu, 20 Apr 2017 18:43:17 GMT
To: Jared Mauch <jared@puck.Nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net>
Cc: aretana@cisco.com, Job Snijders <job@ntt.net>, Hares Susan <shares@ndzh.com>, idr@ietf.org, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <f2b9f4e6-a937-cd4b-82d7-620778a5bc70@cisco.com>
Date: Thu, 20 Apr 2017 11:43:17 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <20170420160736.GB15676@puck.nether.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/6dgYC9YDVEbpMR4m4NgXweILpYc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 18:43:25 -0000

Jared,

Also to be clear, I do not question your intentions.  Just the contrary, I understand
the operational issue and the proposal, and I am fine for it to be a BCP.

My question is about the "proposed standard" track and also the mandate for changing
the default behavior in the code.

Regards, -- Enke

On 4/20/17 9:07 AM, Jared Mauch wrote:
> On Thu, Apr 20, 2017 at 08:57:07AM -0700, Enke Chen wrote:
>> Job,
>>
>> It depends on the customer base and also how long the software has been deployed.
>> Just think about the scenario that a large number of customers would lose network
>> connectivity unexpectedly due to a default behavior change in the code. Such outages
>> could keep happening to different customers for years to come.
>>
>> Perhaps, changing "impossible" to "impractical" :-)
> 
> 	I'd like to call it well-considered. :-)
> 
> 	I'm operating a network with Juniper, NX-OS, IOS-XR, IOS-Classic, IOS-XE,
> and various implementations that require custom policy to be implemented.
> 
> 	There can be a path forward plotted that would prevent currently
> deployed people from having issues, we're surely bright enough to do that.
> 
> 	To make it clear: I don't want to break someones routers.
> 
> 	I do want to make it harder for someone to leak a table when they
> have a new router.
> 
> 	I don't belive the bar should be high, it can be embedded in whatever
> configuration/ZTP/automation/cut+paste template out there.  It could come
> in the form of yang over netconf, or a DHCPv6/DHCPv4 option.  It could
> come from a TXT record in DNS, or wahtever configuration method the vendor
> invents that is new and unimagined by th WG today.
> 
> 	I don't feel it requires updating 4271 to attain that goal, it's
> clear implementors have seen a path to do this today without having
> a concern with 4271, and I believe that Alvaro is wrong in the presumption
> this document updates 4271.  (I'm also willing to be told that I'm too rough
> for consensus :-).
> 
> 	- Jared
> 


From nobody Thu Apr 20 13:00:56 2017
Return-Path: <erosen@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A969131654 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 13:00:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.022
X-Spam-Level: 
X-Spam-Status: No, score=-2.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vum2dqHCSpBP for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 13:00:47 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0101.outbound.protection.outlook.com [104.47.42.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62411131647 for <idr@ietf.org>; Thu, 20 Apr 2017 13:00:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=+70a7CNobvHAaVHnZK9RxytOpslvhYDv8ZOgjIsl0wc=; b=GeqLVi/bV0yWRwFxv7MDAsx+gMa82FHYWjmWZ0B7bL4MtDXkAfyUpoPxFCJPv+gIZrO7MuuvhkkZP08VMvOeph54uUFGig87fOeDv05lL3Y+Yprkay3aEuqii3byi4Q76uFh5pjlnein/kSn2OP3+RSoIDPp/9StFJlPNxIzvgY=
Authentication-Results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.35.36] (66.129.241.12) by BL2PR05MB2177.namprd05.prod.outlook.com (10.167.98.137) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Thu, 20 Apr 2017 20:00:40 +0000
To: Tony Przygienda <tonysietf@gmail.com>, Brian Dickson <brian.peter.dickson@gmail.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com>
CC: "idr@ietf.org" <idr@ietf.org>
From: Eric C Rosen <erosen@juniper.net>
Message-ID: <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net>
Date: Thu, 20 Apr 2017 16:00:39 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR20CA0005.namprd20.prod.outlook.com (10.173.158.143) To BL2PR05MB2177.namprd05.prod.outlook.com (10.167.98.137)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 9d39292f-8086-41fb-ef80-08d48827ebf2
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:BL2PR05MB2177; 
X-Microsoft-Exchange-Diagnostics: 1; BL2PR05MB2177; 3:Ex8MonhLH6S5ShIr+tchMAml9YtOvt8HhcnfEEUng9mE76Q8JhkrZ66Aq5eAH+kBLceASdpFLTqiwFs4BOqsBq0GjWs4iAeproigV76Ba/8yQx+8gfVVaOrOV75GaPlme9xc0NQIpteU5ygTg117POgNbO+kI2vHaP2ITTJszaqfba3G6Kp5fZCZf6Ou3jloy0dv3AVJ6UG4N7cRr1ZnPpcalSh5NSzlV8biHlJIEkxuYBsT/GQJ0TR7zS4+B69mhqZjn993HB4SDciNGpP8da7HWkvWMCa85GFyL+nL9SEzID3eNXL3EAYUyBgLO8p0IN6Vd9F8KZiilwW1T7kSAKidibkjVjNlETbBf9dd0XE=; 25:oLPiL/yCpKDHgyYYjjB+oplm+iPYhgbINhZNRFhfpNcsGcBTdBD3TJVOly+t5OSYNGPnW75iy99LEiUw81x3c3N01MB+kV9T8R8EMpRNlq8rBbqEgmc4XYC5yBjnjdxULm9lusMS/5//PZxQWOB+mYO8yu1ACz8XqtKyoZJDEVJSzDePfn/53Bste/A59DVTjCM2SiOcEWupcL3g2/CX+5x3AuU44dI6pefYy8rkA0neVnDlamnve3+5lm9BU1evbsHuaoMfbhUGB8L98zDg+d+2PasovvYT9wWAqJxnH71JAAppKyDNB/CFM8RiDpmAw7GGS/5KNj8DcRRrgyH3rqD/qV4+wSK0aaePfF68vP9VqumkH/7zyM6ySMDx1KJ6421snO2rmr75YUuY5p/ydBvtc6aX9q4eALBzhUXCn7JlKsxTQEZJaz58ipRpqqUtYHaR6OrFt3Jb7lVoNKDF7paIvkC/uJdDqD/eltoC99M=
X-Microsoft-Exchange-Diagnostics: 1; BL2PR05MB2177; 31:SrovBfrZgHKqYOs5ARvZ0UmObulyhAq+xT/PjBP/QUAUq2oEBd+3tsWdkzDG0FCVWPwP7nqdxNBV27K6mtE4oi25DAjcjPOd+8QNFQLewVfWr8Nh7cgodtivvzn3Aj++s0pBz2du+PXrm9168n0xak2+xrIi1+h++ry9CJ1Wv3xvJX2OrNfELrI624758R+musWrVn+029D6oDYVHRi7MTei0qx6oLTnTEe9BJMO9Zw=; 20:gwkrbsH64RE2wczW6QrajdG+GSCcJIPeWSNdY3BIRI4PC0htTg2CNYF2eQiIxpZaoy1feX9VomY32sGIDAuqSvwVYZ3Bex4eGQEB6au3FLkDkeqi9PlvRCl44f2iiTZja2q827gGa5XreoqcLvDskEAxuVSY94Pm6Vzbpy4422v9PPd45Su3tAdw3a3+7qG2y5CX49cjg0FnlTYLYGpZvRot+BhjIUTxf+UJ6k79/AcJypIYt14faEygs9R8nrs42iLfqsXxmM7QdChhDTBMvGH6Y/CR38s5Vr9mkBXeh82iQmFFIqSbidyFTd8fBPtrNFuSQ501NFsY7Q4sQDljG9S9W1hI86id8ZzrAoWoI5yiQfr8mGpObk3vL6g/lV26OXnQdikzVz1i88YnKrYGp+LIaS/S+TUr0sS0M7OjsC2RTcwt/asPEUWIbkNdsaI0HaC2l9rgDT7j+lk2mszmht2/SmIFNJxb963uLC2+wIaC8ZO+YTuvlLkKav7um746KpfPKKXEt4GAviiwLIq7TUPO/u7ZgrCSurSdcUpcfs7fNRourlRYVcvt4EXNb5WcfFMEK8VV+HxfoIwk60zChvbk1sWni2+5rU79PjWoX+4=
X-Microsoft-Antispam-PRVS: <BL2PR05MB21770A92F0FA16C899624D4FD41B0@BL2PR05MB2177.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(192374486261705);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(6055026)(6041248)(20161123564025)(20161123560025)(20161123562025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123555025)(6072148); SRVR:BL2PR05MB2177; BCL:0; PCL:0; RULEID:; SRVR:BL2PR05MB2177; 
X-Microsoft-Exchange-Diagnostics: 1; BL2PR05MB2177; 4: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
X-Forefront-PRVS: 02830F0362
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(39860400002)(39450400003)(39400400002)(39840400002)(39850400002)(39410400002)(377454003)(24454002)(6116002)(3846002)(2906002)(561944003)(305945005)(189998001)(7736002)(230700001)(4001350100001)(54356999)(38730400002)(76176999)(50986999)(31696002)(36756003)(86362001)(53546009)(25786009)(5660300001)(42186005)(6246003)(6486002)(77096006)(23746002)(53936002)(47776003)(93886004)(90366009)(65956001)(65806001)(66066001)(2950100002)(50466002)(31686004)(33646002)(83506001)(4326008)(81166006)(8676002); DIR:OUT; SFP:1102; SCL:1; SRVR:BL2PR05MB2177; H:[172.29.35.36]; FPR:; SPF:None; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?Windows-1252?Q?1; BL2PR05MB2177; 23:0QTn+AaoEflhtHeHKq3MC3YTErvJuo1nom7+X?= =?Windows-1252?Q?Y/j0qEJrhfQ+DedpBWuiVqakcAtJrDYVP44ulyxqAKU53UhJAQTtUtyq?= =?Windows-1252?Q?SQYg8DeMlHmN9LSLVlUxFP9gkZvICXtl9oFcaPGNWMSi7CMVzKZgwGFI?= =?Windows-1252?Q?NK8ndBxAWINtrz7sZN68Fs/uKsMclTKQDO8C0Pt8Mh99cOKpXx4B8vZL?= =?Windows-1252?Q?TEa5VbeUA2ymwsgDbGkTJft374TIllPtFVvEH1di6GH6dZ6dMwweW4Cx?= =?Windows-1252?Q?4igFZRpxAalMYiyDYOBWjpXqbUePD/urh0oCrQ0LAhJuE7K2FcKIt0Cy?= =?Windows-1252?Q?n/bFBVeCZJOUvi9aKmU4UV7V1+62SsT9N/Q7wo3uVZb9LLjiky7n7zQx?= =?Windows-1252?Q?p/laoqugWaS3O2gzmh9kJBxXvDOrPb0WO+k5e7X3q65PC0aEZGgMIp4D?= =?Windows-1252?Q?8fWABZLOvf8t5UnnoXdntuEHbEmmLV6lWiO6hR00dvvpk715f3BKoL1V?= =?Windows-1252?Q?hgUfd9sPyiUkMkBuGNXR57vjqtmL4Oi07gyiKxcTDiAPjOa2B7iZPf9p?= =?Windows-1252?Q?I14GOrX5rsnLuwl+eJJWEfUAbsHoONR0cvItOy0PQ2kHXAkyq7BE0MyS?= =?Windows-1252?Q?VVtKkEZvnGqS1F8mzUJQUgW4yiMHaGRUdi+hnalF7sLF0asI6nzWtj3A?= =?Windows-1252?Q?XPTHxOW8w2A1uG95A2kmAFWZfQrN1TUWM+D9j5ekQFyFxJKSfQF4aTmM?= =?Windows-1252?Q?m1zpdb7ULZoD8GAg6OQHeSGpTouW5w23+WmGUrSWWh5RPnwWVQdUWRDB?= =?Windows-1252?Q?JREEBfskWTnZFF0/BxJf+CJteaYs9l1LaZOTHpBZ+mPQAT+ROb9gbJhD?= =?Windows-1252?Q?bF3sOfSRFmJe5zARpTuqT9g+mMPjnGmmHPo7SegoG/QWsFPhBGNqzowN?= =?Windows-1252?Q?8YXixiij2oo3Um7PNMY0JX2DQQXHmePxjgGeIg0LVp4FAAo5B5Kgxr7j?= =?Windows-1252?Q?D78nfotowiZNxXy3aFwzOPh9D9WSVrekQuEz8hapRkVYs9hNQTQvgxyZ?= =?Windows-1252?Q?lem2CVJ6ztYyAYIGKupOqHa/zALVw32jCb6NRIpGO2f+D26jFqSV6ULm?= =?Windows-1252?Q?hoLrV/BRmJVveN10FqstWgYJ21F9YXEk/1DdpbQ5jeb965DACa22eNYf?= =?Windows-1252?Q?e5f2N1QfuxeWtTyBJbRYndh8Jgzo2xMh3KQBnGkWr08k7QbKXkxw53q2?= =?Windows-1252?Q?8rONWcDnHsZoJmIIgA7O9cv+O5BgaCTcbDOOvu1jflNUexkr9sL50Fxo?= =?Windows-1252?Q?CLUmg37Jafk2g4e1FkvQTYrOF+qA3/6Z0kIsvigsNjWjp4=3D?=
X-Microsoft-Exchange-Diagnostics: 1; BL2PR05MB2177; 6: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; 5:7f00t8qMe98fXdSRKteEoAMiAmxspnxnA5rB4rE9T5UMYZl5CbAnl1XBvpZE6fLBtVqM1nUn91PkYIwFziqfyZaBILZ8KXenWAgG6aHPr7UAqkvJ9VlWD/mDrSNPj+vp3hylzG1FYDOdQpZNex06Xg==; 24:oaE9psLL2DO33Mk1jrB/CClbQpB2mTwKnh0cd67Ea0oZkaIcYSbGTzCQhy3ac5+jQfOceu8RKOhm74/lvtp0zRpDq9lS6gMj7yVBMr3+D88=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; BL2PR05MB2177; 7:LiTq/O+2r+/NkBJeV4jkpqo01JMVXueEfThp2C09VF4j9YQZKkFuYo4qSngPjDmuzLgQKrC2NBQsxIt5KXYoztIoPaHm3wjSsEWZrA8wQ26+Zg14M2VRbKY/dC2THphe+gNg2+9UDCsTb4w81RDKKktCszsOS2mNTzs3nwcCI4Nh8EuaF6jGHJtdluqlhrExzCrEBfaqbU9RSLjy0t60iqQqq1UBHT0CqNGJ1CNX0vXXN1hUToIHaaI0U2UmOxX7qN7CBCOSaI+5oSNPRx1MtDdy/opLr7iSMsXk1RD53vrvKVM6lyhiTEQ4PY2SnFHi6VZXhXyA5fUR8Lp5lYaMpg==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Apr 2017 20:00:40.2975 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL2PR05MB2177
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/8-JLRbEtzHlFuOAIu2xrDdJvSwo>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 20:00:50 -0000

On 4/20/2017 2:24 PM, Tony Przygienda wrote:
> Can't miss that food fight ;-)

It did seem to degenerate rapidly into "if you don't agree with my 
proposal, you don't care about security".  ;-(

I agree with Enke that surprising your customers with a change in 
behavior due to altered defaults is generally considered to be a big no-no.

When the customers complain about a change in behavior, it is not 
considered appropriate to respond with "it's not my fault, you should 
have read the release notes", or "it's not my fault that you don't know 
how to troubleshoot BGP", or "it's not my fault that you didn't do your 
due diligence".

Phasing in a change of behavior over several releases is not a practical 
solution, because:

a) Customers will still be surprised when the default behavior finally 
changes, and
b) Many customers won't deploy all the releases anyway.

>
> Having said that, I think this is BCP material at best and if this is 
> a BCP then
>
> i) a "backward compatibility a.k.a which end of the stick is sharp" 
> section is very advisable

I would agree that something more than "figure out how to configure the 
new release to behave like the old release" would be helpful.

> ii) the BCP should describe which customer segment is best served with 
> which default
>

But then operators from different segments would have to get together to 
understand each others' requirements, and they'd have to respect each 
others' opinions as well.   I can't wait to see what happens when the 
"trust nobody" folks get together with the "zeroconfig plug and play" 
folks ;-)

The dilemma is that there is a real security problem in certain 
environments, but the proposed solution seems to have unintended 
side-effects that are problematic.  Then the question becomes whether 
the benefits are worth the cost, and this is not really a question that 
can be resolved by IETF consensus.







From nobody Thu Apr 20 13:19:55 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1A00129C3D for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 13:19:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gEoNwQRSzJ0h for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 13:19:48 -0700 (PDT)
Received: from mail-io0-x231.google.com (mail-io0-x231.google.com [IPv6:2607:f8b0:4001:c06::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D545513162F for <idr@ietf.org>; Thu, 20 Apr 2017 13:19:47 -0700 (PDT)
Received: by mail-io0-x231.google.com with SMTP id a103so86167029ioj.1 for <idr@ietf.org>; Thu, 20 Apr 2017 13:19:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=6bK40W10xmTjBd+xn39s8K3XIEVXQM6W1SF6gPx1PvM=; b=SBmHxD2sAv10GlOUbdnuPyeRSbzlnAKy+jiHGb6c6mVx5jp1awr2Igsmbz3AS+WaXg 82WgXxUC8eDTsGXHcxsS7YfJ6AIQuK4tXO3pzJOeHOj/1h+2OXUIHDefWZJ4WgiY//79 kmhuuMqkn6I9+zkKTk3KUK4XII6XnJhcXtC1OU4+u9HkfL4Mo0e8oue/76+jyB4ezYoI 4UoOJUcoSzAY/AstJL1O04LL82aT0t+hfVlaxA0JZ9D8XvSA8D+LW9l1+euBv1TDO2DV Jkhcedln/bCqx4irne+j72Q1sHIHfaXLeHs2Ge2Mk+XiImmEjBU3qePlZ5kmoRivwBTE A/VQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=6bK40W10xmTjBd+xn39s8K3XIEVXQM6W1SF6gPx1PvM=; b=hnO04OBcQ+AZkKKIW4ADG1LuOALngXm6yZp8e+BrrfSUoYLZAEbMNqTTLyr20onD4L nIanADSNdprDTldZqUBvRQkNDIOEN6piI5dAIShV2Ce7ChKsImO5n+tC7pUsftdIJwBV LXnkI2nPq7EzypfqgRUEUppr9EhDJo6iqX4a1zGYrHfSgQYoWBdAk4qxXD5nkHHpmSMA JGx6/MVFqpP8fiK2EAm8f/NnGZTn+16Xros/cxXDHW2gqL2fw93tTQlOoaSn1brZWLnV IBvfrhnaSZT4/DXVji294MDb+PI40gyvL26maSP6lubQXFEpSGfJ99kSf06fnFUMIOVr 5PAw==
X-Gm-Message-State: AN3rC/6mVVX1AOJnfcmsFuZOl1Sr55vdQDA1UlKUO/8OzjZzFqX9b3sb i/0ABZutHPNcYBcWVmrZHMc+7wybyg==
X-Received: by 10.36.46.81 with SMTP id i78mr6103207ita.39.1492719586092; Thu, 20 Apr 2017 13:19:46 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Thu, 20 Apr 2017 13:19:44 -0700 (PDT)
In-Reply-To: <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 20 Apr 2017 22:19:44 +0200
X-Google-Sender-Auth: RZ9v5ncaWtGCsMz_Bn-5qHEBUHo
Message-ID: <CA+b+ERnGJYUAiZLxG99gE9Km-R_pTFPp3ehk1kvXmv7sXS4cbg@mail.gmail.com>
To: Eric C Rosen <erosen@juniper.net>
Cc: Tony Przygienda <tonysietf@gmail.com>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114a93ceadad4f054d9edc8b
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/5nnwI3sM8rupGptlveWHhezTUgY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 20:19:50 -0000

--001a114a93ceadad4f054d9edc8b
Content-Type: text/plain; charset=UTF-8

> I can't wait to see what happens when the "trust nobody" folks get
> together with the "zeroconfig plug and play" folks ;-)

Brilliant analogy !

The crux of the issue is that BGP is used in completely different
scenarios, but completely different users. Some care about Internet some do
not.

For some BGP should be as simple as RIP. For the others it is not even BGP
protocol but BGP policy what is the most critical and important.

It's like cooking big pot of soup .. for some it will always be too spicy
... for others way too mild regardless how much piri-piri you add to it.
That's why restaurants have a concept of menu.

I think it is time to propose proven in other working groups the concept of
profiles for eBGP and perhaps also for iBGP:

*eBGP internet-profile* - will have all the defaults on to make sure
Internet is as secured as possible

*eBGP dc-profile* - will optimize BGP to work in tor-leaf-spine env if
someone needs to use it there

*eBGP ix-profile* - will have set of functionality to work well over NBMA
and auto detect NH liveness across IX

*eBGP home-profile* - will allow to exchange routes and subnets without
much clue about BGP attribiutesm policy and communities

*iBGP maximum-rebustness* - will enable add-paths, best external, enable
PIC etc ...

*iBGP weak-hardware* - will only send and accept one path and slow down
best path runs

etc ..

And all of those profiles will actually differ in the vendor's defaults
optimal to each use case of BGP. And most important it will be backwords
compatible too !

Just a suggestion. If someone is willing to work on draft on it - I can
volunteer to help.

Cheers,
Robert

--001a114a93ceadad4f054d9edc8b
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small"><span style=3D"font-family:arial,sans-s=
erif;font-size:12.8px">&gt; I can&#39;t wait to see what happens when the &=
quot;trust nobody&quot; folks get=C2=A0</span></div><div class=3D"gmail_def=
ault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><spa=
n style=3D"font-family:arial,sans-serif;font-size:12.8px">&gt; together wit=
h the &quot;zeroconfig plug and play&quot; folks ;-)</span><br></div><div c=
lass=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font=
-size:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px">=
<br></span></div><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small"><span style=3D"font-family:arial,sans-s=
erif;font-size:12.8px">Brilliant analogy !</span></div><div class=3D"gmail_=
default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><=
span style=3D"font-family:arial,sans-serif;font-size:12.8px"><br></span></d=
iv><div class=3D"gmail_default"><span style=3D"font-size:12.8px">The crux o=
f the issue is that BGP is used in completely different scenarios, but comp=
letely=C2=A0different users. Some care about Internet some do not.=C2=A0</s=
pan></div><div class=3D"gmail_default"><span style=3D"font-size:12.8px"><br=
></span></div><div class=3D"gmail_default"><span style=3D"font-size:12.8px"=
>For some BGP should be as simple as RIP. For the others it is not even BGP=
 protocol but BGP policy what is the most critical and important.=C2=A0</sp=
an></div><div class=3D"gmail_default"><span style=3D"font-size:12.8px"><br>=
</span></div><div class=3D"gmail_default"><span style=3D"font-size:12.8px">=
It&#39;s like cooking big pot of soup .. for some it will always be too spi=
cy ... for others way too mild regardless how much piri-piri you add to it.=
 That&#39;s why restaurants have a concept of menu.</span></div><div class=
=3D"gmail_default"><span style=3D"font-size:12.8px"><br></span></div><div c=
lass=3D"gmail_default"><span style=3D"font-size:12.8px">I think it is time =
to propose proven in other working groups the concept of profiles for eBGP =
and perhaps also for iBGP:</span></div><div class=3D"gmail_default"><span s=
tyle=3D"font-size:12.8px"><br></span></div><div class=3D"gmail_default"><sp=
an style=3D"font-size:12.8px"><b>eBGP internet-profile</b>=C2=A0- will have=
 all the defaults on to make sure Internet is as secured as possible</span>=
<br></div><div class=3D"gmail_default"><span style=3D"font-size:12.8px"><br=
></span></div><div class=3D"gmail_default"><span style=3D"font-size:12.8px"=
><b>eBGP dc-profile</b> - will optimize BGP to work in tor-leaf-spine env i=
f someone needs to use it there</span></div><div class=3D"gmail_default"><s=
pan style=3D"font-size:12.8px"><br></span></div><div class=3D"gmail_default=
"><span style=3D"font-size:12.8px"><b>eBGP ix-profile</b> - will have set o=
f functionality to work well over NBMA and auto detect NH liveness across I=
X</span></div><div class=3D"gmail_default"><span style=3D"font-size:12.8px"=
><br></span></div><div class=3D"gmail_default"><span style=3D"font-size:12.=
8px"><b>eBGP home-profile</b> - will allow to exchange routes and subnets w=
ithout much clue about BGP attribiutesm policy and communities</span></div>=
<div class=3D"gmail_default"><span style=3D"font-size:12.8px"><br></span></=
div><div class=3D"gmail_default"><span style=3D"font-size:12.8px"><b>iBGP m=
aximum-rebustness</b> - will enable add-paths, best external, enable PIC et=
c ...=C2=A0</span></div><div class=3D"gmail_default"><span style=3D"font-si=
ze:12.8px"><br></span></div><div class=3D"gmail_default"><span style=3D"fon=
t-size:12.8px"><b>iBGP weak-hardware</b> - will only send and accept one pa=
th and slow down best path runs</span></div><div class=3D"gmail_default"><s=
pan style=3D"font-size:12.8px"><br></span></div><div class=3D"gmail_default=
"><span style=3D"font-size:12.8px">etc ..=C2=A0</span></div><div class=3D"g=
mail_default"><span style=3D"font-size:12.8px"><br></span></div><div class=
=3D"gmail_default"><span style=3D"font-size:12.8px">And all of those profil=
es will actually differ in the vendor&#39;s defaults optimal to each use ca=
se of BGP. And most important it will be backwords compatible too !</span><=
/div><div class=3D"gmail_default"><span style=3D"font-size:12.8px"><br></sp=
an></div><div class=3D"gmail_default"><span style=3D"font-size:12.8px">Just=
 a suggestion. If someone is willing to work on draft on it - I can volunte=
er to help.=C2=A0</span></div><div class=3D"gmail_default"><span style=3D"f=
ont-size:12.8px"><br></span></div><div class=3D"gmail_default"><span style=
=3D"font-size:12.8px">Cheers,</span></div><div class=3D"gmail_default"><spa=
n style=3D"font-size:12.8px">Robert</span></div><div class=3D"gmail_default=
"><br></div></div>

--001a114a93ceadad4f054d9edc8b--


From nobody Thu Apr 20 13:53:22 2017
Return-Path: <jheitz@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC607131699 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 13:53:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nYsr67U_7HAL for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 13:53:19 -0700 (PDT)
Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 419E8131698 for <idr@ietf.org>; Thu, 20 Apr 2017 13:53:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=907; q=dns/txt; s=iport; t=1492721599; x=1493931199; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=xTXrcu/rkbzutd/UWwhXzcKawmX/jSiV8K9+yAKpfWg=; b=N7oKPofxQ/UgEN32Q4V0Uw3bUrcbWfqBiybPLipaiV77Jihxnr4WbljV B8eXPr2NzdFcguZNmMZrW2nRFuxfZJIq6uXdixoFZxxFYZcWS7xRg5l7w dbTrvcTkmHpHexrfW50bD3GOZsKMiZwQyX8cu41P19/rK3dPPOsij5mwy U=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DNAAAwH/lY/5pdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1RhgQwHjXWRaJVjgg8hC4V4AoN9PxgBAgEBAQEBAQFrKIUVAQE?= =?us-ascii?q?BAQMBATg0CwwEAgEIEQQBAR8JBycLFAkIAgQBDQUIihQOrD2LIgEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBARgFhlOEdoE8iQABBJZAhnQBknmRXpQTAR84gQVjFUSGZXW?= =?us-ascii?q?IIQGBDAEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,227,1488844800"; d="scan'208";a="415154307"
Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Apr 2017 20:53:18 +0000
Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id v3KKrIJX027739 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 20 Apr 2017 20:53:18 GMT
Received: from xch-aln-014.cisco.com (173.36.7.24) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 20 Apr 2017 15:53:17 -0500
Received: from xch-aln-014.cisco.com ([173.36.7.24]) by XCH-ALN-014.cisco.com ([173.36.7.24]) with mapi id 15.00.1210.000; Thu, 20 Apr 2017 15:53:17 -0500
From: "Jakob Heitz (jheitz)" <jheitz@cisco.com>
To: Tony Li <tony.li@tony.li>, "Alvaro Retana (aretana)" <aretana@cisco.com>
CC: "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] [Technical Errata Reported] RFC4271 (5000)
Thread-Index: AQHSuTZTnrMWYiO16E61qtn0tac4uaHOtSWAgAAGFOA=
Date: Thu, 20 Apr 2017 20:53:17 +0000
Message-ID: <44384ce538e046d3b80e5a059c212aff@XCH-ALN-014.cisco.com>
References: <20170419173711.71458B814DA@rfc-editor.org> <88AF5CD0-3DA4-4CD0-877B-39925DC7D5F0@cisco.com> <B45B000E-4F2F-4B9D-B6B5-2FF277E4500B@tony.li>
In-Reply-To: <B45B000E-4F2F-4B9D-B6B5-2FF277E4500B@tony.li>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [128.107.151.92]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/auNb-kb0hrA9k02IyKqCvFau8io>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 20:53:21 -0000

I agree.

If it's ineligible to be considered, it's a contradiction to consider it an=
yway.

"may" means to have permission to do something.
It is ok if you do that thing and ok if you do not.
"may not" means you do not have permission.
It is not ok to do it.

To me, the meaning is clear as it stands.
However, if "MUST NOT" is clearer to some, then let's make it clear.

Thanks,
Jakob.


> -----Original Message-----
> From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Tony Li
> Sent: Thursday, April 20, 2017 8:22 AM
> To: Alvaro Retana (aretana) <aretana@cisco.com>
> Cc: idr@ietf.org
> Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
>=20
>=20
> > b. s/MAY NOT/MUST NOT
>=20
>=20
> Unequivocally.
>=20
> Tony
>=20
>=20
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr


From nobody Thu Apr 20 14:03:29 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E01521316B0 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:03:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b24cjn6hqtJm for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:03:25 -0700 (PDT)
Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21A361316B5 for <idr@ietf.org>; Thu, 20 Apr 2017 14:03:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4373; q=dns/txt; s=iport; t=1492722205; x=1493931805; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=5o+hApi6jnFob/VvkCUdEeNnb9mdqLNWNZdAG7q9Y/o=; b=HLeT3msJyxFK5iceCT9vrD/ByZ/fJwIYEalmB2LK3oc2+/FRntnD3c1I thVgn9kBHrN3JXBtgVCD/FNrWIXXiEgJ9GOA9oF6i4AktCniblKlG+AcX Y5xElZo61sZ18X8RbZyq0FNvPdz1UwDpwYJ2BE2HYqY+cqiozpj17S+4C g=;
X-IronPort-AV: E=Sophos;i="5.37,227,1488844800"; d="scan'208";a="410306070"
Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Apr 2017 21:03:24 +0000
Received: from [10.41.56.234] ([10.41.56.234]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id v3KL3NPA004707; Thu, 20 Apr 2017 21:03:24 GMT
To: "John G. Scudder" <jgs@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net>
Cc: Job Snijders <job@ntt.net>, idr@ietf.org, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com>
Date: Thu, 20 Apr 2017 14:03:23 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/3hP9jTkYvMJSqf0ZnhrELzG5HpM>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 21:03:27 -0000

Hi, John:

It's not like the issues with software update are new :-)

As we all know, there is a complete lack of uniformity (on a global scale) with
the procedures for software update. As a result, a proposal that assumes certain
procedures is bound to be incomplete, and will not work for some.

As Eric summarized,

---
Phasing in a change of behavior over several releases is not a practical solution, because:

a) Customers will still be surprised when the default behavior finally changes, and
b) Many customers won't deploy all the releases anyway.
---

Thanks.  -- Enke

On 4/20/17 11:40 AM, John G. Scudder wrote:
> Enke,
> 
> On Apr 20, 2017, at 11:57 AM, Enke Chen <enkechen@cisco.com> wrote:
> 
>> It depends on the customer base and also how long the software has been deployed.
>> Just think about the scenario that a large number of customers would lose network
>> connectivity unexpectedly due to a default behavior change in the code. Such outages
>> could keep happening to different customers for years to come.
>>
>> Perhaps, changing "impossible" to "impractical" :-)
> 
> Various people have provided worked examples of how they think this change could be effected without causing the disruptions you warn of. I've pasted one example (from Jared) below. I haven't seen any response or acknowledgement from you, to those suggestions, just the repetition of your initial concern. I for one don't understand why you think a scheme such as Jared describes would be either "impossible" or "impractical".
> 
> If you are unconvinced about the practicality of such a scheme, it would be great if you could describe why. 
> 
> Thanks,
> 
> --John
> 
> Jared's message:
>> On Apr 20, 2017, at 9:40 AM, Jared Mauch <jared@puck.nether.net> wrote:
>>
>>
>>> On Apr 19, 2017, at 6:26 PM, Robert Raszuk <robert@raszuk.net> wrote:
>>>
>>> Keyur,
>>>
>>> You can not set "insecure mode" before you reload the OS as current OS does not have such knob. Unless you delay the deployment across N releases and enforce sequenced upgrade.
>>
>> Infact, this is the recommendation that I’ve provided to vendors that have expressed concerns.  There are many defaults that have not always been displayed, but things like IOS have “show run all” so you can see these.  
>>
>> Something like the ‘bgp unsafe-ebgp-policy’ could be generated on their respective implementations.  I didn’t think that GROW/IDR needed to tell implementors this level of how to manage their release, so this does seem somewhat out of scope, but a concern I can see needs to be thought about.
>>
>>> The only way to prevent massive reachability failure upon reload due to complete silent bgp prefix drop is to configure inbound policy for all EBGP sessions before the reload and run with new image. 
>>
>> Since we’re talking about how to operate a network:
>> - People who are taking advantage of an undefined behavior will always be surprised
>> - Vendors can take the N+1.x and N+2.x release strategy, where in N and N+1 they generate their equivalent of IOS-XR and the "bgp unsafe-ebgp-policy” policy to prevent their customers from breaking
>> - In a release N+2(or more) that would become the “default”.
>>
>>> Of course this is all assuming that someone will read carefully the release notes :) 
>>
>> Most people don’t, and I’ve always suggested to vendors they implement some sort of incremental approach to resolving this.
>>
>> What worries me is that there is a major incumbent provider who doesn’t see this as the serious (and well-documented) security issue that it is for those operating large networks.
>>
>>> If they do not the troubleshooting of this will be really painful ! CE will see EBGP session as UP, will get all the routes and will send his routes. CE will have no clue if PE dropped or accepted his routes. Likewise on the other end .. Only imagine a network which has 10s of thousands of VPN CEs as Bruno mentioned and their provider not following all releases CEs are running. 
>>
>>
>> If they don’t know how to troubleshoot BGP, that isn’t the vendors fault.
>>
>>> At least doing it as part of OPEN msg will be immediately indicated to both ends. 
>>
>> This is you promoting a different draft, I recommend another thread for that draft.
>>
>> - Jared
> ...
> 


From nobody Thu Apr 20 14:05:32 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE5A61316B7 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:05:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3l0NgT3DVtC1 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:05:29 -0700 (PDT)
Received: from mail-io0-x22b.google.com (mail-io0-x22b.google.com [IPv6:2607:f8b0:4001:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C9C21316B0 for <idr@ietf.org>; Thu, 20 Apr 2017 14:05:29 -0700 (PDT)
Received: by mail-io0-x22b.google.com with SMTP id r16so83326467ioi.2 for <idr@ietf.org>; Thu, 20 Apr 2017 14:05:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=qwKA1YYE+bKXBdl1/w0Zr8xXs8a+LNoHUQYcKq7LlmI=; b=bpcJgSllSlxGe4wGQTPW8AJLfZaUvo1zqdyRWM7Db4ADrS9KeqCDV6wVG6/C3jS8ct LYE+6iEVIZhfzSGva7NmcVdfEgAZNDP8YF+VuJILTfjmhWY32qQKGIJkYVSdb3kAj93R 1Z8zyIPYBT1suVpaWINUM2XYaZadiX+YnoZvQv6siVMULD7dVel69ujYQsiQvOuBKBPt 7vkDkKK1giGO2WYZNzN80DGESsQ4/fKr6Owczn2vR5D8/PblFAVEBkvBuP/dZcAjLe8P enDT0D9Gi5JxKhEHbX+vMvFlGIax0t5j9UrKyOF3OudeTUN5HgdRnSU5YdiQfrOm70Ei tYqQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=qwKA1YYE+bKXBdl1/w0Zr8xXs8a+LNoHUQYcKq7LlmI=; b=jztNLuMO3JrWr5PiS6ITVHyEt0w3smQvCbSjzYB54vl1Z+tOc8wF3EzWmo8WMGiQwB lMqFxFql96dOPyFRmn87dpgwYoVEpHNifhIfOp8H/8G87Bbp1V6UR02GX9VogiwcvUg6 CHAsF/UfwjPNKDLfcspv2AoLe4Sn6XNpHcLpqWETrXCXucy25TkfhBg7MKgOlpkknyus SVKD1XrEpm6gfRtayH7pNlT01CMf8Uv+/w6ZDzRVNZ97yJntVrxkxLtoPE1jn+Me8oQj FP29ui7pkRZnZYK0oKHfNIh/wE5poGNgcdVI8l21pi3ag+aEi0sQll6EeFhEVAjbdlQ5 +zww==
X-Gm-Message-State: AN3rC/4gse7zs+LQVNpvvJnXeIrikVTVkJdkqIyHtX4qZLBEWy7vkf9D LmCKmOCInKE2AA1kXnXKsM1Ogqk3CURp
X-Received: by 10.36.115.12 with SMTP id y12mr6272344itb.24.1492722325997; Thu, 20 Apr 2017 14:05:25 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Thu, 20 Apr 2017 14:05:24 -0700 (PDT)
In-Reply-To: <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 20 Apr 2017 23:05:24 +0200
X-Google-Sender-Auth: 3NPx25aXY_OmTMs2DYGM-cNn2vc
Message-ID: <CA+b+ER=ee6Q59mbctO06P8x2QsTz_me9mL9YcB25O2Ey4+kpdA@mail.gmail.com>
To: Enke Chen <enkechen@cisco.com>
Cc: "John G. Scudder" <jgs@juniper.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Type: multipart/alternative; boundary=001a11444dcafd52b2054d9f7f8a
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/5CMp7adkPHjPwjKSkD9RoQlZI1Y>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 21:05:31 -0000

--001a11444dcafd52b2054d9f7f8a
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

+

c) deployment of new code release in large network takes months if not
years

On Thu, Apr 20, 2017 at 11:03 PM, Enke Chen <enkechen@cisco.com> wrote:

> Hi, John:
>
> It's not like the issues with software update are new :-)
>
> As we all know, there is a complete lack of uniformity (on a global scale=
)
> with
> the procedures for software update. As a result, a proposal that assumes
> certain
> procedures is bound to be incomplete, and will not work for some.
>
> As Eric summarized,
>
> ---
> Phasing in a change of behavior over several releases is not a practical
> solution, because:
>
> a) Customers will still be surprised when the default behavior finally
> changes, and
> b) Many customers won't deploy all the releases anyway.
> ---
>
> Thanks.  -- Enke
>
> On 4/20/17 11:40 AM, John G. Scudder wrote:
> > Enke,
> >
> > On Apr 20, 2017, at 11:57 AM, Enke Chen <enkechen@cisco.com> wrote:
> >
> >> It depends on the customer base and also how long the software has bee=
n
> deployed.
> >> Just think about the scenario that a large number of customers would
> lose network
> >> connectivity unexpectedly due to a default behavior change in the code=
.
> Such outages
> >> could keep happening to different customers for years to come.
> >>
> >> Perhaps, changing "impossible" to "impractical" :-)
> >
> > Various people have provided worked examples of how they think this
> change could be effected without causing the disruptions you warn of. I'v=
e
> pasted one example (from Jared) below. I haven't seen any response or
> acknowledgement from you, to those suggestions, just the repetition of yo=
ur
> initial concern. I for one don't understand why you think a scheme such a=
s
> Jared describes would be either "impossible" or "impractical".
> >
> > If you are unconvinced about the practicality of such a scheme, it woul=
d
> be great if you could describe why.
> >
> > Thanks,
> >
> > --John
> >
> > Jared's message:
> >> On Apr 20, 2017, at 9:40 AM, Jared Mauch <jared@puck.nether.net> wrote=
:
> >>
> >>
> >>> On Apr 19, 2017, at 6:26 PM, Robert Raszuk <robert@raszuk.net> wrote:
> >>>
> >>> Keyur,
> >>>
> >>> You can not set "insecure mode" before you reload the OS as current O=
S
> does not have such knob. Unless you delay the deployment across N release=
s
> and enforce sequenced upgrade.
> >>
> >> Infact, this is the recommendation that I=E2=80=99ve provided to vendo=
rs that
> have expressed concerns.  There are many defaults that have not always be=
en
> displayed, but things like IOS have =E2=80=9Cshow run all=E2=80=9D so you=
 can see these.
> >>
> >> Something like the =E2=80=98bgp unsafe-ebgp-policy=E2=80=99 could be g=
enerated on their
> respective implementations.  I didn=E2=80=99t think that GROW/IDR needed =
to tell
> implementors this level of how to manage their release, so this does seem
> somewhat out of scope, but a concern I can see needs to be thought about.
> >>
> >>> The only way to prevent massive reachability failure upon reload due
> to complete silent bgp prefix drop is to configure inbound policy for all
> EBGP sessions before the reload and run with new image.
> >>
> >> Since we=E2=80=99re talking about how to operate a network:
> >> - People who are taking advantage of an undefined behavior will always
> be surprised
> >> - Vendors can take the N+1.x and N+2.x release strategy, where in N an=
d
> N+1 they generate their equivalent of IOS-XR and the "bgp
> unsafe-ebgp-policy=E2=80=9D policy to prevent their customers from breaki=
ng
> >> - In a release N+2(or more) that would become the =E2=80=9Cdefault=E2=
=80=9D.
> >>
> >>> Of course this is all assuming that someone will read carefully the
> release notes :)
> >>
> >> Most people don=E2=80=99t, and I=E2=80=99ve always suggested to vendor=
s they implement
> some sort of incremental approach to resolving this.
> >>
> >> What worries me is that there is a major incumbent provider who doesn=
=E2=80=99t
> see this as the serious (and well-documented) security issue that it is f=
or
> those operating large networks.
> >>
> >>> If they do not the troubleshooting of this will be really painful ! C=
E
> will see EBGP session as UP, will get all the routes and will send his
> routes. CE will have no clue if PE dropped or accepted his routes. Likewi=
se
> on the other end .. Only imagine a network which has 10s of thousands of
> VPN CEs as Bruno mentioned and their provider not following all releases
> CEs are running.
> >>
> >>
> >> If they don=E2=80=99t know how to troubleshoot BGP, that isn=E2=80=99t=
 the vendors
> fault.
> >>
> >>> At least doing it as part of OPEN msg will be immediately indicated t=
o
> both ends.
> >>
> >> This is you promoting a different draft, I recommend another thread fo=
r
> that draft.
> >>
> >> - Jared
> > ...
> >
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a11444dcafd52b2054d9f7f8a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">+=C2=A0</div><div class=3D"gmail_defaul=
t" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></d=
iv><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-s=
erif;font-size:small">c) deployment of new code release in large network ta=
kes months if not years=C2=A0</div></div><div class=3D"gmail_extra"><br><di=
v class=3D"gmail_quote">On Thu, Apr 20, 2017 at 11:03 PM, Enke Chen <span d=
ir=3D"ltr">&lt;<a href=3D"mailto:enkechen@cisco.com" target=3D"_blank">enke=
chen@cisco.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi, =
John:<br>
<br>
It&#39;s not like the issues with software update are new :-)<br>
<br>
As we all know, there is a complete lack of uniformity (on a global scale) =
with<br>
the procedures for software update. As a result, a proposal that assumes ce=
rtain<br>
procedures is bound to be incomplete, and will not work for some.<br>
<br>
As Eric summarized,<br>
<br>
---<br>
<span class=3D"">Phasing in a change of behavior over several releases is n=
ot a practical solution, because:<br>
<br>
a) Customers will still be surprised when the default behavior finally chan=
ges, and<br>
b) Many customers won&#39;t deploy all the releases anyway.<br>
</span>---<br>
<br>
Thanks.=C2=A0 -- Enke<br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
On 4/20/17 11:40 AM, John G. Scudder wrote:<br>
&gt; Enke,<br>
&gt;<br>
&gt; On Apr 20, 2017, at 11:57 AM, Enke Chen &lt;<a href=3D"mailto:enkechen=
@cisco.com">enkechen@cisco.com</a>&gt; wrote:<br>
&gt;<br>
&gt;&gt; It depends on the customer base and also how long the software has=
 been deployed.<br>
&gt;&gt; Just think about the scenario that a large number of customers wou=
ld lose network<br>
&gt;&gt; connectivity unexpectedly due to a default behavior change in the =
code. Such outages<br>
&gt;&gt; could keep happening to different customers for years to come.<br>
&gt;&gt;<br>
&gt;&gt; Perhaps, changing &quot;impossible&quot; to &quot;impractical&quot=
; :-)<br>
&gt;<br>
&gt; Various people have provided worked examples of how they think this ch=
ange could be effected without causing the disruptions you warn of. I&#39;v=
e pasted one example (from Jared) below. I haven&#39;t seen any response or=
 acknowledgement from you, to those suggestions, just the repetition of you=
r initial concern. I for one don&#39;t understand why you think a scheme su=
ch as Jared describes would be either &quot;impossible&quot; or &quot;impra=
ctical&quot;.<br>
&gt;<br>
&gt; If you are unconvinced about the practicality of such a scheme, it wou=
ld be great if you could describe why.<br>
&gt;<br>
&gt; Thanks,<br>
&gt;<br>
&gt; --John<br>
&gt;<br>
&gt; Jared&#39;s message:<br>
&gt;&gt; On Apr 20, 2017, at 9:40 AM, Jared Mauch &lt;<a href=3D"mailto:jar=
ed@puck.nether.net">jared@puck.nether.net</a>&gt; wrote:<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;&gt; On Apr 19, 2017, at 6:26 PM, Robert Raszuk &lt;<a href=3D"mail=
to:robert@raszuk.net">robert@raszuk.net</a>&gt; wrote:<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; Keyur,<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; You can not set &quot;insecure mode&quot; before you reload th=
e OS as current OS does not have such knob. Unless you delay the deployment=
 across N releases and enforce sequenced upgrade.<br>
&gt;&gt;<br>
&gt;&gt; Infact, this is the recommendation that I=E2=80=99ve provided to v=
endors that have expressed concerns.=C2=A0 There are many defaults that hav=
e not always been displayed, but things like IOS have =E2=80=9Cshow run all=
=E2=80=9D so you can see these.<br>
&gt;&gt;<br>
&gt;&gt; Something like the =E2=80=98bgp unsafe-ebgp-policy=E2=80=99 could =
be generated on their respective implementations.=C2=A0 I didn=E2=80=99t th=
ink that GROW/IDR needed to tell implementors this level of how to manage t=
heir release, so this does seem somewhat out of scope, but a concern I can =
see needs to be thought about.<br>
&gt;&gt;<br>
&gt;&gt;&gt; The only way to prevent massive reachability failure upon relo=
ad due to complete silent bgp prefix drop is to configure inbound policy fo=
r all EBGP sessions before the reload and run with new image.<br>
&gt;&gt;<br>
&gt;&gt; Since we=E2=80=99re talking about how to operate a network:<br>
&gt;&gt; - People who are taking advantage of an undefined behavior will al=
ways be surprised<br>
&gt;&gt; - Vendors can take the N+1.x and N+2.x release strategy, where in =
N and N+1 they generate their equivalent of IOS-XR and the &quot;bgp unsafe=
-ebgp-policy=E2=80=9D policy to prevent their customers from breaking<br>
&gt;&gt; - In a release N+2(or more) that would become the =E2=80=9Cdefault=
=E2=80=9D.<br>
&gt;&gt;<br>
&gt;&gt;&gt; Of course this is all assuming that someone will read carefull=
y the release notes :)<br>
&gt;&gt;<br>
&gt;&gt; Most people don=E2=80=99t, and I=E2=80=99ve always suggested to ve=
ndors they implement some sort of incremental approach to resolving this.<b=
r>
&gt;&gt;<br>
&gt;&gt; What worries me is that there is a major incumbent provider who do=
esn=E2=80=99t see this as the serious (and well-documented) security issue =
that it is for those operating large networks.<br>
&gt;&gt;<br>
&gt;&gt;&gt; If they do not the troubleshooting of this will be really pain=
ful ! CE will see EBGP session as UP, will get all the routes and will send=
 his routes. CE will have no clue if PE dropped or accepted his routes. Lik=
ewise on the other end .. Only imagine a network which has 10s of thousands=
 of VPN CEs as Bruno mentioned and their provider not following all release=
s CEs are running.<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; If they don=E2=80=99t know how to troubleshoot BGP, that isn=E2=80=
=99t the vendors fault.<br>
&gt;&gt;<br>
&gt;&gt;&gt; At least doing it as part of OPEN msg will be immediately indi=
cated to both ends.<br>
&gt;&gt;<br>
&gt;&gt; This is you promoting a different draft, I recommend another threa=
d for that draft.<br>
&gt;&gt;<br>
&gt;&gt; - Jared<br>
&gt; ...<br>
&gt;<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--001a11444dcafd52b2054d9f7f8a--


From nobody Thu Apr 20 14:09:12 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3B0C129C5C for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:09:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9DnNiMGouucq for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:09:09 -0700 (PDT)
Received: from mail-wr0-x22e.google.com (mail-wr0-x22e.google.com [IPv6:2a00:1450:400c:c0c::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 103FC1316B7 for <idr@ietf.org>; Thu, 20 Apr 2017 14:09:08 -0700 (PDT)
Received: by mail-wr0-x22e.google.com with SMTP id z52so2020918wrc.2 for <idr@ietf.org>; Thu, 20 Apr 2017 14:09:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Ja8GTBs3OeMXSml3RmPKS6HM/5pGZBTGiXtIu7TGYZA=; b=DvcDPNEbUfVyxbMpnYfZgme457oVMLV95CuZfEpgtuF58WpEba9xiiOSbfqRiH1YEW 1TTj0rgcviukJB6ws+o3ftebtqiCLf+DNG94Xl/ys4UGMHrHjZctu3PDovNxrHFy8jtN 0c/RMkw6H6Kdsz3u7mpYcnI9kaYzSZAWDPPxmY5X5o9U68RiYDyKvSojdUAdut0biFZl lH/JfPTA48PLE/X7ceqrqh5yLbSwFEPVbMnhJTxJLvuH4Q1EOhmqizQNKCcjRIXXA/vs 4rnFXS6xzJs2MyRmYIKN2RNjUizx8cm2OXgI9MULj6sY8YdsCxkt7btqVtZ20PusmuoW AWHg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Ja8GTBs3OeMXSml3RmPKS6HM/5pGZBTGiXtIu7TGYZA=; b=bWAw9i0tQpncSX9AhMEflE6FdIDe5sr1JCOSieWBaHRVkwIbTLEjGTKVvk8PWc4ERK caLNaP7F7bjSOdFdqYry3JKiJ3z2+q0xAr2tbOXkUHc4bpQe3XSbSbqmjM17MbIdHoI0 GJvb0iRrN+s87zazvoohq/TKQJYnf1yzYGrbxmQop6IMcWqp0jH5HS1OCCjnWjsgt283 iBXdHFJaZsvh+BzwYyQrLTDhOH1Jx27TS2VEE3KJ99qnerDVEJfAfVuzY2HpheRggciG OdPtEVnVdPM0qrDQ1jdGfwe5tfGVFTCPzIuiYbb7JJhmPp2i161TibPL8PxwypplQMA8 DreA==
X-Gm-Message-State: AN3rC/4a222gHBjQCr0sBdqvgEqgvMtKIbBoL0+ZkBGgK7cfxQTY2zoP E73JD2KWZYq0t3byNJjrNoKf2GI14w==
X-Received: by 10.223.134.132 with SMTP id 4mr9630394wrx.82.1492722547406; Thu, 20 Apr 2017 14:09:07 -0700 (PDT)
MIME-Version: 1.0
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <CA+b+ER=ee6Q59mbctO06P8x2QsTz_me9mL9YcB25O2Ey4+kpdA@mail.gmail.com>
In-Reply-To: <CA+b+ER=ee6Q59mbctO06P8x2QsTz_me9mL9YcB25O2Ey4+kpdA@mail.gmail.com>
From: Job Snijders <job@instituut.net>
Date: Thu, 20 Apr 2017 21:08:55 +0000
Message-ID: <CACWOCC-Gusv1Jk1OXfVAZuWbMJxrzq=dEAdWGVSAPg0AjujhXA@mail.gmail.com>
To: Enke Chen <enkechen@cisco.com>, Robert Raszuk <robert@raszuk.net>
Cc: Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114918a82fd098054d9f8d7c
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/sqQoT3jssm9Z0Boy2rYPZ-CEqno>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 21:09:12 -0000

--001a114918a82fd098054d9f8d7c
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

So a change like bgp-reject will take many years to be deployed within a
single network, how can that be reconciled with the perceived "surprise"?

Kind regards,

Job

On Thu, 20 Apr 2017 at 23:05, Robert Raszuk <robert@raszuk.net> wrote:

> +
>
> c) deployment of new code release in large network takes months if not
> years
>
> On Thu, Apr 20, 2017 at 11:03 PM, Enke Chen <enkechen@cisco.com> wrote:
>
>> Hi, John:
>>
>> It's not like the issues with software update are new :-)
>>
>> As we all know, there is a complete lack of uniformity (on a global
>> scale) with
>> the procedures for software update. As a result, a proposal that assumes
>> certain
>> procedures is bound to be incomplete, and will not work for some.
>>
>> As Eric summarized,
>>
>> ---
>> Phasing in a change of behavior over several releases is not a practical
>> solution, because:
>>
>> a) Customers will still be surprised when the default behavior finally
>> changes, and
>> b) Many customers won't deploy all the releases anyway.
>> ---
>>
>> Thanks.  -- Enke
>>
>> On 4/20/17 11:40 AM, John G. Scudder wrote:
>> > Enke,
>> >
>> > On Apr 20, 2017, at 11:57 AM, Enke Chen <enkechen@cisco.com> wrote:
>> >
>> >> It depends on the customer base and also how long the software has
>> been deployed.
>> >> Just think about the scenario that a large number of customers would
>> lose network
>> >> connectivity unexpectedly due to a default behavior change in the
>> code. Such outages
>> >> could keep happening to different customers for years to come.
>> >>
>> >> Perhaps, changing "impossible" to "impractical" :-)
>> >
>> > Various people have provided worked examples of how they think this
>> change could be effected without causing the disruptions you warn of. I'=
ve
>> pasted one example (from Jared) below. I haven't seen any response or
>> acknowledgement from you, to those suggestions, just the repetition of y=
our
>> initial concern. I for one don't understand why you think a scheme such =
as
>> Jared describes would be either "impossible" or "impractical".
>> >
>> > If you are unconvinced about the practicality of such a scheme, it
>> would be great if you could describe why.
>> >
>> > Thanks,
>> >
>> > --John
>> >
>> > Jared's message:
>> >> On Apr 20, 2017, at 9:40 AM, Jared Mauch <jared@puck.nether.net>
>> wrote:
>> >>
>> >>
>> >>> On Apr 19, 2017, at 6:26 PM, Robert Raszuk <robert@raszuk.net> wrote=
:
>> >>>
>> >>> Keyur,
>> >>>
>> >>> You can not set "insecure mode" before you reload the OS as current
>> OS does not have such knob. Unless you delay the deployment across N
>> releases and enforce sequenced upgrade.
>> >>
>> >> Infact, this is the recommendation that I=E2=80=99ve provided to vend=
ors that
>> have expressed concerns.  There are many defaults that have not always b=
een
>> displayed, but things like IOS have =E2=80=9Cshow run all=E2=80=9D so yo=
u can see these.
>> >>
>> >> Something like the =E2=80=98bgp unsafe-ebgp-policy=E2=80=99 could be =
generated on
>> their respective implementations.  I didn=E2=80=99t think that GROW/IDR =
needed to
>> tell implementors this level of how to manage their release, so this doe=
s
>> seem somewhat out of scope, but a concern I can see needs to be thought
>> about.
>> >>
>> >>> The only way to prevent massive reachability failure upon reload due
>> to complete silent bgp prefix drop is to configure inbound policy for al=
l
>> EBGP sessions before the reload and run with new image.
>> >>
>> >> Since we=E2=80=99re talking about how to operate a network:
>> >> - People who are taking advantage of an undefined behavior will alway=
s
>> be surprised
>> >> - Vendors can take the N+1.x and N+2.x release strategy, where in N
>> and N+1 they generate their equivalent of IOS-XR and the "bgp
>> unsafe-ebgp-policy=E2=80=9D policy to prevent their customers from break=
ing
>> >> - In a release N+2(or more) that would become the =E2=80=9Cdefault=E2=
=80=9D.
>> >>
>> >>> Of course this is all assuming that someone will read carefully the
>> release notes :)
>> >>
>> >> Most people don=E2=80=99t, and I=E2=80=99ve always suggested to vendo=
rs they implement
>> some sort of incremental approach to resolving this.
>> >>
>> >> What worries me is that there is a major incumbent provider who
>> doesn=E2=80=99t see this as the serious (and well-documented) security i=
ssue that
>> it is for those operating large networks.
>> >>
>> >>> If they do not the troubleshooting of this will be really painful !
>> CE will see EBGP session as UP, will get all the routes and will send hi=
s
>> routes. CE will have no clue if PE dropped or accepted his routes. Likew=
ise
>> on the other end .. Only imagine a network which has 10s of thousands of
>> VPN CEs as Bruno mentioned and their provider not following all releases
>> CEs are running.
>> >>
>> >>
>> >> If they don=E2=80=99t know how to troubleshoot BGP, that isn=E2=80=99=
t the vendors
>> fault.
>> >>
>> >>> At least doing it as part of OPEN msg will be immediately indicated
>> to both ends.
>> >>
>> >> This is you promoting a different draft, I recommend another thread
>> for that draft.
>> >>
>> >> - Jared
>> > ...
>> >
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a114918a82fd098054d9f8d7c
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div>So a change like bgp-reject will take many years to be deployed within=
 a single network, how can that be reconciled with the perceived &quot;surp=
rise&quot;?</div><div><br></div><div>Kind regards,</div><div><br></div><div=
>Job</div><div><br><div class=3D"gmail_quote"><div>On Thu, 20 Apr 2017 at 2=
3:05, Robert Raszuk &lt;<a href=3D"mailto:robert@raszuk.net">robert@raszuk.=
net</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"marg=
in:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small">+=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:ari=
al,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_defa=
ult" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">c) de=
ployment of new code release in large network takes months if not years=C2=
=A0</div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On=
 Thu, Apr 20, 2017 at 11:03 PM, Enke Chen <span>&lt;<a href=3D"mailto:enkec=
hen@cisco.com" target=3D"_blank">enkechen@cisco.com</a>&gt;</span> wrote:<b=
r><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:=
1px #ccc solid;padding-left:1ex">Hi, John:<br>
<br>
It&#39;s not like the issues with software update are new :-)<br>
<br>
As we all know, there is a complete lack of uniformity (on a global scale) =
with<br>
the procedures for software update. As a result, a proposal that assumes ce=
rtain<br>
procedures is bound to be incomplete, and will not work for some.<br>
<br>
As Eric summarized,<br>
<br>
---<br>
<span>Phasing in a change of behavior over several releases is not a practi=
cal solution, because:<br>
<br>
a) Customers will still be surprised when the default behavior finally chan=
ges, and<br>
b) Many customers won&#39;t deploy all the releases anyway.<br>
</span>---<br>
<br>
Thanks.=C2=A0 -- Enke<br>
<div class=3D"m_-5924115765543339566HOEnZb"><div class=3D"m_-59241157655433=
39566h5"><br>
On 4/20/17 11:40 AM, John G. Scudder wrote:<br>
&gt; Enke,<br>
&gt;<br>
&gt; On Apr 20, 2017, at 11:57 AM, Enke Chen &lt;<a href=3D"mailto:enkechen=
@cisco.com" target=3D"_blank">enkechen@cisco.com</a>&gt; wrote:<br>
&gt;<br>
&gt;&gt; It depends on the customer base and also how long the software has=
 been deployed.<br>
&gt;&gt; Just think about the scenario that a large number of customers wou=
ld lose network<br>
&gt;&gt; connectivity unexpectedly due to a default behavior change in the =
code. Such outages<br>
&gt;&gt; could keep happening to different customers for years to come.<br>
&gt;&gt;<br>
&gt;&gt; Perhaps, changing &quot;impossible&quot; to &quot;impractical&quot=
; :-)<br>
&gt;<br>
&gt; Various people have provided worked examples of how they think this ch=
ange could be effected without causing the disruptions you warn of. I&#39;v=
e pasted one example (from Jared) below. I haven&#39;t seen any response or=
 acknowledgement from you, to those suggestions, just the repetition of you=
r initial concern. I for one don&#39;t understand why you think a scheme su=
ch as Jared describes would be either &quot;impossible&quot; or &quot;impra=
ctical&quot;.<br>
&gt;<br>
&gt; If you are unconvinced about the practicality of such a scheme, it wou=
ld be great if you could describe why.<br>
&gt;<br>
&gt; Thanks,<br>
&gt;<br>
&gt; --John<br>
&gt;<br>
&gt; Jared&#39;s message:<br>
&gt;&gt; On Apr 20, 2017, at 9:40 AM, Jared Mauch &lt;<a href=3D"mailto:jar=
ed@puck.nether.net" target=3D"_blank">jared@puck.nether.net</a>&gt; wrote:<=
br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;&gt; On Apr 19, 2017, at 6:26 PM, Robert Raszuk &lt;<a href=3D"mail=
to:robert@raszuk.net" target=3D"_blank">robert@raszuk.net</a>&gt; wrote:<br=
>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; Keyur,<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; You can not set &quot;insecure mode&quot; before you reload th=
e OS as current OS does not have such knob. Unless you delay the deployment=
 across N releases and enforce sequenced upgrade.<br>
&gt;&gt;<br>
&gt;&gt; Infact, this is the recommendation that I=E2=80=99ve provided to v=
endors that have expressed concerns.=C2=A0 There are many defaults that hav=
e not always been displayed, but things like IOS have =E2=80=9Cshow run all=
=E2=80=9D so you can see these.<br>
&gt;&gt;<br>
&gt;&gt; Something like the =E2=80=98bgp unsafe-ebgp-policy=E2=80=99 could =
be generated on their respective implementations.=C2=A0 I didn=E2=80=99t th=
ink that GROW/IDR needed to tell implementors this level of how to manage t=
heir release, so this does seem somewhat out of scope, but a concern I can =
see needs to be thought about.<br>
&gt;&gt;<br>
&gt;&gt;&gt; The only way to prevent massive reachability failure upon relo=
ad due to complete silent bgp prefix drop is to configure inbound policy fo=
r all EBGP sessions before the reload and run with new image.<br>
&gt;&gt;<br>
&gt;&gt; Since we=E2=80=99re talking about how to operate a network:<br>
&gt;&gt; - People who are taking advantage of an undefined behavior will al=
ways be surprised<br>
&gt;&gt; - Vendors can take the N+1.x and N+2.x release strategy, where in =
N and N+1 they generate their equivalent of IOS-XR and the &quot;bgp unsafe=
-ebgp-policy=E2=80=9D policy to prevent their customers from breaking<br>
&gt;&gt; - In a release N+2(or more) that would become the =E2=80=9Cdefault=
=E2=80=9D.<br>
&gt;&gt;<br>
&gt;&gt;&gt; Of course this is all assuming that someone will read carefull=
y the release notes :)<br>
&gt;&gt;<br>
&gt;&gt; Most people don=E2=80=99t, and I=E2=80=99ve always suggested to ve=
ndors they implement some sort of incremental approach to resolving this.<b=
r>
&gt;&gt;<br>
&gt;&gt; What worries me is that there is a major incumbent provider who do=
esn=E2=80=99t see this as the serious (and well-documented) security issue =
that it is for those operating large networks.<br>
&gt;&gt;<br>
&gt;&gt;&gt; If they do not the troubleshooting of this will be really pain=
ful ! CE will see EBGP session as UP, will get all the routes and will send=
 his routes. CE will have no clue if PE dropped or accepted his routes. Lik=
ewise on the other end .. Only imagine a network which has 10s of thousands=
 of VPN CEs as Bruno mentioned and their provider not following all release=
s CEs are running.<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; If they don=E2=80=99t know how to troubleshoot BGP, that isn=E2=80=
=99t the vendors fault.<br>
&gt;&gt;<br>
&gt;&gt;&gt; At least doing it as part of OPEN msg will be immediately indi=
cated to both ends.<br>
&gt;&gt;<br>
&gt;&gt; This is you promoting a different draft, I recommend another threa=
d for that draft.<br>
&gt;&gt;<br>
&gt;&gt; - Jared<br>
&gt; ...<br>
&gt;<br>
<br>
_______________________________________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/listinfo/idr</a><br>
</div></div></blockquote></div><br></div>
_______________________________________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/listinfo/idr</a><br>
</blockquote></div></div>

--001a114918a82fd098054d9f8d7c--


From nobody Thu Apr 20 14:09:37 2017
Return-Path: <tonysietf@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A40C21316C6 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:09:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LIn9kb5fpMiT for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:09:33 -0700 (PDT)
Received: from mail-wm0-x229.google.com (mail-wm0-x229.google.com [IPv6:2a00:1450:400c:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE8951316C1 for <idr@ietf.org>; Thu, 20 Apr 2017 14:09:27 -0700 (PDT)
Received: by mail-wm0-x229.google.com with SMTP id w64so2561956wma.0 for <idr@ietf.org>; Thu, 20 Apr 2017 14:09:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=IsxR7mFYSLM4W8BcEuN84NILeSqjPJu2stnxV41kl84=; b=acxfb/ug+VSx0yIJLdI6ki4yYph2+S2bp/deZT91Q0lOLoqqml0/lYmBI1OlJoL7X9 uy+PzohSTKG5gauoB4WH8ySzzs82OWcidnVac2e7v1s060ymUoTUjSSM5bYmjjBfiUGw EdzdfZ+gaFLEetTP3amB0W+gBEqZOS1tAlGy82+baJ0umyNUEaWC7RXRfOHTPKo2FJqe XrZCvTVCKoru6Tz/oEoewIX85m4tYLOJensLEj1ZmZkBHY7pOeKY+RNj53BiCyo3IyFF Y9xpdz7Kl+D3Cz71J0ebrnVOrOACzFYYca0MTgb38K1EUiwWatJHce+UQR/AsEFYOQ+3 OnQQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=IsxR7mFYSLM4W8BcEuN84NILeSqjPJu2stnxV41kl84=; b=NRpA9cSy7aaL6gGK0PzLu1+erBzeRKtziwnga76be8kn7n000KzgPAqB1C2hgWBC/W skVXdTHR2FPvycZMBhPNL5GK/8QIkCnPri8+p0nxbEP4EHbJwUBKKQUyf374VMmPg/JV feOch0CyjiGlEqlzWZS0A8ywP5mv2LFBLdDd4UMplzM2IDEiR3V03kz2GA0VeiiDE/wY tSjqo04BxfqNk9NnsIgbeMznlqGcaFY9MW7YmBWoyviW+XyNUsQARIzdhQlTak531xWv VrmsVrsJXyfEVJQg0xbtjT3UKwqgdctXOn8W3M/W70aEAnNitj2gEdgdTPgb8fpQ/or/ 3m2g==
X-Gm-Message-State: AN3rC/7s0Z6QJ9Ka0IXzZ9ZVbaLuALVcGPmatp2kWsnezS4NeLp0sWV5 Yf0+qm7wkWxdOFxb42oyB3K16UyWWg==
X-Received: by 10.28.54.205 with SMTP id y74mr4784430wmh.93.1492722566572; Thu, 20 Apr 2017 14:09:26 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.80.136.9 with HTTP; Thu, 20 Apr 2017 14:08:45 -0700 (PDT)
In-Reply-To: <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net>
From: Tony Przygienda <tonysietf@gmail.com>
Date: Thu, 20 Apr 2017 14:08:45 -0700
Message-ID: <CA+wi2hMiC08RxUNtWbb3W7AE1ZyrA3vBogPd_PguKAbbBU6Asw@mail.gmail.com>
To: Eric C Rosen <erosen@juniper.net>
Cc: Brian Dickson <brian.peter.dickson@gmail.com>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a1143689a542f18054d9f8e65
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/xUOX_xDfkhaG24_nfqRDmWx3Dd0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 21:09:36 -0000

--001a1143689a542f18054d9f8e65
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

amen ...

On Thu, Apr 20, 2017 at 1:00 PM, Eric C Rosen <erosen@juniper.net> wrote:

> On 4/20/2017 2:24 PM, Tony Przygienda wrote:
>
>> Can't miss that food fight ;-)
>>
>
> It did seem to degenerate rapidly into "if you don't agree with my
> proposal, you don't care about security".  ;-(
>
> I agree with Enke that surprising your customers with a change in behavio=
r
> due to altered defaults is generally considered to be a big no-no.
>
> When the customers complain about a change in behavior, it is not
> considered appropriate to respond with "it's not my fault, you should hav=
e
> read the release notes", or "it's not my fault that you don't know how to
> troubleshoot BGP", or "it's not my fault that you didn't do your due
> diligence".
>
> Phasing in a change of behavior over several releases is not a practical
> solution, because:
>
> a) Customers will still be surprised when the default behavior finally
> changes, and
> b) Many customers won't deploy all the releases anyway.
>
>
>> Having said that, I think this is BCP material at best and if this is a
>> BCP then
>>
>> i) a "backward compatibility a.k.a which end of the stick is sharp"
>> section is very advisable
>>
>
> I would agree that something more than "figure out how to configure the
> new release to behave like the old release" would be helpful.
>
> ii) the BCP should describe which customer segment is best served with
>> which default
>>
>>
> But then operators from different segments would have to get together to
> understand each others' requirements, and they'd have to respect each
> others' opinions as well.   I can't wait to see what happens when the
> "trust nobody" folks get together with the "zeroconfig plug and play" fol=
ks
> ;-)
>
> The dilemma is that there is a real security problem in certain
> environments, but the proposed solution seems to have unintended
> side-effects that are problematic.  Then the question becomes whether the
> benefits are worth the cost, and this is not really a question that can b=
e
> resolved by IETF consensus.
>
>
>
>
>
>
>


--=20
*We=E2=80=99ve heard that a million monkeys at a million keyboards could pr=
oduce
the complete works of Shakespeare; now, thanks to the Internet, we know
that is not true.*
=E2=80=94Robert Wilensky

--001a1143689a542f18054d9f8e65
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">amen ...=C2=A0</div><div class=3D"gmail_extra"><br><div cl=
ass=3D"gmail_quote">On Thu, Apr 20, 2017 at 1:00 PM, Eric C Rosen <span dir=
=3D"ltr">&lt;<a href=3D"mailto:erosen@juniper.net" target=3D"_blank">erosen=
@juniper.net</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span =
class=3D"">On 4/20/2017 2:24 PM, Tony Przygienda wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
Can&#39;t miss that food fight ;-)<br>
</blockquote>
<br></span>
It did seem to degenerate rapidly into &quot;if you don&#39;t agree with my=
 proposal, you don&#39;t care about security&quot;.=C2=A0 ;-(<br>
<br>
I agree with Enke that surprising your customers with a change in behavior =
due to altered defaults is generally considered to be a big no-no.<br>
<br>
When the customers complain about a change in behavior, it is not considere=
d appropriate to respond with &quot;it&#39;s not my fault, you should have =
read the release notes&quot;, or &quot;it&#39;s not my fault that you don&#=
39;t know how to troubleshoot BGP&quot;, or &quot;it&#39;s not my fault tha=
t you didn&#39;t do your due diligence&quot;.<br>
<br>
Phasing in a change of behavior over several releases is not a practical so=
lution, because:<br>
<br>
a) Customers will still be surprised when the default behavior finally chan=
ges, and<br>
b) Many customers won&#39;t deploy all the releases anyway.<span class=3D""=
><br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
<br>
Having said that, I think this is BCP material at best and if this is a BCP=
 then<br>
<br>
i) a &quot;backward compatibility a.k.a which end of the stick is sharp&quo=
t; section is very advisable<br>
</blockquote>
<br></span>
I would agree that something more than &quot;figure out how to configure th=
e new release to behave like the old release&quot; would be helpful.<span c=
lass=3D""><br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
ii) the BCP should describe which customer segment is best served with whic=
h default<br>
<br>
</blockquote>
<br></span>
But then operators from different segments would have to get together to un=
derstand each others&#39; requirements, and they&#39;d have to respect each=
 others&#39; opinions as well.=C2=A0 =C2=A0I can&#39;t wait to see what hap=
pens when the &quot;trust nobody&quot; folks get together with the &quot;ze=
roconfig plug and play&quot; folks ;-)<br>
<br>
The dilemma is that there is a real security problem in certain environment=
s, but the proposed solution seems to have unintended side-effects that are=
 problematic.=C2=A0 Then the question becomes whether the benefits are wort=
h the cost, and this is not really a question that can be resolved by IETF =
consensus.<br>
<br>
<br>
<br>
<br>
<br>
<br>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div class=
=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><d=
iv><span style=3D"font-size:12.8000001907349px"><font face=3D"georgia, seri=
f"><i>We=E2=80=99ve heard that a million monkeys at a million keyboards cou=
ld produce the complete works of Shakespeare; now, thanks to the Internet, =
we know that is not true.</i></font></span><i><font face=3D"garamond, serif=
"><br></font></i></div><div><span style=3D"font-size:12.8000001907349px"><f=
ont face=3D"times new roman, serif">=E2=80=94Robert Wilensky</font></span><=
br></div></div></div>
</div>

--001a1143689a542f18054d9f8e65--


From nobody Thu Apr 20 14:12:50 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE2DB1316BF for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:12:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.022
X-Spam-Level: 
X-Spam-Status: No, score=-2.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id azBWvaH0gjGU for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:12:47 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0123.outbound.protection.outlook.com [104.47.42.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56EC1129C52 for <idr@ietf.org>; Thu, 20 Apr 2017 14:12:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=pj7JOVayJS17SNFHv4WJOsUo0r5UINBTJE+nmIiD9iY=; b=CpskWxH0c5HTMoLdYK1rmQ1e4nmky3HadmjrHzc3Pnw6j+nsQWwKOxjVnZtPuAxJP0AlXAYzF3z52B1HBKcrf8eneWShvp5zv8OlC2fQ9ej2JbkSvgP5sqgXov+hoJUHuXU0MPTjA7kluEU2pyFPgq6yXSD6u/yMEHLsn8wb05k=
Received: from CY1PR05MB2507.namprd05.prod.outlook.com (10.167.10.134) by CY1PR05MB2508.namprd05.prod.outlook.com (10.167.10.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Thu, 20 Apr 2017 21:12:46 +0000
Received: from CY1PR05MB2507.namprd05.prod.outlook.com ([10.167.10.134]) by CY1PR05MB2507.namprd05.prod.outlook.com ([10.167.10.134]) with mapi id 15.01.1047.008; Thu, 20 Apr 2017 21:12:46 +0000
From: John Scudder <jgs@juniper.net>
To: Enke Chen <enkechen@cisco.com>
CC: John Scudder <jgs@juniper.net>, Job Snijders <job@ntt.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuhrbp3Q+amjrFUC5PeWc81WgJg==
Date: Thu, 20 Apr 2017 21:12:45 +0000
Message-ID: <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com>
In-Reply-To: <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=juniper.net;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [107.77.195.213]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CY1PR05MB2508; 7:pYkY7/TncouGrOOIrznzjx/IkJTgXr2jItwYjBBcUz9t4Rvg2tJtigtx1IH5IifRDqAhXC1pZ7ZYSZKmP4hXhigUbgxxv/S9hUcWNGVSKddHq3YHIQiuN8FXsU1yxPRpcfEvd2vYoIgixtuXbOZ0gwly96yy4naTF4oXO5YvkzM5gOd4TWs+TyTdUfUbnUuOn/+LACGmeDI3kbNFHoL3hS7r+k5lh19cDV4CcMB9sX3DpwbJcPVYTpiNty2Gv7v55VPn/5ztw4hUzFyOPW0FXgFqt4dve1sxyMX3CR/3VurEmf1ShleUaXvtuKGP33dGfFc2gT74dF3bpcSZMmd3xw==
x-forefront-antispam-report: SFV:SKI; SCL:-1SFV:NSPM; SFS:(10019020)(6009001)(39850400002)(39400400002)(39410400002)(39840400002)(39450400003)(39860400002)(24454002)(377454003)(3660700001)(2906002)(3280700002)(25786009)(82746002)(2950100002)(122556002)(38730400002)(110136004)(4326008)(6246003)(83716003)(36756003)(6916009)(99286003)(66066001)(53936002)(54906002)(6512007)(7736002)(33656002)(50986999)(86362001)(77096006)(93886004)(6436002)(6506006)(5660300001)(2900100001)(6486002)(8676002)(305945005)(6116002)(3846002)(102836003)(189998001)(54356999)(8936002)(81166006)(76176999)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2508; H:CY1PR05MB2507.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; 
x-ms-office365-filtering-correlation-id: ad4fa492-ff48-4fa2-2bd0-08d48831fdfb
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081);  SRVR:CY1PR05MB2508; 
x-microsoft-antispam-prvs: <CY1PR05MB25084CA0ED1364370763019DAA1B0@CY1PR05MB2508.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(95692535739014);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(6055026)(6041248)(20161123562025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123560025)(20161123555025)(20161123564025)(6072148); SRVR:CY1PR05MB2508; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2508; 
x-forefront-prvs: 02830F0362
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-ID: <EABE94945963B14EB4F4E7B3A602EA33@junipernetworks.onmicrosoft.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Apr 2017 21:12:45.9572 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2508
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/XpiuPVl56uBN4v5m9huYZmrfuJs>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 21:12:48 -0000

(as an individual contributor)

On Apr 20, 2017, at 5:03 PM, Enke Chen <enkechen@cisco.com> wrote:
> It's not like the issues with software update are new :-)

Yes, exactly. That's why I'm so surprised by this discussion.=20

What I still see here is

- on one hand, a worked example showing how an implementor could roll out t=
he functionality without causing heartburn for users. (My paraphrase: expos=
e the default in the configuration. When upgrading old->new, automatically =
create the corresponding configuration line(s) to configure for legacy beha=
vior.)

- on the other hand, general statements about how this is a hard problem.

I find the specific worked example more convincing.=20

--John=


From nobody Thu Apr 20 14:14:02 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F0321316C1 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:14:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iP1gShDgzM_k for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:13:58 -0700 (PDT)
Received: from mail-io0-x231.google.com (mail-io0-x231.google.com [IPv6:2607:f8b0:4001:c06::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F3421316B7 for <idr@ietf.org>; Thu, 20 Apr 2017 14:13:58 -0700 (PDT)
Received: by mail-io0-x231.google.com with SMTP id k87so87491502ioi.0 for <idr@ietf.org>; Thu, 20 Apr 2017 14:13:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=KG3GH17EzN83/NbUj8xbYxENJBZKGiIoGdoYIKLlN6s=; b=SHErfvVepgJLVe2Jm28abHUMXOCRgBEKT7fb0JA/b8DYD8Ww5qqMsLxRo3dMn8PiGm IjirEf1fjab3WOrTMS46CwvpN5YP6N5LDRdN+r/nMbyC87XKaksRgX/UHl76o+FMlOBI xQ5hwk9/yYZhDu4jFAHYVK1bvA8Bz8vNTdte0zXf0UNNHle8umdqTtwA0CNICf4T9Qn2 yjPC2lltJgpl8LAcX3AGikWlZoYP8pkkC+RMxD/RJiORrPjAbgdfE9zGFm3u/j80dgsH eG5FOIVjHGS+QU7FMKUrmPANI71he7C7ynC6s9R9Jg+EzOiz1Bx72dPfeVfBigeRGzV4 B2ng==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=KG3GH17EzN83/NbUj8xbYxENJBZKGiIoGdoYIKLlN6s=; b=FiqZKsU0LMXUlsgUFcLMrv64FifjOxtjq5vj0Cja7416gbtxkm4i1Bm3ZuXOivyvPp 2bE9k0Pflc58lZmzc4NZHIWi1hLylSF/dQOHXbgpVsk3lhZ6EXqmBjRI00f8EmrE6k1d UHZ+DywUwYZMYPz9LuLsPGo/9jUOKndeURNxuy8kRoLq/1FePeNjZnIH7apZ+DNizvdN 7ThrmzntM5CTqL+9ca8ecOgVP1XLslp1BblgLmaUAjBplbx1H1lUXVqJ7D/iGyLqE8om XpMo0o65GG6HCvmeyEzD3tgLLObQNFyUHVGojOezCPo8XHx6GZSYNGvy7u1i3VvhzAX7 BYXQ==
X-Gm-Message-State: AN3rC/7Axt+pPdPJA0uvSDbxByYMchbVCuiBDYnqDT1MnkNbtMI1dI9N Q7TGAxmOVy1zncTsd5YpSkktHuk5og==
X-Received: by 10.36.115.12 with SMTP id y12mr6327732itb.24.1492722837086; Thu, 20 Apr 2017 14:13:57 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Thu, 20 Apr 2017 14:13:55 -0700 (PDT)
In-Reply-To: <CACWOCC-Gusv1Jk1OXfVAZuWbMJxrzq=dEAdWGVSAPg0AjujhXA@mail.gmail.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <CA+b+ER=ee6Q59mbctO06P8x2QsTz_me9mL9YcB25O2Ey4+kpdA@mail.gmail.com> <CACWOCC-Gusv1Jk1OXfVAZuWbMJxrzq=dEAdWGVSAPg0AjujhXA@mail.gmail.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 20 Apr 2017 23:13:55 +0200
X-Google-Sender-Auth: g-2BIeB2n_0-Md8eRKB0NU8LbdY
Message-ID: <CA+b+ERmOF+7k1OJuJ3paXNGemEr9F_ZKUvb_VsP6h4vjHQHC4Q@mail.gmail.com>
To: Job Snijders <job@instituut.net>
Cc: Enke Chen <enkechen@cisco.com>, Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a11444dca73ea4f054d9f9e06
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/cDUnjviKEL0TWeoU2RwI0Tm_et4>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 21:14:01 -0000

--001a11444dca73ea4f054d9f9e06
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hey Job,

At least I am not seeing that much of a problem for large networks with
bgp-reject. We can collectively go around and educate folks at various NOGs
what is coming well before any vendor publishes code with that change,

The worry is about little guys with one or two routers which never attend
NOGs and which in fact still want to send everything and get default out
from upstream. I am feeling a bit sorry to expose them to such pain
regardless if they use cisco, quagga, ubiquiti, goBGP, snaproute ... you
name it.

//R



On Thu, Apr 20, 2017 at 11:08 PM, Job Snijders <job@instituut.net> wrote:

> So a change like bgp-reject will take many years to be deployed within a
> single network, how can that be reconciled with the perceived "surprise"?
>
> Kind regards,
>
> Job
>
> On Thu, 20 Apr 2017 at 23:05, Robert Raszuk <robert@raszuk.net> wrote:
>
>> +
>>
>> c) deployment of new code release in large network takes months if not
>> years
>>
>> On Thu, Apr 20, 2017 at 11:03 PM, Enke Chen <enkechen@cisco.com> wrote:
>>
>>> Hi, John:
>>>
>>> It's not like the issues with software update are new :-)
>>>
>>> As we all know, there is a complete lack of uniformity (on a global
>>> scale) with
>>> the procedures for software update. As a result, a proposal that assume=
s
>>> certain
>>> procedures is bound to be incomplete, and will not work for some.
>>>
>>> As Eric summarized,
>>>
>>> ---
>>> Phasing in a change of behavior over several releases is not a practica=
l
>>> solution, because:
>>>
>>> a) Customers will still be surprised when the default behavior finally
>>> changes, and
>>> b) Many customers won't deploy all the releases anyway.
>>> ---
>>>
>>> Thanks.  -- Enke
>>>
>>> On 4/20/17 11:40 AM, John G. Scudder wrote:
>>> > Enke,
>>> >
>>> > On Apr 20, 2017, at 11:57 AM, Enke Chen <enkechen@cisco.com> wrote:
>>> >
>>> >> It depends on the customer base and also how long the software has
>>> been deployed.
>>> >> Just think about the scenario that a large number of customers would
>>> lose network
>>> >> connectivity unexpectedly due to a default behavior change in the
>>> code. Such outages
>>> >> could keep happening to different customers for years to come.
>>> >>
>>> >> Perhaps, changing "impossible" to "impractical" :-)
>>> >
>>> > Various people have provided worked examples of how they think this
>>> change could be effected without causing the disruptions you warn of. I=
've
>>> pasted one example (from Jared) below. I haven't seen any response or
>>> acknowledgement from you, to those suggestions, just the repetition of =
your
>>> initial concern. I for one don't understand why you think a scheme such=
 as
>>> Jared describes would be either "impossible" or "impractical".
>>> >
>>> > If you are unconvinced about the practicality of such a scheme, it
>>> would be great if you could describe why.
>>> >
>>> > Thanks,
>>> >
>>> > --John
>>> >
>>> > Jared's message:
>>> >> On Apr 20, 2017, at 9:40 AM, Jared Mauch <jared@puck.nether.net>
>>> wrote:
>>> >>
>>> >>
>>> >>> On Apr 19, 2017, at 6:26 PM, Robert Raszuk <robert@raszuk.net>
>>> wrote:
>>> >>>
>>> >>> Keyur,
>>> >>>
>>> >>> You can not set "insecure mode" before you reload the OS as current
>>> OS does not have such knob. Unless you delay the deployment across N
>>> releases and enforce sequenced upgrade.
>>> >>
>>> >> Infact, this is the recommendation that I=E2=80=99ve provided to ven=
dors that
>>> have expressed concerns.  There are many defaults that have not always =
been
>>> displayed, but things like IOS have =E2=80=9Cshow run all=E2=80=9D so y=
ou can see these.
>>> >>
>>> >> Something like the =E2=80=98bgp unsafe-ebgp-policy=E2=80=99 could be=
 generated on
>>> their respective implementations.  I didn=E2=80=99t think that GROW/IDR=
 needed to
>>> tell implementors this level of how to manage their release, so this do=
es
>>> seem somewhat out of scope, but a concern I can see needs to be thought
>>> about.
>>> >>
>>> >>> The only way to prevent massive reachability failure upon reload du=
e
>>> to complete silent bgp prefix drop is to configure inbound policy for a=
ll
>>> EBGP sessions before the reload and run with new image.
>>> >>
>>> >> Since we=E2=80=99re talking about how to operate a network:
>>> >> - People who are taking advantage of an undefined behavior will
>>> always be surprised
>>> >> - Vendors can take the N+1.x and N+2.x release strategy, where in N
>>> and N+1 they generate their equivalent of IOS-XR and the "bgp
>>> unsafe-ebgp-policy=E2=80=9D policy to prevent their customers from brea=
king
>>> >> - In a release N+2(or more) that would become the =E2=80=9Cdefault=
=E2=80=9D.
>>> >>
>>> >>> Of course this is all assuming that someone will read carefully the
>>> release notes :)
>>> >>
>>> >> Most people don=E2=80=99t, and I=E2=80=99ve always suggested to vend=
ors they
>>> implement some sort of incremental approach to resolving this.
>>> >>
>>> >> What worries me is that there is a major incumbent provider who
>>> doesn=E2=80=99t see this as the serious (and well-documented) security =
issue that
>>> it is for those operating large networks.
>>> >>
>>> >>> If they do not the troubleshooting of this will be really painful !
>>> CE will see EBGP session as UP, will get all the routes and will send h=
is
>>> routes. CE will have no clue if PE dropped or accepted his routes. Like=
wise
>>> on the other end .. Only imagine a network which has 10s of thousands o=
f
>>> VPN CEs as Bruno mentioned and their provider not following all release=
s
>>> CEs are running.
>>> >>
>>> >>
>>> >> If they don=E2=80=99t know how to troubleshoot BGP, that isn=E2=80=
=99t the vendors
>>> fault.
>>> >>
>>> >>> At least doing it as part of OPEN msg will be immediately indicated
>>> to both ends.
>>> >>
>>> >> This is you promoting a different draft, I recommend another thread
>>> for that draft.
>>> >>
>>> >> - Jared
>>> > ...
>>> >
>>>
>>> _______________________________________________
>>> Idr mailing list
>>> Idr@ietf.org
>>> https://www.ietf.org/mailman/listinfo/idr
>>>
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>
>

--001a11444dca73ea4f054d9f9e06
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Hey Job,=C2=A0</div><div class=3D"gmail=
_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">=
<br></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica=
,sans-serif;font-size:small">At least I am not seeing that much of a proble=
m for large networks with bgp-reject. We can collectively go around and edu=
cate folks at various NOGs what is coming well before any vendor publishes =
code with that change,=C2=A0</div><div class=3D"gmail_default" style=3D"fon=
t-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small">The worry is about little guys with one or two routers which never=
 attend NOGs and which in fact still want to send everything and get defaul=
t out from upstream. I am feeling a bit sorry to expose them to such pain r=
egardless if they use cisco, quagga, ubiquiti, goBGP, snaproute ... you nam=
e it.=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small">//R</div><=
div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif=
;font-size:small"><br></div><div class=3D"gmail_default" style=3D"font-fami=
ly:arial,helvetica,sans-serif;font-size:small"><br></div></div><div class=
=3D"gmail_extra"><br><div class=3D"gmail_quote">On Thu, Apr 20, 2017 at 11:=
08 PM, Job Snijders <span dir=3D"ltr">&lt;<a href=3D"mailto:job@instituut.n=
et" target=3D"_blank">job@instituut.net</a>&gt;</span> wrote:<br><blockquot=
e class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc sol=
id;padding-left:1ex"><div>So a change like bgp-reject will take many years =
to be deployed within a single network, how can that be reconciled with the=
 perceived &quot;surprise&quot;?</div><div><br></div><div>Kind regards,</di=
v><div><br></div><div>Job</div><div class=3D"HOEnZb"><div class=3D"h5"><div=
><br><div class=3D"gmail_quote"><div>On Thu, 20 Apr 2017 at 23:05, Robert R=
aszuk &lt;<a href=3D"mailto:robert@raszuk.net" target=3D"_blank">robert@ras=
zuk.net</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"=
margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div cl=
ass=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-=
size:small">+=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:=
arial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_d=
efault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">c)=
 deployment of new code release in large network takes months if not years=
=C2=A0</div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote"=
>On Thu, Apr 20, 2017 at 11:03 PM, Enke Chen <span>&lt;<a href=3D"mailto:en=
kechen@cisco.com" target=3D"_blank">enkechen@cisco.com</a>&gt;</span> wrote=
:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-le=
ft:1px #ccc solid;padding-left:1ex">Hi, John:<br>
<br>
It&#39;s not like the issues with software update are new :-)<br>
<br>
As we all know, there is a complete lack of uniformity (on a global scale) =
with<br>
the procedures for software update. As a result, a proposal that assumes ce=
rtain<br>
procedures is bound to be incomplete, and will not work for some.<br>
<br>
As Eric summarized,<br>
<br>
---<br>
<span>Phasing in a change of behavior over several releases is not a practi=
cal solution, because:<br>
<br>
a) Customers will still be surprised when the default behavior finally chan=
ges, and<br>
b) Many customers won&#39;t deploy all the releases anyway.<br>
</span>---<br>
<br>
Thanks.=C2=A0 -- Enke<br>
<div class=3D"m_6554831842586729875m_-5924115765543339566HOEnZb"><div class=
=3D"m_6554831842586729875m_-5924115765543339566h5"><br>
On 4/20/17 11:40 AM, John G. Scudder wrote:<br>
&gt; Enke,<br>
&gt;<br>
&gt; On Apr 20, 2017, at 11:57 AM, Enke Chen &lt;<a href=3D"mailto:enkechen=
@cisco.com" target=3D"_blank">enkechen@cisco.com</a>&gt; wrote:<br>
&gt;<br>
&gt;&gt; It depends on the customer base and also how long the software has=
 been deployed.<br>
&gt;&gt; Just think about the scenario that a large number of customers wou=
ld lose network<br>
&gt;&gt; connectivity unexpectedly due to a default behavior change in the =
code. Such outages<br>
&gt;&gt; could keep happening to different customers for years to come.<br>
&gt;&gt;<br>
&gt;&gt; Perhaps, changing &quot;impossible&quot; to &quot;impractical&quot=
; :-)<br>
&gt;<br>
&gt; Various people have provided worked examples of how they think this ch=
ange could be effected without causing the disruptions you warn of. I&#39;v=
e pasted one example (from Jared) below. I haven&#39;t seen any response or=
 acknowledgement from you, to those suggestions, just the repetition of you=
r initial concern. I for one don&#39;t understand why you think a scheme su=
ch as Jared describes would be either &quot;impossible&quot; or &quot;impra=
ctical&quot;.<br>
&gt;<br>
&gt; If you are unconvinced about the practicality of such a scheme, it wou=
ld be great if you could describe why.<br>
&gt;<br>
&gt; Thanks,<br>
&gt;<br>
&gt; --John<br>
&gt;<br>
&gt; Jared&#39;s message:<br>
&gt;&gt; On Apr 20, 2017, at 9:40 AM, Jared Mauch &lt;<a href=3D"mailto:jar=
ed@puck.nether.net" target=3D"_blank">jared@puck.nether.net</a>&gt; wrote:<=
br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;&gt; On Apr 19, 2017, at 6:26 PM, Robert Raszuk &lt;<a href=3D"mail=
to:robert@raszuk.net" target=3D"_blank">robert@raszuk.net</a>&gt; wrote:<br=
>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; Keyur,<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; You can not set &quot;insecure mode&quot; before you reload th=
e OS as current OS does not have such knob. Unless you delay the deployment=
 across N releases and enforce sequenced upgrade.<br>
&gt;&gt;<br>
&gt;&gt; Infact, this is the recommendation that I=E2=80=99ve provided to v=
endors that have expressed concerns.=C2=A0 There are many defaults that hav=
e not always been displayed, but things like IOS have =E2=80=9Cshow run all=
=E2=80=9D so you can see these.<br>
&gt;&gt;<br>
&gt;&gt; Something like the =E2=80=98bgp unsafe-ebgp-policy=E2=80=99 could =
be generated on their respective implementations.=C2=A0 I didn=E2=80=99t th=
ink that GROW/IDR needed to tell implementors this level of how to manage t=
heir release, so this does seem somewhat out of scope, but a concern I can =
see needs to be thought about.<br>
&gt;&gt;<br>
&gt;&gt;&gt; The only way to prevent massive reachability failure upon relo=
ad due to complete silent bgp prefix drop is to configure inbound policy fo=
r all EBGP sessions before the reload and run with new image.<br>
&gt;&gt;<br>
&gt;&gt; Since we=E2=80=99re talking about how to operate a network:<br>
&gt;&gt; - People who are taking advantage of an undefined behavior will al=
ways be surprised<br>
&gt;&gt; - Vendors can take the N+1.x and N+2.x release strategy, where in =
N and N+1 they generate their equivalent of IOS-XR and the &quot;bgp unsafe=
-ebgp-policy=E2=80=9D policy to prevent their customers from breaking<br>
&gt;&gt; - In a release N+2(or more) that would become the =E2=80=9Cdefault=
=E2=80=9D.<br>
&gt;&gt;<br>
&gt;&gt;&gt; Of course this is all assuming that someone will read carefull=
y the release notes :)<br>
&gt;&gt;<br>
&gt;&gt; Most people don=E2=80=99t, and I=E2=80=99ve always suggested to ve=
ndors they implement some sort of incremental approach to resolving this.<b=
r>
&gt;&gt;<br>
&gt;&gt; What worries me is that there is a major incumbent provider who do=
esn=E2=80=99t see this as the serious (and well-documented) security issue =
that it is for those operating large networks.<br>
&gt;&gt;<br>
&gt;&gt;&gt; If they do not the troubleshooting of this will be really pain=
ful ! CE will see EBGP session as UP, will get all the routes and will send=
 his routes. CE will have no clue if PE dropped or accepted his routes. Lik=
ewise on the other end .. Only imagine a network which has 10s of thousands=
 of VPN CEs as Bruno mentioned and their provider not following all release=
s CEs are running.<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; If they don=E2=80=99t know how to troubleshoot BGP, that isn=E2=80=
=99t the vendors fault.<br>
&gt;&gt;<br>
&gt;&gt;&gt; At least doing it as part of OPEN msg will be immediately indi=
cated to both ends.<br>
&gt;&gt;<br>
&gt;&gt; This is you promoting a different draft, I recommend another threa=
d for that draft.<br>
&gt;&gt;<br>
&gt;&gt; - Jared<br>
&gt; ...<br>
&gt;<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</blockquote></div></div>
</div></div></blockquote></div><br></div>

--001a11444dca73ea4f054d9f9e06--


From nobody Thu Apr 20 14:25:35 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C51CF129C48 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:25:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lo3YuMBmSfCI for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:25:32 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51BC11316CC for <idr@ietf.org>; Thu, 20 Apr 2017 14:25:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1026; q=dns/txt; s=iport; t=1492723532; x=1493933132; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=M4ODk2yWhLyntV7MysR5U4Fmic4FoGGfuKMv3wj4eJw=; b=jlxRyqBQIMLfZif1H29i4n4BiuSGTv4/z/QVfqbBn8lKiuuIu1i0rreS by+lvtj2Z5SYktlQUhdofyPpDqKwV7hhM5kQJ3eyFieUdWJqqQo8x2lYO ESpUJEU3PzgF+U2excqu4pRNrOb+4wrjvPjlaVobPiCgni+CMfu5Lq2zU c=;
X-IronPort-AV: E=Sophos;i="5.37,227,1488844800"; d="scan'208";a="413517362"
Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Apr 2017 21:25:31 +0000
Received: from [10.41.56.234] ([10.41.56.234]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id v3KLPT0Q028005; Thu, 20 Apr 2017 21:25:30 GMT
To: John Scudder <jgs@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net>
Cc: Job Snijders <job@ntt.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <11b08110-26e7-d67b-55f1-1f8cb777605e@cisco.com>
Date: Thu, 20 Apr 2017 14:25:29 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/HPWEKJxUbNaIg08exAQhDcnf1RE>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 21:25:34 -0000

John,

On 4/20/17 2:12 PM, John Scudder wrote:
> (as an individual contributor)
> 
> On Apr 20, 2017, at 5:03 PM, Enke Chen <enkechen@cisco.com> wrote:
>> It's not like the issues with software update are new :-)
> 
> Yes, exactly. That's why I'm so surprised by this discussion. 
> 
> What I still see here is
> 
> - on one hand, a worked example showing how an implementor could roll out the
>   functionality without causing heartburn for users. (My paraphrase: expose the
>   default in the configuration. When upgrading old->new, automatically create
>   the corresponding configuration line(s) to configure for legacy behavior.)

Change of software may involve both upgrade and downgrade and combination (e.g.,
when a serious issue is seen).

When the software is downgraded, the config may not be recognized and may be
lost.

-- Enke

> 
> - on the other hand, general statements about how this is a hard problem.
> 
> I find the specific worked example more convincing. 
> 
> --John
> 


From nobody Thu Apr 20 14:49:43 2017
Return-Path: <erosen@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C37AE128A32 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:49:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.802
X-Spam-Level: 
X-Spam-Status: No, score=-4.802 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rKaTECY3isL9 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 14:49:40 -0700 (PDT)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0096.outbound.protection.outlook.com [104.47.37.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F9AF12EA74 for <idr@ietf.org>; Thu, 20 Apr 2017 14:49:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=2x2M5PRH36wnZIjm1SyNnvYIty1uUE9CrWpCd6Zz/mo=; b=U7sgnjA0yyMqQF5mngettU1398UJzWmlruNbROF4MobbOAEEnVu/VrFQucN9VIaLNGolmDMB0Ysq+OHxB39Zr3HuPCjegUlT3EcGI/2kkx+BHK0ty8VpdqeCsOw+ZYvu6e0QEQR6+6HiqwtjuGxyESdy81YMtoQ+R8M7UHR7xHs=
Authentication-Results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.35.36] (66.129.241.12) by CY1PR05MB2188.namprd05.prod.outlook.com (10.166.192.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Thu, 20 Apr 2017 21:49:37 +0000
To: Job Snijders <job@instituut.net>, Enke Chen <enkechen@cisco.com>, Robert Raszuk <robert@raszuk.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <CA+b+ER=ee6Q59mbctO06P8x2QsTz_me9mL9YcB25O2Ey4+kpdA@mail.gmail.com> <CACWOCC-Gusv1Jk1OXfVAZuWbMJxrzq=dEAdWGVSAPg0AjujhXA@mail.gmail.com>
CC: idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
From: Eric C Rosen <erosen@juniper.net>
Message-ID: <a9939e21-3e2f-2e29-857f-58c5e8a7c541@juniper.net>
Date: Thu, 20 Apr 2017 17:49:34 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <CACWOCC-Gusv1Jk1OXfVAZuWbMJxrzq=dEAdWGVSAPg0AjujhXA@mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR1301CA0005.namprd13.prod.outlook.com (10.174.84.146) To CY1PR05MB2188.namprd05.prod.outlook.com (10.166.192.12)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 99d4d85b-718b-4372-1b31-08d4883724d7
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:CY1PR05MB2188; 
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2188; 3:eP2i17HMUC+gqxw2gBa76GS1hU0x+3HYTb2aGYgOLb+sUK7eoBDu7Mn8oSQxKhozPKQE4d1G7zwidyEedVGnr00YQ3ZXOb9xkq58IMOt1s25RybT1U20n7aOYko06aJpnJrLRhhBFEYbd/Xtch0X8pv2mRVZMRLjQYj2ZMGoZY9A5jZgo1MOZXHMqB3971Z0lQF+aWjgp3pnNhTgHce/jFdM8b1BqIs0XbtXyHrkX5QamI67fPzHYk4dPttEvfE30ZYTh/u36ZTlmgeiRAMdvO+1GeyAYTQGXX0QMPZ8o19+/b0vYC1lH9brKa7MlZH6t5rwMqC2ysfafQ1/zMhpHX9fxN3kk4revaYv9xA5Jsw=; 25:7Uk6ln2iNMJ2zpm9CZIz7TQV4jce7XAumsH3va4ciekXd+3W6PwmGP2D7pA6mEb5y5WLrv0dYwPGkopIaV8cJAZtcY/GL25VgBJspV3vLF41Jcu2i/07gRz+K8yQZZyozbTzvezJ9H4lUbWg2MCpWOE4w3KOvwY/WcNmgVzygjX/HWgJEf575x9uJWa+By4FDA6xp0nuFNpp+nEChRi49Gq8iM+z/BXuZjKxHoK/sAWDOgTuVTlf66NHUVrMwONAms0mhWb2dmd2oDT/h9oqEEJVg4MYO4H0g9l1jvMO2nM/jQeEAnQpxoduR5ZgUoFueO8e7ARqZiPOm/p5ExT7syhzY85ESUNCsmB+0g1njFVfUsprr8qVuLgXC+gHUV3vcJlDC6h2VD8PII5PXMe8BwIeGSsnwRyV5/Wx7wFeFpYY9E99oPX79P/6DDNKrh39pXGFEWBufsIW1S24XL7SP0u9b3XMiVAJfBkRVDP+b6A=
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2188; 31:s+FjiDVap3vhlI6KIaEjrtGUYeNJgC2Ljk7gyHpwuxGy9LA2DnZvoKNuTAlmoT1rQZUdVYTrbyylONV7RCAwVXmboUsvPG/jkYbb9TsP42A6bQo+9FMPtEa7VsQ2ovvC1DIhCyeEy4UhvVJ203gv8ctkqIoTN3wEqgk3NnfA0X33W0bYyPregSbooZIBn3lD2/rMBxTuDG2pFp173wx8V4VzC0kLyizjy0DSnCAIdIE=; 20:xvzmU25v3wrbaCl+d2EaSPNcsWbrGJO68DyK8MjByvog3zlTUrZBBe2t3S1UeGqQ4A0hC6hh1fx91VRxBiOvrI2EAVky/S10d7vIY2t8+FifN5X6EDRoOZXcXKVSugegB67KWUFRatgv1FKmvrUFO3rz7U+7TX3IOpbyyhEU6XnXFzDMREfefptb/Dha8BWmw5gKc0m3GTkC6QhX0Nve5zx+KOhCGIRoISY6JMdq6MAn+GxoartmNBmEinzT9ue3Uho821uu28G2nh2WC/jrWyw2PNiTgrJB12ab/eTk1fw7r/Bo+ReXlbLo4W7oWG4hRSOLVFETa+6kpg3n63ds/0Dw871I1hbdvAF5eSWur2Rm92DCzmbMsnqSLRujqnwamYwNdPytekwUd/2+hOZsgDPDM8DktMKm1SoIvnq8NLC03jbf975Dg8/DfIUxV+vCcx4MFsNbxqHeCfwzW3LKw4AOuLm8msMQyGMYfimVpiBSNQF2uAhR4a8XaQMLYQpAfR9lxZ0Ui9YzxTOqXnjX6KWUxn5N/Og9OhbVp0sv/TT4asFoQs/1Lg/t+x0gjputqn2pqLyMyjaRTq5BHH+ii9BP5bML/BhOH+cz2lS0Q3E=
X-Microsoft-Antispam-PRVS: <CY1PR05MB2188488620E5E4A744551819D41B0@CY1PR05MB2188.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(93006095)(93001095)(6055026)(6041248)(20161123562025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123564025)(20161123560025)(20161123555025)(6072148); SRVR:CY1PR05MB2188; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2188; 
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2188; 4: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
X-Forefront-PRVS: 02830F0362
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(39840400002)(39860400002)(39850400002)(39400400002)(39410400002)(39450400003)(377454003)(24454002)(86362001)(5660300001)(38730400002)(25786009)(31696002)(42186005)(31686004)(53936002)(53546009)(50986999)(54356999)(76176999)(93886004)(7736002)(4001350100001)(305945005)(50466002)(33646002)(65806001)(54906002)(23746002)(65956001)(2950100002)(47776003)(66066001)(6246003)(189998001)(4326008)(81166006)(230700001)(36756003)(6666003)(6116002)(3846002)(83506001)(6486002)(2906002)(77096006)(90366009)(8676002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2188; H:[172.29.35.36]; FPR:; SPF:None; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?Windows-1252?Q?1; CY1PR05MB2188; 23:SxJMfoZ24uKM+3PVT4CnRxDn7rpii3ve200Lh?= =?Windows-1252?Q?D8w4Hx/t/H1x0iS2GQArnWNez9ORfN7FBwKMD9pWrawh2CwNZeC5uYiT?= =?Windows-1252?Q?AUc8BMeYxwco0/XjGUNxQClYz5S7ciBr0LLJQwILpo8tYL5y7+S4SLQd?= =?Windows-1252?Q?UR2/cF2jk7Vt9LrGetmvYpvy4Zzq2dQHuB3v89/VFilYSTtwMWW9BcY4?= =?Windows-1252?Q?EYA1X/qpIHO2Sv86etwCXjIG0+lScjl51vDCvtGnw1A+DqG3An2ri5Js?= =?Windows-1252?Q?6+0sCD6kfM6xTaAqgis9hJg6sGBGLwtoNdO1wHhHzPGiByNz3r3tFPKW?= =?Windows-1252?Q?JYAODo10Ok7N4jMg+3FubZLr4Lr5ebhX1AfHVojWVGf5sDD5HtXtqfja?= =?Windows-1252?Q?12Gi5XIt0YjVjC2sqF/JCxXiECEPWmWVJ2RSkXNW8wh03VNWxEr2oNCo?= =?Windows-1252?Q?9NwkpuThP/IEMI8VASkAML+p2NEM1cE4T8AUQexJioSlakI/4A6eVFjL?= =?Windows-1252?Q?YZRdl/PrDXj/rfwFnswyXESdoEWOEe0Ga1QBI7IGkXnq+xfZjRLOSTuA?= =?Windows-1252?Q?73sdUWJELg9pLOCyonTCNlVeDXyxWQs9V+Ba32T3YMQGwgzyJn943eu9?= =?Windows-1252?Q?9KxovgEa3kesjnfA4xpNGQu3VIHui7C9LK/FszQW8W/g3OPpFmYMMhKk?= =?Windows-1252?Q?CmCf/6k1iCTPdLKTHw1WYQDIyC6nLtzgDz8L4nqMmsHnTAeqlAwarLyh?= =?Windows-1252?Q?qaxHxdg8yBMH+WYk+t3JwidDntVSYgzETDp7d20cZYk9esAHLxgdvSOU?= =?Windows-1252?Q?eoL8jOWAownjYvUO//P5bZ6h8usZbZAFgh22ClOJxABHjCalKxQ1Hrd7?= =?Windows-1252?Q?xnblzKzvaM6rvbO/zsOKnYIlU8UxpbnwlODPThR3XX6KReeAf/fS4Zdi?= =?Windows-1252?Q?h6bX65j+p/XwqKheJwqxHreS+ykOTrBR1DebvhyVlj3wUIRxQIEDkJfl?= =?Windows-1252?Q?dr/flPJpUDSkaJHc9M32cE1eYZD5amJTMo+e0jFC5camrbM6xoXrwBER?= =?Windows-1252?Q?GB6Xjk1nLdKV9Mr8PyF1Cr0vpOKUB34FJkaHRhqT2PBbtvEgByllmUnZ?= =?Windows-1252?Q?MMbeQFoR4QoIJhKcBy37xX7u2D798YcK6BbzwmKMwgKmsX1QFPXC5JRD?= =?Windows-1252?Q?ubGC3JepHL0umB3sG9PCixzkNoBeobe3lDRT0qL2j5tyw07WkHx+GoKY?= =?Windows-1252?Q?LWeA3RMt/O/hYrGFxaA26jr7BuUB6WBUc9mD+WsGE0SgHxE+3eBvwzdZ?= =?Windows-1252?Q?IKmtxXWYpBRpryN0NjGdAfM1vQNMVygto6ViMFXCznXVBwuO417I7MPW?= =?Windows-1252?Q?S4C6zxsMw0N?=
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2188; 6: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; 5:gowgbscuiTEaMSGpx2NAGw2FeW17dayIui3DrBFO61km2CdHZOFEIyF/PsJlPQ6D5QUEzLsX6g3v5PqlZLZEATq/EbrClKcREBmV5MwK/x9pVsmJMjn37jaXuK6hxzq28cXeE4gYB4JBqWCtmKmyWw==; 24:gI+FSDRkzJYrGx0ptaBwDraRAmbavWh1HguO1F9idCmLorlh7tPKl0WCsH8jNLkrTa69HymBVyNOpYUmG7BvdTzyJNmG1utMONrbH0E1YUI=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2188; 7:MrLejcpjGwPZdDzqc7n40qTxTlEwiQnUxJ+Ig1j1jsO2XIK4V1y3j/W5PvZdOizuGQKQAYYfOh4liTpJ10XPISblsA6ov9Zh8+yVAHOkoIb8S3rab0I1IfQrhyDH457o5oOPHp+4wIp/hfue+UBH5epp3Rz72GEoJtpII5gEqcbiWg4x4FOeLOlraOuzgXAsWL5yn9ebOz/ozZeu5wI4te1pC3f5EQx9D8dvmeVo7HRhw+uA4rw4YFfa6sVK9Qrqk/5ywm9hV+TDQwFbcTD62BNL9isNdfWCjI4qymjj1lLZm/XKqJ+rmC/vsiEBxahrgErOeNGh+ikikXb764ioJA==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Apr 2017 21:49:37.8890 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2188
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/bCdCdchcxJ303htQWzsbHYVMiao>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 21:49:42 -0000

On 4/20/2017 5:08 PM, Job Snijders wrote:
> So a change like bgp-reject will take many years to be deployed within 
> a single network, how can that be reconciled with the perceived 
> "surprise"?
>

The surprise comes when the first router with the new defaults is deployed.

The fact that one or two intermediate releases had been deployed during 
the previous several years doesn't lessen the surprise.

This isn't a problem for the folks who want the defaults changed and who 
understand all the issues, it's only a problem for everyone else.





From nobody Thu Apr 20 15:17:47 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06ACD128CDC for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 15:17:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Oxyk8HMD10FZ for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 15:17:44 -0700 (PDT)
Received: from mail-io0-x234.google.com (mail-io0-x234.google.com [IPv6:2607:f8b0:4001:c06::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB406128799 for <idr@ietf.org>; Thu, 20 Apr 2017 15:17:44 -0700 (PDT)
Received: by mail-io0-x234.google.com with SMTP id a103so90444459ioj.1 for <idr@ietf.org>; Thu, 20 Apr 2017 15:17:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=TMslYN1F+J3gfeV/ILxk/5zPcQL3SiFvL3qBleWVyJw=; b=Ew6kFMINIm40cUF98WfngjuEerol1g/HJMHlMRTuCOtRmcOuR3+4XdMEBzwwQn9wr5 VYNmgwleue4W2eoul4MUCV56Fmut0hM5snxZ/Ao2g/JaYl1Lc9U3bYnCp7dk57R6usIB NKvPunMXTawIOHRhLtSilBRbMcEcpw/yYaVOWVOXill1JwCeE/zFlWfot31sXxAVjbru iLAwhDkQhqIg1sPWo65NQDb+5rLMKSYetdJ0b5+0kYlMlb9vEZK6JAQX89BJxfC43q4j X2nHptfZP4orY2GIUvo1WuDXBprCJAZVLx7ZkOhEQJL/8/h+Yu3IyxSGX+pD1C852REO S4Gg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=TMslYN1F+J3gfeV/ILxk/5zPcQL3SiFvL3qBleWVyJw=; b=dXNVyur+wbxPTA5BG7rgnYxeqlStK23JXQ09Kxxw4HlGpcUx1b+NEo/laFyiQck/tt VHAW0MDLIEG1CRwDhLXv+5KefoW3Ylir1brXj61mKe1SzsfzlD+o3vHUURTegY6anxCd jLr4p0QhTCUINmIpcqE6HSZfj+6odG6J8iOGqz6cb7dIE8ZZksV73OACexQ31kw1oIUe 8f66tBYRic4QNkmPymXNvAOYrZfYvoqgwHDupBGz40s3DBU9b5szx1LFnNFemyequ43H NCS6fTI4z+e6gIEnXeayci9UUIg5SoOlAy6Uk4ensYQEisewk3ZInc5mPQ2COlxd7ktZ 2uQg==
X-Gm-Message-State: AN3rC/75k6YL0VYOWOPrs+Tg8HdSpi9IkL7pZ9qefM7pq6yfIK3KwC2E +OeagiuLlsNg21iJZ3zM2wsLj5e2T8zi
X-Received: by 10.107.16.135 with SMTP id 7mr12537119ioq.228.1492726662658; Thu, 20 Apr 2017 15:17:42 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Thu, 20 Apr 2017 15:17:41 -0700 (PDT)
In-Reply-To: <58F89C07.8080900@foobar.org>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org> <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com> <58F89C07.8080900@foobar.org>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 21 Apr 2017 00:17:41 +0200
X-Google-Sender-Auth: 3y-vkqV5rfHPLJ7kCwfkdE94UdA
Message-ID: <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com>
To: Nick Hilliard <nick@foobar.org>
Cc: Jeffrey Haas <jhaas@pfrc.org>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a113fe9c2798129054da082de
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/cKCFRs0PI3lBd4yxfsp9GzOPFms>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 22:17:46 -0000

--001a113fe9c2798129054da082de
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Nick,

I am very happy for you that your experience with published static MTU
values is so great. Well if you go via your own switches with dark fiber I
would not expect this to be any different.

If however you operate a distributed IX and use leased circuits from other
carriers between your access switches you may be very surprised that
suddenly your MTU get's reduced due to underlying carrier reroute to
different links or applying say MPLS link protection.

We do see this occurring more and more these days and it is nasty to
troubleshoot too if you have no proper tool running. So tactfully I
recommend we do not close our minds to only those problems which one have
seen in his own shop.

On the topic of ICMP or ARP it is your choice. I prefer to know that my
upstream is down in say 2 sec rather then suffer from broken Internet link
forever as my upstream provider will not run BFD session with an office
fiber tail.

Cheers,
R.



On Thu, Apr 20, 2017 at 1:31 PM, Nick Hilliard <nick@foobar.org> wrote:

> Robert Raszuk wrote:
> > And one of the requirements as you have heard from at least one custome=
r
> is
> > to test MTU of the path to such BGP next hops. Is RFC5880 BFD really be=
st
> > tool for that ?
>
> All IXPs have published MTUs and someone attempts to connect to an IXP
> with the expectation that using a different MTU is going to cause
> anything other than complete brokenness, then I'd tactfully suggest an
> alternative career path.
>
> >     As noted previously, the draft does permit for alternate means
> >     beyond BFD.
> >     However, we have to pick one.  Standardizing ping is likely a bad
> >     idea. :-)
> >
> > =E2=80=8BWhat is there to standardize ? RFC862 seems like pretty good s=
tandard
> > already.
>
> With sufficient thrust, pigs fly just fine.
>
> ICMP is the wrong tool in the same way that ARP request/reply is also
> the wrong tool for this.  It's rubbish for this purpose because it's
> usually highly deprioritised on routers, unlike bfd which is often
> fast-pathed and carefully controlled.  BFD is fit for this purpose
> because it's designed specifically and is supported by router vendors
> for exactly this purpose.
>
> Fast liveliness detection cannot be pawned off to an arbitrary protocol
> just because that protocol replies to packets, in the same way that we
> don't exchange routes over xml in https or implement ssh using udp/53,
> or plough fields using a modified toyota yaris.
>
> Nick
>

--001a113fe9c2798129054da082de
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Nick,</div><div class=3D"gmail_default"=
 style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div=
><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-ser=
if;font-size:small">I am very happy for you that your experience with publi=
shed static MTU values is so great. Well if you go via your own switches wi=
th dark fiber I would not expect this to be any different.=C2=A0</div><div =
class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fon=
t-size:small"><br></div><div class=3D"gmail_default" style=3D"font-family:a=
rial,helvetica,sans-serif;font-size:small">If however you operate a distrib=
uted IX and use leased circuits from other carriers between your access swi=
tches you may be very surprised that suddenly your MTU get&#39;s reduced du=
e to underlying carrier reroute to different links or applying say MPLS lin=
k protection.=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:=
arial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_d=
efault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">We=
 do see this occurring more and more these days and it is nasty to troubles=
hoot too if you have no proper tool running. So tactfully I recommend we do=
 not close our minds to only those problems which one have seen in his own =
shop.</div><div class=3D"gmail_default" style=3D"font-family:arial,helvetic=
a,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small">On the topic of=
 ICMP or ARP it is your choice. I prefer to know that my upstream is down i=
n say 2 sec rather then suffer from broken Internet link forever as my upst=
ream provider will not run BFD session with an office fiber tail.</div><div=
 class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fo=
nt-size:small"><br></div><div class=3D"gmail_default" style=3D"font-family:=
arial,helvetica,sans-serif;font-size:small">Cheers,<br>R.</div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,=
helvetica,sans-serif;font-size:small"><br></div></div><div class=3D"gmail_e=
xtra"><br><div class=3D"gmail_quote">On Thu, Apr 20, 2017 at 1:31 PM, Nick =
Hilliard <span dir=3D"ltr">&lt;<a href=3D"mailto:nick@foobar.org" target=3D=
"_blank">nick@foobar.org</a>&gt;</span> wrote:<br><blockquote class=3D"gmai=
l_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left=
:1ex"><span class=3D"">Robert Raszuk wrote:<br>
&gt; And one of the requirements as you have heard from at least one custom=
er is<br>
&gt; to test MTU of the path to such BGP next hops. Is RFC5880 BFD really b=
est<br>
&gt; tool for that ?<br>
<br>
</span>All IXPs have published MTUs and someone attempts to connect to an I=
XP<br>
with the expectation that using a different MTU is going to cause<br>
anything other than complete brokenness, then I&#39;d tactfully suggest an<=
br>
alternative career path.<br>
<span class=3D""><br>
&gt;=C2=A0 =C2=A0 =C2=A0As noted previously, the draft does permit for alte=
rnate means<br>
&gt;=C2=A0 =C2=A0 =C2=A0beyond BFD.<br>
&gt;=C2=A0 =C2=A0 =C2=A0However, we have to pick one.=C2=A0 Standardizing p=
ing is likely a bad<br>
&gt;=C2=A0 =C2=A0 =C2=A0idea. :-)<br>
&gt;<br>
&gt; =E2=80=8BWhat is there to standardize ? RFC862 seems like pretty good =
standard<br>
&gt; already.<br>
<br>
</span>With sufficient thrust, pigs fly just fine.<br>
<br>
ICMP is the wrong tool in the same way that ARP request/reply is also<br>
the wrong tool for this.=C2=A0 It&#39;s rubbish for this purpose because it=
&#39;s<br>
usually highly deprioritised on routers, unlike bfd which is often<br>
fast-pathed and carefully controlled.=C2=A0 BFD is fit for this purpose<br>
because it&#39;s designed specifically and is supported by router vendors<b=
r>
for exactly this purpose.<br>
<br>
Fast liveliness detection cannot be pawned off to an arbitrary protocol<br>
just because that protocol replies to packets, in the same way that we<br>
don&#39;t exchange routes over xml in https or implement ssh using udp/53,<=
br>
or plough fields using a modified toyota yaris.<br>
<span class=3D"HOEnZb"><font color=3D"#888888"><br>
Nick<br>
</font></span></blockquote></div><br></div>

--001a113fe9c2798129054da082de--


From nobody Thu Apr 20 15:32:45 2017
Return-Path: <martijnschmidt@i3d.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A74C41316F2 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 15:32:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k28lGahYI2pU for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 15:32:39 -0700 (PDT)
Received: from mail.i3d.net (mail.i3d.nl [213.163.77.240]) (using TLSv1.1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9565E127977 for <idr@ietf.org>; Thu, 20 Apr 2017 15:32:38 -0700 (PDT)
X-Footer: aTNkLm5s
Received: from localhost ([127.0.0.1]) by mail.i3d.net with ESMTPSA (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256 bits)); Fri, 21 Apr 2017 00:32:27 +0200
Date: Fri, 21 Apr 2017 00:32:13 +0200
User-Agent: K-9 Mail for Android
In-Reply-To: <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org> <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com> <58F89C07.8080900@foobar.org> <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----SXTV0168540H5RTGN8VF3L6XYPP14K"
Content-Transfer-Encoding: 7bit
To: idr@ietf.org, Robert Raszuk <robert@raszuk.net>, Nick Hilliard <nick@foobar.org>
CC: idr wg <idr@ietf.org>
From: "i3D.net - Martijn Schmidt" <martijnschmidt@i3d.net>
Message-ID: <20443E09-69D6-4061-A3B2-4606FD8BEBC9@i3d.net>
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/uj8HIZA3Ov8kaPPy5QL_YzBTMKI>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 22:32:42 -0000

------SXTV0168540H5RTGN8VF3L6XYPP14K
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

Robert,=20

Distributed IX operators typically use dark fiber or DWDM wavelengths as u=
nderlying circuits in their VPLS fabric for exactly this reason=2E If they =
do cobble together their network with various 3rd party, say, "ethernet sol=
utions", I doubt they'll have a good reputation in the market for long=2E=
=20

Best regards,=20
Martijn=20

On 21 April 2017 00:17:41 CEST, Robert Raszuk <robert@raszuk=2Enet> wrote:
>Nick,
>
>I am very happy for you that your experience with published static MTU
>values is so great=2E Well if you go via your own switches with dark
>fiber I
>would not expect this to be any different=2E
>
>If however you operate a distributed IX and use leased circuits from
>other
>carriers between your access switches you may be very surprised that
>suddenly your MTU get's reduced due to underlying carrier reroute to
>different links or applying say MPLS link protection=2E
>
>We do see this occurring more and more these days and it is nasty to
>troubleshoot too if you have no proper tool running=2E So tactfully I
>recommend we do not close our minds to only those problems which one
>have
>seen in his own shop=2E
>
>On the topic of ICMP or ARP it is your choice=2E I prefer to know that my
>upstream is down in say 2 sec rather then suffer from broken Internet
>link
>forever as my upstream provider will not run BFD session with an office
>fiber tail=2E
>
>Cheers,
>R=2E
>
>
>
>On Thu, Apr 20, 2017 at 1:31 PM, Nick Hilliard <nick@foobar=2Eorg> wrote:
>
>> Robert Raszuk wrote:
>> > And one of the requirements as you have heard from at least one
>customer
>> is
>> > to test MTU of the path to such BGP next hops=2E Is RFC5880 BFD
>really best
>> > tool for that ?
>>
>> All IXPs have published MTUs and someone attempts to connect to an
>IXP
>> with the expectation that using a different MTU is going to cause
>> anything other than complete brokenness, then I'd tactfully suggest
>an
>> alternative career path=2E
>>
>> >     As noted previously, the draft does permit for alternate means
>> >     beyond BFD=2E
>> >     However, we have to pick one=2E  Standardizing ping is likely a
>bad
>> >     idea=2E :-)
>> >
>> > =E2=80=8BWhat is there to standardize ? RFC862 seems like pretty good
>standard
>> > already=2E
>>
>> With sufficient thrust, pigs fly just fine=2E
>>
>> ICMP is the wrong tool in the same way that ARP request/reply is also
>> the wrong tool for this=2E  It's rubbish for this purpose because it's
>> usually highly deprioritised on routers, unlike bfd which is often
>> fast-pathed and carefully controlled=2E  BFD is fit for this purpose
>> because it's designed specifically and is supported by router vendors
>> for exactly this purpose=2E
>>
>> Fast liveliness detection cannot be pawned off to an arbitrary
>protocol
>> just because that protocol replies to packets, in the same way that
>we
>> don't exchange routes over xml in https or implement ssh using
>udp/53,
>> or plough fields using a modified toyota yaris=2E
>>
>> Nick
>>

--=20
Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E
------SXTV0168540H5RTGN8VF3L6XYPP14K
Content-Type: text/html;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head></head><body>Robert, <br>
<br>
Distributed IX operators typically use dark fiber or DWDM wavelengths as u=
nderlying circuits in their VPLS fabric for exactly this reason=2E If they =
do cobble together their network with various 3rd party, say, &quot;etherne=
t solutions&quot;, I doubt they&#39;ll have a good reputation in the market=
 for long=2E <br>
<br>
Best regards, <br>
Martijn <br><br><div class=3D"gmail_quote">On 21 April 2017 00:17:41 CEST,=
 Robert Raszuk &lt;robert@raszuk=2Enet&gt; wrote:<blockquote class=3D"gmail=
_quote" style=3D"margin: 0pt 0pt 0pt 0=2E8ex; border-left: 1px solid rgb(20=
4, 204, 204); padding-left: 1ex;">
<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,h=
elvetica,sans-serif;font-size:small">Nick,</div><div class=3D"gmail_default=
" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br /></=
div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-=
serif;font-size:small">I am very happy for you that your experience with pu=
blished static MTU values is so great=2E Well if you go via your own switch=
es with dark fiber I would not expect this to be any different=2E&nbsp;</di=
v><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-se=
rif;font-size:small"><br /></div><div class=3D"gmail_default" style=3D"font=
-family:arial,helvetica,sans-serif;font-size:small">If however you operate =
a distributed IX and use leased circuits from other carriers between your a=
ccess switches you may be very surprised that suddenly your MTU get's reduc=
ed due to underlying carrier reroute to different links or applying say MPL=
S link protection=2E&nbsp;</div><div class=3D"gmail_default" style=3D"font-=
family:arial,helvetica,sans-serif;font-size:small"><br /></div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small">We do see this occurring more and more these days and it is nasty =
to troubleshoot too if you have no proper tool running=2E So tactfully I re=
commend we do not close our minds to only those problems which one have see=
n in his own shop=2E</div><div class=3D"gmail_default" style=3D"font-family=
:arial,helvetica,sans-serif;font-size:small"><br /></div><div class=3D"gmai=
l_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"=
>On the topic of ICMP or ARP it is your choice=2E I prefer to know that my =
upstream is down in say 2 sec rather then suffer from broken Internet link =
forever as my upstream provider will not run BFD session with an office fib=
er tail=2E</div><div class=3D"gmail_default" style=3D"font-family:arial,hel=
vetica,sans-serif;font-size:small"><br /></div><div class=3D"gmail_default"=
 style=3D"font-family:arial,helvetica,sans-serif;font-size:small">Cheers,<b=
r />R=2E</div><div class=3D"gmail_default" style=3D"font-family:arial,helve=
tica,sans-serif;font-size:small"><br /></div><div class=3D"gmail_default" s=
tyle=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br /></div=
></div><div class=3D"gmail_extra"><br /><div class=3D"gmail_quote">On Thu, =
Apr 20, 2017 at 1:31 PM, Nick Hilliard <span dir=3D"ltr">&lt;<a href=3D"mai=
lto:nick@foobar=2Eorg" target=3D"_blank">nick@foobar=2Eorg</a>&gt;</span> w=
rote:<br /><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 =2E8ex;b=
order-left:1px #ccc solid;padding-left:1ex"><span class=3D"">Robert Raszuk =
wrote:<br />
&gt; And one of the requirements as you have heard from at least one custo=
mer is<br />
&gt; to test MTU of the path to such BGP next hops=2E Is RFC5880 BFD reall=
y best<br />
&gt; tool for that ?<br />
<br />
</span>All IXPs have published MTUs and someone attempts to connect to an =
IXP<br />
with the expectation that using a different MTU is going to cause<br />
anything other than complete brokenness, then I'd tactfully suggest an<br =
/>
alternative career path=2E<br />
<span class=3D""><br />
&gt;&nbsp; &nbsp; &nbsp;As noted previously, the draft does permit for alt=
ernate means<br />
&gt;&nbsp; &nbsp; &nbsp;beyond BFD=2E<br />
&gt;&nbsp; &nbsp; &nbsp;However, we have to pick one=2E&nbsp; Standardizin=
g ping is likely a bad<br />
&gt;&nbsp; &nbsp; &nbsp;idea=2E :-)<br />
&gt;<br />
&gt; =E2=80=8BWhat is there to standardize ? RFC862 seems like pretty good=
 standard<br />
&gt; already=2E<br />
<br />
</span>With sufficient thrust, pigs fly just fine=2E<br />
<br />
ICMP is the wrong tool in the same way that ARP request/reply is also<br /=
>
the wrong tool for this=2E&nbsp; It's rubbish for this purpose because it'=
s<br />
usually highly deprioritised on routers, unlike bfd which is often<br />
fast-pathed and carefully controlled=2E&nbsp; BFD is fit for this purpose<=
br />
because it's designed specifically and is supported by router vendors<br /=
>
for exactly this purpose=2E<br />
<br />
Fast liveliness detection cannot be pawned off to an arbitrary protocol<br=
 />
just because that protocol replies to packets, in the same way that we<br =
/>
don't exchange routes over xml in https or implement ssh using udp/53,<br =
/>
or plough fields using a modified toyota yaris=2E<br />
<span class=3D"HOEnZb"><font color=3D"#888888"><br />
Nick<br />
</font></span></blockquote></div><br /></div>
</blockquote></div><br>
-- <br>
Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E</=
body></html>
------SXTV0168540H5RTGN8VF3L6XYPP14K--


From nobody Thu Apr 20 15:38:45 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 654BF1316F4 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 15:38:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hETk6Z1rkbA4 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 15:38:41 -0700 (PDT)
Received: from mail-io0-x235.google.com (mail-io0-x235.google.com [IPv6:2607:f8b0:4001:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C5981316E9 for <idr@ietf.org>; Thu, 20 Apr 2017 15:38:41 -0700 (PDT)
Received: by mail-io0-x235.google.com with SMTP id a103so91176304ioj.1 for <idr@ietf.org>; Thu, 20 Apr 2017 15:38:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=VQB4UolEK+gc53ckcrfgCsjD19fjstcIeMOjX2Bk9B4=; b=q6Wc1UayjeQMs46mg2miXIdqZsujI7yBTOzhevtm9g9YKbEFIpb7NCRWFp/yGmLhc1 sXDMZuMo6gl32ILL/C+DCVlpASN9JL4I0WTSvMfjNcGzbW71mQNsvN6dfEQgxtMFGw/6 wW/GBrRUsGKzsWilyaJzEYvQBrJ/1DUm0qHrFXxG06Ms9Lizx5MBjWQMezP1sh9C3K7S hELySbPuYSHMbwxox2TixpyBGE1N4N8EFNh3mz9lVXw6YwgCRW4kbopk7L9gv5jCeJIR qGtM4iJ7FQeDvKSEUriB1E5KBezEVMkQayXDQlcj5IJhsjHVzsYSe377X2FEJ0h11NfH W3uA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=VQB4UolEK+gc53ckcrfgCsjD19fjstcIeMOjX2Bk9B4=; b=NoiIK1MKfY82+YOB/4kPrfFoo+GzUBSGVxgh8DY1FeD/rtSPMJOCsWk5wBnOHPnSqA Qh4V8HT/O6YOeTztKxsUrsZxzqxOv2/GA017MLv/1kRCmhzoniW8ggfR7JEnR4A+BjKR Gw9tT/TaOI38hiP/He1AiCeggssakzowU/yDGlwXUiklULXx+ckMQouU3UQbNFkTqSZT ATGZPmbBmAjc0rDPGmOklmbsGgXtAFJ8htEXAd7PCyL3QmoU5FTmFXiu4yCY9jWmzj2B uXsEBa+y2ELeW98EKWPMNKqgsK2YV/ODRIDBUt63FQIM/2CtyZ4AIEUbrX0N5AeJBbWh iiuQ==
X-Gm-Message-State: AN3rC/5cmrPewvL8Uc6ic9d8K8yEIuFfvWqXYX6aQF2LdT4yycsGXvrK dYZ8kDUQ3AjRpwUOE5MaWSC8u55Ax8C1
X-Received: by 10.36.46.81 with SMTP id i78mr6955132ita.39.1492727920438; Thu, 20 Apr 2017 15:38:40 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Thu, 20 Apr 2017 15:38:39 -0700 (PDT)
In-Reply-To: <20443E09-69D6-4061-A3B2-4606FD8BEBC9@i3d.net>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org> <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com> <58F89C07.8080900@foobar.org> <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com> <20443E09-69D6-4061-A3B2-4606FD8BEBC9@i3d.net>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 21 Apr 2017 00:38:39 +0200
X-Google-Sender-Auth: Ea8B7FAAn97MDYMYED3S1wM7ivM
Message-ID: <CA+b+ER=+84LWvAHbqJZCPZBhYfHJVN9y_=sXnjfTg51PTp3pbQ@mail.gmail.com>
To: "i3D.net - Martijn Schmidt" <martijnschmidt@i3d.net>
Cc: idr wg <idr@ietf.org>, Nick Hilliard <nick@foobar.org>
Content-Type: multipart/alternative; boundary=001a114a93ce71c39d054da0cd2d
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/FegXfhmhIyVtZfUGhZavIM7xmfY>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 22:38:43 -0000

--001a114a93ce71c39d054da0cd2d
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Yes within a city you can use it the way you describe, But between
countries it would be rather expensive option don't you think.

Moreover I have 15000 CEs WAN and do see those issues in real. So the point
is that it would be great to come with one good solution for such problems
rather then again zoo of new features - especially since we would like
those to be implemented in line card's hardware.

Yes I know the draft name is rs-bfd ... but the problem at hand is bigger
then IX environments.

Thank you,
R.

On Fri, Apr 21, 2017 at 12:32 AM, i3D.net - Martijn Schmidt <
martijnschmidt@i3d.net> wrote:

> Robert,
>
> Distributed IX operators typically use dark fiber or DWDM wavelengths as
> underlying circuits in their VPLS fabric for exactly this reason. If they
> do cobble together their network with various 3rd party, say, "ethernet
> solutions", I doubt they'll have a good reputation in the market for long=
.
>
> Best regards,
> Martijn
>
> On 21 April 2017 00:17:41 CEST, Robert Raszuk <robert@raszuk.net> wrote:
>>
>> Nick,
>>
>> I am very happy for you that your experience with published static MTU
>> values is so great. Well if you go via your own switches with dark fiber=
 I
>> would not expect this to be any different.
>>
>> If however you operate a distributed IX and use leased circuits from
>> other carriers between your access switches you may be very surprised th=
at
>> suddenly your MTU get's reduced due to underlying carrier reroute to
>> different links or applying say MPLS link protection.
>>
>> We do see this occurring more and more these days and it is nasty to
>> troubleshoot too if you have no proper tool running. So tactfully I
>> recommend we do not close our minds to only those problems which one hav=
e
>> seen in his own shop.
>>
>> On the topic of ICMP or ARP it is your choice. I prefer to know that my
>> upstream is down in say 2 sec rather then suffer from broken Internet li=
nk
>> forever as my upstream provider will not run BFD session with an office
>> fiber tail.
>>
>> Cheers,
>> R.
>>
>>
>>
>> On Thu, Apr 20, 2017 at 1:31 PM, Nick Hilliard <nick@foobar.org> wrote:
>>
>>> Robert Raszuk wrote:
>>> > And one of the requirements as you have heard from at least one
>>> customer is
>>> > to test MTU of the path to such BGP next hops. Is RFC5880 BFD really
>>> best
>>> > tool for that ?
>>>
>>> All IXPs have published MTUs and someone attempts to connect to an IXP
>>> with the expectation that using a different MTU is going to cause
>>> anything other than complete brokenness, then I'd tactfully suggest an
>>> alternative career path.
>>>
>>> >     As noted previously, the draft does permit for alternate means
>>> >     beyond BFD.
>>> >     However, we have to pick one.  Standardizing ping is likely a bad
>>> >     idea. :-)
>>> >
>>> > =E2=80=8BWhat is there to standardize ? RFC862 seems like pretty good=
 standard
>>> > already.
>>>
>>> With sufficient thrust, pigs fly just fine.
>>>
>>> ICMP is the wrong tool in the same way that ARP request/reply is also
>>> the wrong tool for this.  It's rubbish for this purpose because it's
>>> usually highly deprioritised on routers, unlike bfd which is often
>>> fast-pathed and carefully controlled.  BFD is fit for this purpose
>>> because it's designed specifically and is supported by router vendors
>>> for exactly this purpose.
>>>
>>> Fast liveliness detection cannot be pawned off to an arbitrary protocol
>>> just because that protocol replies to packets, in the same way that we
>>> don't exchange routes over xml in https or implement ssh using udp/53,
>>> or plough fields using a modified toyota yaris.
>>>
>>> Nick
>>>
>>
>>
> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity.
>

--001a114a93ce71c39d054da0cd2d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Yes within a city you can use it the wa=
y you describe, But between countries it would be rather expensive option d=
on&#39;t you think.=C2=A0</div><div class=3D"gmail_default" style=3D"font-f=
amily:arial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"g=
mail_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:sma=
ll">Moreover I have 15000 CEs WAN and do see those issues in real. So the p=
oint is that it would be great to come with one good solution for such prob=
lems rather then again zoo of new features - especially since we would like=
 those to be implemented in line card&#39;s hardware.=C2=A0</div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,=
helvetica,sans-serif;font-size:small">Yes I know the draft name is rs-bfd .=
.. but the problem at hand is bigger then IX environments.=C2=A0</div><div =
class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fon=
t-size:small"><br></div><div class=3D"gmail_default" style=3D"font-family:a=
rial,helvetica,sans-serif;font-size:small">Thank you,</div><div class=3D"gm=
ail_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:smal=
l">R.</div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">=
On Fri, Apr 21, 2017 at 12:32 AM, i3D.net - Martijn Schmidt <span dir=3D"lt=
r">&lt;<a href=3D"mailto:martijnschmidt@i3d.net" target=3D"_blank">martijns=
chmidt@i3d.net</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div=
>Robert, <br>
<br>
Distributed IX operators typically use dark fiber or DWDM wavelengths as un=
derlying circuits in their VPLS fabric for exactly this reason. If they do =
cobble together their network with various 3rd party, say, &quot;ethernet s=
olutions&quot;, I doubt they&#39;ll have a good reputation in the market fo=
r long. <br>
<br>
Best regards, <br>
Martijn <br><div><div class=3D"h5"><br><div class=3D"gmail_quote">On 21 Apr=
il 2017 00:17:41 CEST, Robert Raszuk &lt;<a href=3D"mailto:robert@raszuk.ne=
t" target=3D"_blank">robert@raszuk.net</a>&gt; wrote:<blockquote class=3D"g=
mail_quote" style=3D"margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204=
,204,204);padding-left:1ex">
<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Nick,</div><div class=3D"gmail_default"=
 style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div=
><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-ser=
if;font-size:small">I am very happy for you that your experience with publi=
shed static MTU values is so great. Well if you go via your own switches wi=
th dark fiber I would not expect this to be any different.=C2=A0</div><div =
class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fon=
t-size:small"><br></div><div class=3D"gmail_default" style=3D"font-family:a=
rial,helvetica,sans-serif;font-size:small">If however you operate a distrib=
uted IX and use leased circuits from other carriers between your access swi=
tches you may be very surprised that suddenly your MTU get&#39;s reduced du=
e to underlying carrier reroute to different links or applying say MPLS lin=
k protection.=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:=
arial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_d=
efault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">We=
 do see this occurring more and more these days and it is nasty to troubles=
hoot too if you have no proper tool running. So tactfully I recommend we do=
 not close our minds to only those problems which one have seen in his own =
shop.</div><div class=3D"gmail_default" style=3D"font-family:arial,helvetic=
a,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small">On the topic of=
 ICMP or ARP it is your choice. I prefer to know that my upstream is down i=
n say 2 sec rather then suffer from broken Internet link forever as my upst=
ream provider will not run BFD session with an office fiber tail.</div><div=
 class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fo=
nt-size:small"><br></div><div class=3D"gmail_default" style=3D"font-family:=
arial,helvetica,sans-serif;font-size:small">Cheers,<br>R.</div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,=
helvetica,sans-serif;font-size:small"><br></div></div><div class=3D"gmail_e=
xtra"><br><div class=3D"gmail_quote">On Thu, Apr 20, 2017 at 1:31 PM, Nick =
Hilliard <span dir=3D"ltr">&lt;<a href=3D"mailto:nick@foobar.org" target=3D=
"_blank">nick@foobar.org</a>&gt;</span> wrote:<br><blockquote class=3D"gmai=
l_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left=
:1ex"><span>Robert Raszuk wrote:<br>
&gt; And one of the requirements as you have heard from at least one custom=
er is<br>
&gt; to test MTU of the path to such BGP next hops. Is RFC5880 BFD really b=
est<br>
&gt; tool for that ?<br>
<br>
</span>All IXPs have published MTUs and someone attempts to connect to an I=
XP<br>
with the expectation that using a different MTU is going to cause<br>
anything other than complete brokenness, then I&#39;d tactfully suggest an<=
br>
alternative career path.<br>
<span><br>
&gt;=C2=A0 =C2=A0 =C2=A0As noted previously, the draft does permit for alte=
rnate means<br>
&gt;=C2=A0 =C2=A0 =C2=A0beyond BFD.<br>
&gt;=C2=A0 =C2=A0 =C2=A0However, we have to pick one.=C2=A0 Standardizing p=
ing is likely a bad<br>
&gt;=C2=A0 =C2=A0 =C2=A0idea. :-)<br>
&gt;<br>
&gt; =E2=80=8BWhat is there to standardize ? RFC862 seems like pretty good =
standard<br>
&gt; already.<br>
<br>
</span>With sufficient thrust, pigs fly just fine.<br>
<br>
ICMP is the wrong tool in the same way that ARP request/reply is also<br>
the wrong tool for this.=C2=A0 It&#39;s rubbish for this purpose because it=
&#39;s<br>
usually highly deprioritised on routers, unlike bfd which is often<br>
fast-pathed and carefully controlled.=C2=A0 BFD is fit for this purpose<br>
because it&#39;s designed specifically and is supported by router vendors<b=
r>
for exactly this purpose.<br>
<br>
Fast liveliness detection cannot be pawned off to an arbitrary protocol<br>
just because that protocol replies to packets, in the same way that we<br>
don&#39;t exchange routes over xml in https or implement ssh using udp/53,<=
br>
or plough fields using a modified toyota yaris.<br>
<span class=3D"m_-5667274421873581219HOEnZb"><font color=3D"#888888"><br>
Nick<br>
</font></span></blockquote></div><br></div>
</blockquote></div><br></div></div><span class=3D"HOEnZb"><font color=3D"#8=
88888">
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</font>=
</span></div></blockquote></div><br></div>

--001a114a93ce71c39d054da0cd2d--


From nobody Thu Apr 20 15:50:33 2017
Return-Path: <nick@foobar.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F1DC128C82 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 15:50:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Egfgb4ij7MFt for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 15:50:29 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CFD4D129BAA for <idr@ietf.org>; Thu, 20 Apr 2017 15:50:28 -0700 (PDT)
X-Envelope-To: idr@ietf.org
Received: from crumpet.local (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id v3KMoPQT047173 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 20 Apr 2017 23:50:25 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.local
Message-ID: <58F93B30.2010909@foobar.org>
Date: Thu, 20 Apr 2017 23:50:24 +0100
From: Nick Hilliard <nick@foobar.org>
User-Agent: Postbox 5.0.12 (Macintosh/20170323)
MIME-Version: 1.0
To: Robert Raszuk <robert@raszuk.net>
CC: idr wg <idr@ietf.org>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org> <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com> <58F89C07.8080900@foobar.org> <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com>
In-Reply-To: <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/z4N--NPD4V7F-4EvzAyQNYcDFKw>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 22:50:31 -0000

Robert Raszuk wrote:
> Nick,
> 
> I am very happy for you that your experience with published static MTU
> values is so great. Well if you go via your own switches with dark fiber
> I would not expect this to be any different. 
> 
> If however you operate a distributed IX and use leased circuits from
> other carriers between your access switches you may be very surprised
> that suddenly your MTU get's reduced due to underlying carrier reroute
> to different links or applying say MPLS link protection. 
> 
> We do see this occurring more and more these days and it is nasty to
> troubleshoot too if you have no proper tool running. So tactfully I
> recommend we do not close our minds to only those problems which one
> have seen in his own shop.

So what you're saying is that if someone builds infrastructure which is
identifiably unfit for its intended purpose, it might break in nasty but
entirely predictable ways.

At this stage, I think it's important to say that this draft is not
about MTUs, and that if you have core MTU problems on your inter-domain
l2 network, you have problems which are both bigger and not particularly
related to this draft.

> On the topic of ICMP or ARP it is your choice. I prefer to know that my
> upstream is down in say 2 sec rather then suffer from broken Internet
> link forever as my upstream provider will not run BFD session with an
> office fiber tail.

We're talking about bfd session brokering via route servers in
inter-domain routing situations, not residential / b2b access models.

Nick


From nobody Thu Apr 20 15:54:52 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C184129BAA for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 15:54:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d9x0qQXutk2r for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 15:54:49 -0700 (PDT)
Received: from mail-io0-x230.google.com (mail-io0-x230.google.com [IPv6:2607:f8b0:4001:c06::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00071129457 for <idr@ietf.org>; Thu, 20 Apr 2017 15:54:48 -0700 (PDT)
Received: by mail-io0-x230.google.com with SMTP id k87so91011391ioi.0 for <idr@ietf.org>; Thu, 20 Apr 2017 15:54:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=ZLjve3QXaBjFfdOin1x3DTRIW6W4lzrkdffRGFOuhMk=; b=IyyFUV5crDSOR2G77QSq6k2Z6MLrJ5XCmxJifFDhjI/VGi7/foC1zVMH0cc8cxwMqs Ukm6YYdrOEI2CvEpdGr5TRNmLh7LcLr0NAXoNqrH78tfS2w0JwZSUxA013sHEuVEEj24 gvJNFFwWMvW4eohF+Jmi2W5mIcslCUHlB0orvln69z8FUK2iH6nanBZHAqx2Ognk8wQv 4a8F3+aTo7IW2kMHGtnsgeJg4s+cfNp727CvNgta14FwuJt8/N3+XiaeFlWEWEIC6SoT y4Oe+/3WBLa+3NeIapVsOoB60Q8AVwRgN+TGqx/J9W5aZKyVDU43lRI0ENjJyN9DATfn JAxQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=ZLjve3QXaBjFfdOin1x3DTRIW6W4lzrkdffRGFOuhMk=; b=L+PfW//iEUSX5D7EOoxVreW5cGshcIcszWwou0WCbVYFFetjAGwNp+oDCuIUzzjYQ1 r8TzVYS1WVLwdlh4P7s4y3xevgqHrC8ZZAoGBrkG02FY06xdtKGnokKDuzNLrB7kEZ+H Gfs0QitYkvskKgn34GDDwIHZ5nYTX9hK64ZHHwCCIaWc7Hl8ZVbbLMGoCvYNcZwHF820 UYKz6ekQNO8owNRx3q1fU2PRsooY1FTlZtyimz8gnNcfZEnBeUP+xgLiqpb9i+o7E9Z5 gwJkIWRjoq5ws2visohEyTIY6cEmHI1ysWV0Xa15tf/S6EDon4PromXJIoVqJQN6f3xJ NA9w==
X-Gm-Message-State: AN3rC/4t2Abuqt81GNvLRYXVMVrpg4G2U8P+K6VFdjLQ+uerXLxHmp+/ Hwr6OB1QT34WIajSYaph3irrXwXfq2aL
X-Received: by 10.36.48.149 with SMTP id q143mr6701869itq.25.1492728887833; Thu, 20 Apr 2017 15:54:47 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Thu, 20 Apr 2017 15:54:46 -0700 (PDT)
In-Reply-To: <58F93B30.2010909@foobar.org>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org> <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com> <58F89C07.8080900@foobar.org> <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com> <58F93B30.2010909@foobar.org>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 21 Apr 2017 00:54:46 +0200
X-Google-Sender-Auth: ivc15Kj8AnBnl09VcAl6dQESymw
Message-ID: <CA+b+ER=QLQy8hTrw4Dvs7Au5uhQd=wUxdFWQqQx06Kc61n5BLg@mail.gmail.com>
To: Nick Hilliard <nick@foobar.org>
Cc: idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a1140b1601afdf6054da107fc
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/sbUQoSeZ1CwOkrPXqk0Zogv2oj8>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 22:54:50 -0000

--001a1140b1601afdf6054da107fc
Content-Type: text/plain; charset=UTF-8

Yes I do realize that.

But my point is that we can come up with single solution to both problems
which would work in a hardware accelerated way equally well. I am also
observing that MTU issue is applicable to long distance stretched IXes
which as I am sure you are aware is a real IX service offering by number of
IX operators today.

//R

On Fri, Apr 21, 2017 at 12:50 AM, Nick Hilliard <nick@foobar.org> wrote:

> Robert Raszuk wrote:
> > Nick,
> >
> > I am very happy for you that your experience with published static MTU
> > values is so great. Well if you go via your own switches with dark fiber
> > I would not expect this to be any different.
> >
> > If however you operate a distributed IX and use leased circuits from
> > other carriers between your access switches you may be very surprised
> > that suddenly your MTU get's reduced due to underlying carrier reroute
> > to different links or applying say MPLS link protection.
> >
> > We do see this occurring more and more these days and it is nasty to
> > troubleshoot too if you have no proper tool running. So tactfully I
> > recommend we do not close our minds to only those problems which one
> > have seen in his own shop.
>
> So what you're saying is that if someone builds infrastructure which is
> identifiably unfit for its intended purpose, it might break in nasty but
> entirely predictable ways.
>
> At this stage, I think it's important to say that this draft is not
> about MTUs, and that if you have core MTU problems on your inter-domain
> l2 network, you have problems which are both bigger and not particularly
> related to this draft.
>
> > On the topic of ICMP or ARP it is your choice. I prefer to know that my
> > upstream is down in say 2 sec rather then suffer from broken Internet
> > link forever as my upstream provider will not run BFD session with an
> > office fiber tail.
>
> We're talking about bfd session brokering via route servers in
> inter-domain routing situations, not residential / b2b access models.
>
> Nick
>

--001a1140b1601afdf6054da107fc
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small">Yes I do r=
ealize that.=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:a=
rial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_de=
fault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">But=
 my point is that we can come up with single solution to both problems whic=
h would work in a hardware accelerated way equally well. I am also observin=
g that MTU issue is applicable to long distance stretched IXes which as I a=
m sure you are aware is a real IX service offering by number of IX operator=
s today.=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:arial=
,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_defaul=
t" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">//R</di=
v></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Fri, A=
pr 21, 2017 at 12:50 AM, Nick Hilliard <span dir=3D"ltr">&lt;<a href=3D"mai=
lto:nick@foobar.org" target=3D"_blank">nick@foobar.org</a>&gt;</span> wrote=
:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-le=
ft:1px #ccc solid;padding-left:1ex"><span class=3D"">Robert Raszuk wrote:<b=
r>
&gt; Nick,<br>
&gt;<br>
&gt; I am very happy for you that your experience with published static MTU=
<br>
&gt; values is so great. Well if you go via your own switches with dark fib=
er<br>
&gt; I would not expect this to be any different.<br>
&gt;<br>
&gt; If however you operate a distributed IX and use leased circuits from<b=
r>
&gt; other carriers between your access switches you may be very surprised<=
br>
&gt; that suddenly your MTU get&#39;s reduced due to underlying carrier rer=
oute<br>
&gt; to different links or applying say MPLS link protection.<br>
&gt;<br>
&gt; We do see this occurring more and more these days and it is nasty to<b=
r>
&gt; troubleshoot too if you have no proper tool running. So tactfully I<br=
>
&gt; recommend we do not close our minds to only those problems which one<b=
r>
&gt; have seen in his own shop.<br>
<br>
</span>So what you&#39;re saying is that if someone builds infrastructure w=
hich is<br>
identifiably unfit for its intended purpose, it might break in nasty but<br=
>
entirely predictable ways.<br>
<br>
At this stage, I think it&#39;s important to say that this draft is not<br>
about MTUs, and that if you have core MTU problems on your inter-domain<br>
l2 network, you have problems which are both bigger and not particularly<br=
>
related to this draft.<br>
<span class=3D""><br>
&gt; On the topic of ICMP or ARP it is your choice. I prefer to know that m=
y<br>
&gt; upstream is down in say 2 sec rather then suffer from broken Internet<=
br>
&gt; link forever as my upstream provider will not run BFD session with an<=
br>
&gt; office fiber tail.<br>
<br>
</span>We&#39;re talking about bfd session brokering via route servers in<b=
r>
inter-domain routing situations, not residential / b2b access models.<br>
<span class=3D"HOEnZb"><font color=3D"#888888"><br>
Nick<br>
</font></span></blockquote></div><br></div>

--001a1140b1601afdf6054da107fc--


From nobody Thu Apr 20 17:08:21 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAFEE127337 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 17:08:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.802
X-Spam-Level: 
X-Spam-Status: No, score=-4.802 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MFwvBZK5i4dj for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 17:08:18 -0700 (PDT)
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0106.outbound.protection.outlook.com [104.47.38.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7270120326 for <idr@ietf.org>; Thu, 20 Apr 2017 17:08:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=UXB2I8yTU3td4EXytWPxv4pBPUpAC/WVAq1Se+LGTdA=; b=Svpc42GpnTGefobaXo1Uv6atFZdroOthye5H9zGZs4cHh/H9khSvHOdXKn/Nw1nF2vnGCNmzqgGK7dSfO/A7a/WYCno1cyPzXpAZGp/CtCUdKU78w/Iq4+iS/1BBhmQ5BHJ1VzVPEARcX8vDHAp+FS4lYG+ajbU57Ysa3VM5dOI=
Authentication-Results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.33.8] (66.129.241.12) by CO2PR05MB2502.namprd05.prod.outlook.com (10.166.95.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Fri, 21 Apr 2017 00:08:14 +0000
Content-Type: text/plain; charset="windows-1252"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <11b08110-26e7-d67b-55f1-1f8cb777605e@cisco.com>
Date: Thu, 20 Apr 2017 20:08:09 -0400
CC: Job Snijders <job@ntt.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Transfer-Encoding: quoted-printable
Message-ID: <67EBB9EF-A3C0-44DC-936E-B6F1687B2094@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <11b08110-26e7-d67b-55f1-1f8cb777605e@cisco.com>
To: Enke Chen <enkechen@cisco.com>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN3PR03CA0082.namprd03.prod.outlook.com (10.167.1.170) To CO2PR05MB2502.namprd05.prod.outlook.com (10.166.95.148)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 542cb52f-9792-4c81-5a92-08d4884a81d6
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:CO2PR05MB2502; 
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2502; 3:33g8Wt4c975hfVNs/fCr/J0neOKwIWdEDvX2+Zm5CpPNNwdyV7RTM8Mepfd4oYcEvA6gKbcPRQAumG4JbrpYW8Mbz0ZhFnJFrqA7LKuQbU/dXNePCLBOXtV7hVozN7kLrMEreIRLvtgPAQjvaLDAmY3s9Z1Juw2x2K7c+cM3V6YhfRQ7pYEKV1GmgeNInDZp3TpXMR4LQofhnKNOZPGhBVqFOWm7/SvEDrwSt7HDqGdD5JAVWlhdxcgpbhIhzGTA07MlgQZLR3n5XXf+VGzprRAEP8BOooX+63KT7hWw7ISVqICBFRj6afwCuvGmpI3etQTSJU6tS1YR7G/oRZ1SgodZHnPVo1bJ15X42sGPcyk=; 25:HkHsAh3HV/ekV/almivzuaxraIytKCwPhhgxT5gcvX0+zmxu2sLIiDHewJ1g+TiJJtycRoEeToLgahEsE54J7+qakAHHbvZ18yNNIP1Qxb+MEZn6B+UzWilN3eggYvqe7DD+lwHSk4zaeVMJ9HSzmx4dYFy10khO6cCg+Wj+HTKvCzf9ZU02XFc/BTBTmROFIRd4qKqKu94Th3wJmuBxyh5xfhFxq0tF+3n+xOdwHZgRbv9zT09soCYRMmfmnJE+vxWGqgwlmHwmkXVYlHEe8W5GSUunTTQ8we9G4TAKcxTYH9TZPYBuyXL5SG/B4PjKZ2AjgZnsbG+2Vi0HsqxeLi8bzCHawK12ur3FGJlQ8pbUs49joxyJ2HulrkQ+sACS3zq6doC0WV6su7hCxwi450oXBtITUEa1edAek8zDE+UEn4T8D3ijjYD0F2yG6VDMEnRvb3Gh/TjLI00IUqQLDS0repeaHzCuE8KxUTP2Ido=
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2502; 31:2cdfM9w43l+M35XPEFE4x0oow9GULHZVuEKCALj45E/vbIugEICiisqSSP+zJ8/vLJHHz+/SPcUbAkgC13u/b1dPeOgvo9IPVUBaE9K3if7otvZlWQLCITH10knC84RPl5xi4AoTs+5wYImuGrzN9fsFUuqSdq/vubMFw/YNLWKAAaMV3zh027kuwLz2xZ7WX+ZQuFYDqChVwZMnNggoM7s7/71MWxXxR1Nexo9XH+V7FZ1zVx3Lifs7CeHwsJ5H/3UsqrKzblfVHp9MHZRSYQ==; 20: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
X-Microsoft-Antispam-PRVS: <CO2PR05MB25025FB2032D063F758F929CAA1A0@CO2PR05MB2502.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(95692535739014);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041248)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123560025)(20161123555025)(20161123564025)(20161123562025)(6072148); SRVR:CO2PR05MB2502; BCL:0; PCL:0; RULEID:; SRVR:CO2PR05MB2502; 
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2502; 4: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
X-Forefront-PRVS: 02843AA9E0
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(39860400002)(39840400002)(39400400002)(39450400003)(39850400002)(39410400002)(24454002)(377454003)(36756003)(42186005)(6666003)(2950100002)(305945005)(23746002)(66066001)(93886004)(230783001)(83716003)(86362001)(6916009)(8676002)(4326008)(82746002)(229853002)(7736002)(5660300001)(25786009)(110136004)(76176999)(189998001)(50466002)(54906002)(6246003)(50986999)(8746002)(33656002)(6116002)(38730400002)(6486002)(50226002)(2906002)(90366009)(77096006)(81166006)(53936002)(3846002)(47776003)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CO2PR05MB2502; H:[172.29.33.8]; FPR:; SPF:None;  MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?Windows-1252?Q?1; CO2PR05MB2502; 23:JTd5HYA76OWJDRitPJwehDZNur6NziNyFoJ+e?= =?Windows-1252?Q?vFazhTxAcTxp31OzmXIQsB/8ivcJNhngHmexF5pm1nrCRpTsKAB2a3Vj?= =?Windows-1252?Q?D6TZk9V6qQdDRbBOT0QYggIQrFJK3h040yYpLSnozjoWpIL/dDP1AA9k?= =?Windows-1252?Q?H5xaw13O8PL6tdb4uiFn/vEszQ6xUGdmhzWCiUamLWFOqeOI5t+7OXwr?= =?Windows-1252?Q?MsNBrNvJwoLqVoYITKuNXc2vlSvUS6tk97x2kjVsGvMNFXMBSe8aUYpq?= =?Windows-1252?Q?myT41MfLbWHDbxNWpU/ObvKNOytW2RAcfudPdURxacEh31vAPXxi/Xsg?= =?Windows-1252?Q?kNbB1Tk9+MDhSTJT2vz/9qlnCgI4/Ss2WBTlX5fnc3MxejhqD1cippCf?= =?Windows-1252?Q?E0QB4vT/5huasP478LpxQf+mrz3JWopeFT2uOvwK9JNybStgXf/AjKGB?= =?Windows-1252?Q?+r9TyCPB1dycuo4yHq3KqLj1eTpcriSJJx8ddFPOUkYOm489Md+x3rNY?= =?Windows-1252?Q?AQS6hXMNvtbzHNv+aPAq1fJXEXl5EcaOxgyIC2HIJWojZMyKAjZbRmz3?= =?Windows-1252?Q?3wVdn0vFha4fcGt/X4wV76h4IUkYO4g00YSrWwV2lKOFCDrrMebXuRPO?= =?Windows-1252?Q?GpKhqTRU/tDYoVYBZ9S252ly3AfFspsT4U6i7eqKbPhd0H8+mbl2icxU?= =?Windows-1252?Q?TFijf4r14oP6N38vUJaf7h2McuhTjXt8lxh54ToTSgGBzFddsozWwys1?= =?Windows-1252?Q?Yoyi7m2vez7mBy7HnZdkl8RwkqDEFptwoR2Bdbz8WMu6K5DKxjxrr3uG?= =?Windows-1252?Q?ar+qEhs7iF+rXj4zj1tyTCawITMJFmEDUxyjSeSHILNDGqn2r/u2rJ7Q?= =?Windows-1252?Q?EXe5mfBQbEajKe8l2GaEq+rzLwU+U7cgyQUPtAUZABeA+2PBwCnOfr4S?= =?Windows-1252?Q?FKQ4ogDV258FCkDJ1mPLaZcg4sEBky92Q64/CIdjKD8dRx9c+K5zEh9p?= =?Windows-1252?Q?FHP2DA70MQiuTPJyGpID5XmI3i9WVsKr55OpdS/KGN3eiXxYiXZ5usEJ?= =?Windows-1252?Q?KFRpQ/aU3y/LDyWBRTsWPn5J9FCVNqEePpDrtIKkkDAiBk5XUoYtNWZe?= =?Windows-1252?Q?a8wvJZpuIbi96r0AVXoPt7mZ73ORz54bY1ors+gpwGbgCy4MynEdH8yu?= =?Windows-1252?Q?viQlj5fd7o3flwgcLzsXZpjM8eqeV1JqRcO4xsRXwqMRkL0trkuWGMJR?= =?Windows-1252?Q?EOE5Ix574iRll9v6XdRgRDPbvUGU3/NC/3OruImXuvMy3pnHX6+Ubp3u?= =?Windows-1252?Q?iwndpfvwlCKHGv7wnVbueO5gntYsGAsHOOamQCTutC84/w=3D?=
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2502; 6: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; 5:0TzPZ+F7ZJyyAv2NleCUBZ6lawL1q1R0CMgzjdE05Cd8hZ//S+zI6dWtEfsr7CPRkLeILrDPAR7u9Og3kewfT/nIF7ARVl4VUgZepXwI/ZJEbgkYo4UyVAosY277liM/XOmpHsexADaKo1SMZmcOPQ==; 24:g7yW+BLgt1EDtbNq6E341y8b9KIuXgW989BEgAofJESkgRyNm+QHbx78WIctxurMMZGPsasoOwYHJVISvWXconEgkz9QP5v7QEOgLRGUh1U=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2502; 7:qyrPdztXixRMkrM/XQqABwo94KRf7TNP1PxEiYDIJFCKJSjZ7wnadNY9JpJ8hjGp9LESAy+jJGRDlr98wfzGlyqbfe6y2pw5dgQ+umQksSjreJPt7S2Sh6h+nGxPzuVknYU8wdfsJA+CG6iUaEv0onLmTBXhOztv4sOmg0YL0Irkj/9FkNnd/X++52Ho07eYgY9APRYYBMUwsheN8VddgoeorEthQRmmAxarw5DdAaR5ebq8jNiA0RAMYw1G91tFTvQleH6IHa9KxYeZ2Iac8avhj3MCkOPHaCE3uCD1C/r+rFb9iBWtT+FvHOKTyL+eyPODUhlyQY5xE/pJDd/bKg==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Apr 2017 00:08:14.5051 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR05MB2502
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/70gg_5Q-go1VEPTaKaAYFBqLbWU>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 00:08:20 -0000

(still as an individual contributor)

> On Apr 20, 2017, at 5:25 PM, Enke Chen <enkechen@cisco.com> wrote:
>=20
>> - on one hand, a worked example showing how an implementor could roll =
out the
>>  functionality without causing heartburn for users. (My paraphrase: =
expose the
>>  default in the configuration. When upgrading old->new, automatically =
create
>>  the corresponding configuration line(s) to configure for legacy =
behavior.)
>=20
> Change of software may involve both upgrade and downgrade and =
combination (e.g.,
> when a serious issue is seen).
>=20
> When the software is downgraded, the config may not be recognized and =
may be
> lost.

Sure. What of it? Presumably the downgraded software has the legacy =
behavior. When and if you re-upgrade it, the logic quoted above to =
emulate the legacy behavior is re-applied just like with the first =
upgrade. The net result is legacy behavior continues through upgrade and =
downgrade. (The next step in this argument is "but if you always =
maintain legacy behavior, what's the point?" but that's already been =
answered -- by Jared, IIRC -- much earlier in the thread.)

--John=


From nobody Thu Apr 20 17:40:31 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A87A1293EB for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 17:40:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iy2v3TYfCpkb for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 17:40:28 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [IPv6:2001:418:3f4::5]) by ietfa.amsl.com (Postfix) with ESMTP id 545C5128B4E for <idr@ietf.org>; Thu, 20 Apr 2017 17:40:28 -0700 (PDT)
Received: by puck.nether.net (Postfix, from userid 162) id 11C0A5409AE; Thu, 20 Apr 2017 20:40:28 -0400 (EDT)
Date: Thu, 20 Apr 2017 20:40:28 -0400
From: Jared Mauch <jared@puck.Nether.net>
To: Eric C Rosen <erosen@juniper.net>
Cc: Tony Przygienda <tonysietf@gmail.com>, Brian Dickson <brian.peter.dickson@gmail.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170421004028.GB22223@puck.nether.net>
References: <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net>
User-Agent: Mutt/1.8.0 (2017-02-23)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/4MgIzWpum5QokyJt3r7b1y6cNso>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 00:40:30 -0000

On Thu, Apr 20, 2017 at 04:00:39PM -0400, Eric C Rosen wrote:
> On 4/20/2017 2:24 PM, Tony Przygienda wrote:
> > Can't miss that food fight ;-)
> 
> It did seem to degenerate rapidly into "if you don't agree with my proposal,
> you don't care about security".  ;-(
> 
> I agree with Enke that surprising your customers with a change in behavior
> due to altered defaults is generally considered to be a big no-no.

	I'm sure you are surprised that I might disagree here.

	I've experienced many software defects with disastrous side-effects,
this has not stopped the vendors from releasing junk code and people
running said-junk :-)

	What I see here is a complete capitulation of "this is hard,
lets go shopping".

> When the customers complain about a change in behavior, it is not considered
> appropriate to respond with "it's not my fault, you should have read the
> release notes", or "it's not my fault that you don't know how to
> troubleshoot BGP", or "it's not my fault that you didn't do your due
> diligence".

	Customers who do extensive testing still find issues that
are not found in labs, their own testing and limited deployments, does this
mean all software developers are out of a job as it's not worthwhile
to invest in development?

> Phasing in a change of behavior over several releases is not a practical
> solution, because:

I must disagre.

> a) Customers will still be surprised when the default behavior finally
> changes, and

	Customers who do no testing will always be surprised.  Customers who
do hopefully have a process for things, and while annoying may be less surprised.

	I recall when a vendor made /31's illegal on ethernet interfaces,
testing was done in my lab, but not with /31s, there was a gap.  This caused an
outage as it wiped the infrastructure links.  This wasn't release noted,
the vendor was briefly flogged and we moved on to more pressing defects.  This
is very similar to what John  and others suggested, you downgrade and try again
later.

> b) Many customers won't deploy all the releases anyway.

	I'm not sure the relevance here?  Some people upgrade often, some people
upgrade once a year, some never.  aka, Sky still blue.

> > Having said that, I think this is BCP material at best and if this is a
> > BCP then
> > 
> > i) a "backward compatibility a.k.a which end of the stick is sharp"
> > section is very advisable
> 
> I would agree that something more than "figure out how to configure the new
> release to behave like the old release" would be helpful.

	Text welcome.

> > ii) the BCP should describe which customer segment is best served with
> > which default
> > 
> 
> But then operators from different segments would have to get together to
> understand each others' requirements, and they'd have to respect each
> others' opinions as well.   I can't wait to see what happens when the "trust
> nobody" folks get together with the "zeroconfig plug and play" folks ;-)
> 
> The dilemma is that there is a real security problem in certain
> environments, but the proposed solution seems to have unintended
> side-effects that are problematic.  Then the question becomes whether the
> benefits are worth the cost, and this is not really a question that can be
> resolved by IETF consensus.

	I disagree here, we can say "routing leaks are a problem, we should
minimize them".  This has been documented by IETF consensus in RFC7908.

	It may well be the various camps can't agree, because there are:

a) internet-at-large
   (who cares about the global reachability?  i do!)

b) datacenter
   (what i do on my own turf is my own problem! ztp ftw!)

c) enterprise
   (i'm paid to not rock the boat)

	What I'm hoping we can find consensus on is this is a problem
worthwhile fixing and IDR/GROW/IETF care enough to fix it vs the taylor swift
response of "we are never ever getting back together", "this is unsolvable",
"my default behavior is right", "i am a granite rock".

	To those who say BCP-38 is a failure because it's not 100%, you are
right and wrong.  Significant parts of networks are BCP-38 enabled, some parts
are not.  Losing sight of the goal is easy when you're throwing stones.

	Text mitigating what your concerns are is welcome to the authors alias
or the IDR/GROW lists.

	(note to self, unsubscribe from the other ietf lists you are not reading).

	- Jared
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


From nobody Thu Apr 20 17:46:09 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3610128B90 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 17:46:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cadCT3l8rGV7 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 17:46:07 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id 51C41128B4E for <idr@ietf.org>; Thu, 20 Apr 2017 17:46:07 -0700 (PDT)
Received: by puck.nether.net (Postfix, from userid 162) id 1B19B540BEC; Thu, 20 Apr 2017 20:46:07 -0400 (EDT)
Date: Thu, 20 Apr 2017 20:46:07 -0400
From: Jared Mauch <jared@puck.Nether.net>
To: Eric C Rosen <erosen@juniper.net>
Cc: Job Snijders <job@instituut.net>, Enke Chen <enkechen@cisco.com>, Robert Raszuk <robert@raszuk.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170421004607.GC22223@puck.nether.net>
References: <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <CA+b+ER=ee6Q59mbctO06P8x2QsTz_me9mL9YcB25O2Ey4+kpdA@mail.gmail.com> <CACWOCC-Gusv1Jk1OXfVAZuWbMJxrzq=dEAdWGVSAPg0AjujhXA@mail.gmail.com> <a9939e21-3e2f-2e29-857f-58c5e8a7c541@juniper.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <a9939e21-3e2f-2e29-857f-58c5e8a7c541@juniper.net>
User-Agent: Mutt/1.8.0 (2017-02-23)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/DfU6W09rUFHW8odIec416f4i85k>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 00:46:09 -0000

On Thu, Apr 20, 2017 at 05:49:34PM -0400, Eric C Rosen wrote:
> On 4/20/2017 5:08 PM, Job Snijders wrote:
> > So a change like bgp-reject will take many years to be deployed within a
> > single network, how can that be reconciled with the perceived
> > "surprise"?
> > 
> 
> The surprise comes when the first router with the new defaults is deployed.
> 
> The fact that one or two intermediate releases had been deployed during the
> previous several years doesn't lessen the surprise.
> 
> This isn't a problem for the folks who want the defaults changed and who
> understand all the issues, it's only a problem for everyone else.

	Thankfully vendors are perfect :-)

	I understand your problem, but then what is the acceptable time period,
hardware life cycle of 7 years sound good enough?  Could you say by 2024 all new
releases could be compliant with a new operational practice?

	I've been actively watching the leaks for nearly a decade now, another 7
years would be quite sad, but at least better than never.  I'd rather try something
because repeating our mistakes for the next decade is unpalatable to me.

	- Jared

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


From nobody Thu Apr 20 17:53:35 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 538E3128B90 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 17:53:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dvBAAioOAhgd for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 17:53:32 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCB4712EA95 for <idr@ietf.org>; Thu, 20 Apr 2017 17:53:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1688; q=dns/txt; s=iport; t=1492736011; x=1493945611; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=dYjqt2fPs6qZCd6Q558hBUENT3UdT+YQyCb8IPmHTQI=; b=jUCgXirM73UiBg0jHIl8jvrVkSJVABqZ/ajGSSogJIZBiSjKs5+Mdket 7zwdTNpI3GwU7kb1qKceyW4n9kuD7qWkJsZMuw/W6PCiA0BDDUn47f9c1 /gaCbCGM6tIBenzJz4di8yo9LL86ZhFj5Xzsfv0J2i92JFYlux8dND9kR s=;
X-IronPort-AV: E=Sophos;i="5.37,227,1488844800"; d="scan'208";a="415406002"
Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 21 Apr 2017 00:53:30 +0000
Received: from [10.41.56.234] ([10.41.56.234]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id v3L0rUZL018081; Fri, 21 Apr 2017 00:53:30 GMT
To: "John G. Scudder" <jgs@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <11b08110-26e7-d67b-55f1-1f8cb777605e@cisco.com> <67EBB9EF-A3C0-44DC-936E-B6F1687B2094@juniper.net>
Cc: Job Snijders <job@ntt.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <b754e588-573b-c1a3-aa37-da14e9d5703d@cisco.com>
Date: Thu, 20 Apr 2017 17:53:30 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <67EBB9EF-A3C0-44DC-936E-B6F1687B2094@juniper.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/XEhblFFLRNL1MmuhP31srK_9PdY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 00:53:33 -0000

As I understand, the scheme requires the config to be generated in the intermediate
releases.  Once you lose the config and then try to upgrade (and skipping the
intermediate releases), we are back to the original state and problem.

So it is the same issue, that is, upgrading to a new release without going
through the intermediate releases that generate the configs.  The routes
accepted by the old release would be rejected by the new release.

-- Enke

On 4/20/17 5:08 PM, John G. Scudder wrote:
> (still as an individual contributor)
> 
>> On Apr 20, 2017, at 5:25 PM, Enke Chen <enkechen@cisco.com> wrote:
>>
>>> - on one hand, a worked example showing how an implementor could roll out the
>>>  functionality without causing heartburn for users. (My paraphrase: expose the
>>>  default in the configuration. When upgrading old->new, automatically create
>>>  the corresponding configuration line(s) to configure for legacy behavior.)
>>
>> Change of software may involve both upgrade and downgrade and combination (e.g.,
>> when a serious issue is seen).
>>
>> When the software is downgraded, the config may not be recognized and may be
>> lost.
> 
> Sure. What of it? Presumably the downgraded software has the legacy behavior.
> When and if you re-upgrade it, the logic quoted above to emulate the legacy
> behavior is re-applied just like with the first upgrade. The net result is
> legacy behavior continues through upgrade and downgrade. (The next step in
> this argument is "but if you always maintain legacy behavior, what's the point?"
> but that's already been answered -- by Jared, IIRC -- much earlier in the thread.)
> 
> --John
> 


From nobody Thu Apr 20 18:02:23 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DFEE12EAB3 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 18:02:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TPRHgpGwxxGN for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 18:02:19 -0700 (PDT)
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0118.outbound.protection.outlook.com [104.47.40.118]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8348E12EA8C for <idr@ietf.org>; Thu, 20 Apr 2017 18:02:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Zjt4qWrXTreFSxpAyP9w7vnyxfrFEg6QEFpF89PXP+U=; b=P/Ma4QCo7hIUffGKvAW7O/TCts9aQHXPwcb+EVAlXyMqiJ9WEHCPisuww4SsVywqpU7rHwcFwjTT7FXycvQBICRnwMn3ET+6/nMiiu/d4FbpeNW65mt1p4vBa0Mz5CPjFuXK2FCwfa0SVN1G3dFVP6iarpCtmVxcXKSa14UZhwY=
Received: from CY1PR05MB2507.namprd05.prod.outlook.com (10.167.10.134) by CY1PR05MB2505.namprd05.prod.outlook.com (10.167.10.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Fri, 21 Apr 2017 01:02:18 +0000
Received: from CY1PR05MB2507.namprd05.prod.outlook.com ([10.167.10.134]) by CY1PR05MB2507.namprd05.prod.outlook.com ([10.167.10.134]) with mapi id 15.01.1047.008; Fri, 21 Apr 2017 01:02:17 +0000
From: John Scudder <jgs@juniper.net>
To: Enke Chen <enkechen@cisco.com>
CC: John Scudder <jgs@juniper.net>, Job Snijders <job@ntt.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuhrbp3Q+amjrFUC5PeWc81WgJg==
Date: Fri, 21 Apr 2017 01:02:17 +0000
Message-ID: <5342F46A-44B1-4706-951F-588399283439@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <11b08110-26e7-d67b-55f1-1f8cb777605e@cisco.com> <67EBB9EF-A3C0-44DC-936E-B6F1687B2094@juniper.net> <b754e588-573b-c1a3-aa37-da14e9d5703d@cisco.com>
In-Reply-To: <b754e588-573b-c1a3-aa37-da14e9d5703d@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=juniper.net;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [75.151.14.9]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CY1PR05MB2505; 7:h+XLnnmmhxeiccRuhw+zVpvVi0PyCSiMU+N2nd6s1aScynO0fHMcgwDfNQmrPsLcrnc8kXeKQUm+JLdHX/xz9iQEf5SCpXWZ9o0A318h0d0HnEMxgKnSvXMrYSKFfRCWVEDy4P/QOI9RkE4ATw+oNHWyLd+EfKzKyNYp9GPUAEfDk19/sNaFMYiWHEPuzv2HwfOnHPBaRiFxEog+J60WLXMGIvPrrhV3EK6Q4av3+EFCy1gJwBlS3alPKuJ46dAsY4SvD3dkS+h0YhTlkkmbY5hcy2HOV0/AXSdzAo7UlfXLkJq2MHIvQgUk7hQ0UmF7jLTZ7GScEPErlXWsAwFPYg==
x-forefront-antispam-report: SFV:SKI; SCL:-1SFV:NSPM; SFS:(10019020)(6009001)(39860400002)(39410400002)(39840400002)(39850400002)(39400400002)(39450400003)(377454003)(24454002)(229853002)(99286003)(2950100002)(66066001)(86362001)(6512007)(33656002)(54356999)(2906002)(76176999)(54906002)(305945005)(50986999)(53546009)(81166006)(7736002)(25786009)(110136004)(6916009)(53936002)(82746002)(6246003)(6486002)(38730400002)(8676002)(230783001)(83716003)(5660300001)(2900100001)(3660700001)(77096006)(3846002)(189998001)(6436002)(122556002)(4326008)(102836003)(8936002)(6506006)(6116002)(3280700002)(36756003)(93886004)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2505; H:CY1PR05MB2507.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; 
x-ms-office365-filtering-correlation-id: 91c0b650-229d-44ad-56e9-08d488520e62
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081);  SRVR:CY1PR05MB2505; 
x-microsoft-antispam-prvs: <CY1PR05MB25054EDB3163F9507D30ED58AA1A0@CY1PR05MB2505.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(95692535739014);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(6055026)(6041248)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123562025)(20161123560025)(20161123555025)(20161123564025)(6072148); SRVR:CY1PR05MB2505; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2505; 
x-forefront-prvs: 02843AA9E0
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-ID: <9294CA9E2312AE498B6E75C94F86512E@junipernetworks.onmicrosoft.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Apr 2017 01:02:17.5093 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2505
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/f5fq0NSU0t3kr2i-RZyAeZiTBLc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 01:02:21 -0000

(Do I need to keep saying I am writing as an individual contributor? Better=
 safe than sorry I suppose.)

Nah. Generate it in the new releases if you see a config that came from an =
older version. (You can tell this, among other ways, by noticing that the r=
equired new line of configuration is not present).

There is no intermediate version.

Of course, endless variant schemes are possible. This is merely a thought e=
xperiment to prove the problem is neither intractable, nor even particularl=
y difficult.

--John

> On Apr 20, 2017, at 8:53 PM, Enke Chen <enkechen@cisco.com> wrote:
>=20
> As I understand, the scheme requires the config to be generated in the in=
termediate
> releases.  Once you lose the config and then try to upgrade (and skipping=
 the
> intermediate releases), we are back to the original state and problem.
>=20
> So it is the same issue, that is, upgrading to a new release without goin=
g
> through the intermediate releases that generate the configs.  The routes
> accepted by the old release would be rejected by the new release.
>=20
> -- Enke
>=20
>> On 4/20/17 5:08 PM, John G. Scudder wrote:
>> (still as an individual contributor)
>>=20
>>>> On Apr 20, 2017, at 5:25 PM, Enke Chen <enkechen@cisco.com> wrote:
>>>>=20
>>>> - on one hand, a worked example showing how an implementor could roll =
out the
>>>> functionality without causing heartburn for users. (My paraphrase: exp=
ose the
>>>> default in the configuration. When upgrading old->new, automatically c=
reate
>>>> the corresponding configuration line(s) to configure for legacy behavi=
or.)
>>>=20
>>> Change of software may involve both upgrade and downgrade and combinati=
on (e.g.,
>>> when a serious issue is seen).
>>>=20
>>> When the software is downgraded, the config may not be recognized and m=
ay be
>>> lost.
>>=20
>> Sure. What of it? Presumably the downgraded software has the legacy beha=
vior.
>> When and if you re-upgrade it, the logic quoted above to emulate the leg=
acy
>> behavior is re-applied just like with the first upgrade. The net result =
is
>> legacy behavior continues through upgrade and downgrade. (The next step =
in
>> this argument is "but if you always maintain legacy behavior, what's the=
 point?"
>> but that's already been answered -- by Jared, IIRC -- much earlier in th=
e thread.)
>>=20
>> --John
>>=20


From nobody Thu Apr 20 18:08:56 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 352EC126B6D for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 18:08:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1gOsFnO5my9z for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 18:08:53 -0700 (PDT)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18A47128B90 for <idr@ietf.org>; Thu, 20 Apr 2017 18:08:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2617; q=dns/txt; s=iport; t=1492736933; x=1493946533; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=4yjo8l/+F7hYQtsxJMgcaJbx0hCWmntJAt6kPtGxyAY=; b=j6Dm3VB6sdCor964TcUjHEN6SjF9HvRmGYdQmsxrWMy6WJUTBfUm9QjY C56oQGwGkm1T1WlqYS+4UzUAyWsjMGEGfv1PObFdIg5evOtK8dCVwmmzS 3POvnB2xjTIwXydxNZgyMdlwEvTHR87tBOgUFuqz9/kQEyrC3ir8djY5N g=;
X-IronPort-AV: E=Sophos;i="5.37,227,1488844800"; d="scan'208";a="225143271"
Received: from alln-core-1.cisco.com ([173.36.13.131]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 21 Apr 2017 01:08:52 +0000
Received: from [10.41.56.234] ([10.41.56.234]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id v3L18pID028465; Fri, 21 Apr 2017 01:08:52 GMT
To: John Scudder <jgs@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <11b08110-26e7-d67b-55f1-1f8cb777605e@cisco.com> <67EBB9EF-A3C0-44DC-936E-B6F1687B2094@juniper.net> <b754e588-573b-c1a3-aa37-da14e9d5703d@cisco.com> <5342F46A-44B1-4706-951F-588399283439@juniper.net>
Cc: Job Snijders <job@ntt.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <30bf398c-b453-f676-394e-5b5ad9a50356@cisco.com>
Date: Thu, 20 Apr 2017 18:08:51 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <5342F46A-44B1-4706-951F-588399283439@juniper.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/hL585aMWphErH2Qlas_O3eTk_PM>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 01:08:54 -0000

So *all* the new releases would generate "permit all" for any neighbor that does
not have an inbound policy?  I am confused - how is this "permit all" different
from today?

-- Enke

On 4/20/17 6:02 PM, John Scudder wrote:
> (Do I need to keep saying I am writing as an individual contributor? Better safe than sorry I suppose.)
> 
> Nah. Generate it in the new releases if you see a config that came from an older version.
> (You can tell this, among other ways, by noticing that the required new line of configuration
> is not present).
> 
> There is no intermediate version.
> 
> Of course, endless variant schemes are possible. This is merely a thought experiment to prove the problem is neither intractable, nor even particularly difficult.
> 
> --John
> 
>> On Apr 20, 2017, at 8:53 PM, Enke Chen <enkechen@cisco.com> wrote:
>>
>> As I understand, the scheme requires the config to be generated in the intermediate
>> releases.  Once you lose the config and then try to upgrade (and skipping the
>> intermediate releases), we are back to the original state and problem.
>>
>> So it is the same issue, that is, upgrading to a new release without going
>> through the intermediate releases that generate the configs.  The routes
>> accepted by the old release would be rejected by the new release.
>>
>> -- Enke
>>
>>> On 4/20/17 5:08 PM, John G. Scudder wrote:
>>> (still as an individual contributor)
>>>
>>>>> On Apr 20, 2017, at 5:25 PM, Enke Chen <enkechen@cisco.com> wrote:
>>>>>
>>>>> - on one hand, a worked example showing how an implementor could roll out the
>>>>> functionality without causing heartburn for users. (My paraphrase: expose the
>>>>> default in the configuration. When upgrading old->new, automatically create
>>>>> the corresponding configuration line(s) to configure for legacy behavior.)
>>>>
>>>> Change of software may involve both upgrade and downgrade and combination (e.g.,
>>>> when a serious issue is seen).
>>>>
>>>> When the software is downgraded, the config may not be recognized and may be
>>>> lost.
>>>
>>> Sure. What of it? Presumably the downgraded software has the legacy behavior.
>>> When and if you re-upgrade it, the logic quoted above to emulate the legacy
>>> behavior is re-applied just like with the first upgrade. The net result is
>>> legacy behavior continues through upgrade and downgrade. (The next step in
>>> this argument is "but if you always maintain legacy behavior, what's the point?"
>>> but that's already been answered -- by Jared, IIRC -- much earlier in the thread.)
>>>
>>> --John
>>>


From nobody Thu Apr 20 18:13:41 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 832CB12EAB3 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 18:13:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MkrFNrTTNs42 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 18:13:39 -0700 (PDT)
Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5915712EAB1 for <idr@ietf.org>; Thu, 20 Apr 2017 18:13:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=234; q=dns/txt; s=iport; t=1492737219; x=1493946819; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=JWameB3zmxLRGwXjmrd1tb7nbN6fuwJ7sDgtvzvgi6I=; b=OUvck5TseBxipaMlk/qHxlUiI2tS4zuQ1G2Adqmb2WPUgydAuPzjrEqo T/klSi/9k+bgRCeoTQEvNxuy7QS/rADqrS04Yo4tuZN519QbK7D73smLf jBfVH2NEA9N+FVGYZNl3AUupd9MaA4+kZ1nd0uZTbOjtIN5hFHz/mnNu5 0=;
X-IronPort-AV: E=Sophos;i="5.37,227,1488844800"; d="scan'208";a="239151993"
Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 21 Apr 2017 01:13:38 +0000
Received: from [10.41.56.234] ([10.41.56.234]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v3L1DaJu006448; Fri, 21 Apr 2017 01:13:37 GMT
To: John Scudder <jgs@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <11b08110-26e7-d67b-55f1-1f8cb777605e@cisco.com> <67EBB9EF-A3C0-44DC-936E-B6F1687B2094@juniper.net> <b754e588-573b-c1a3-aa37-da14e9d5703d@cisco.com> <5342F46A-44B1-4706-951F-588399283439@juniper.net>
Cc: Job Snijders <job@ntt.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <b515219a-b5f5-ba63-e5f9-193cc92f8d07@cisco.com>
Date: Thu, 20 Apr 2017 18:13:36 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <5342F46A-44B1-4706-951F-588399283439@juniper.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/zHHrplaGVBYrLG_IR5zsrvdZP8I>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 01:13:40 -0000

On 4/20/17 6:02 PM, John Scudder wrote:
> (Do I need to keep saying I am writing as an individual contributor? Better safe than sorry
> I suppose.)
> 

John,

You have many hats :-) and most of us have only one :-(

-- Enke


From nobody Thu Apr 20 18:29:14 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1C7E129B9E for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 18:29:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wMwermobupjY for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 18:29:11 -0700 (PDT)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0101.outbound.protection.outlook.com [104.47.34.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E910128B90 for <idr@ietf.org>; Thu, 20 Apr 2017 18:29:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=6TTgPuCj576MuiNHOt22TqCsMYRJ+oLudtLm5aTTZw8=; b=XDuxPHw20DXDG/ZEPHxtorTQpdmCGQBbkGLX81+Z4hKkg0f+RmeQghnCK466kIO38sVLYCYim32qjfG7PmaQ+Z4a4JqmsusNcf2G9JCsE/N1WvPue7ElfM4DrAZ2/oCRkGnCwRJrS36RvbF8dSGoOyVaKjbo9h3oDKWdnDGlQsI=
Received: from CY1PR05MB2507.namprd05.prod.outlook.com (10.167.10.134) by CY1PR05MB2506.namprd05.prod.outlook.com (10.167.10.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Fri, 21 Apr 2017 01:29:10 +0000
Received: from CY1PR05MB2507.namprd05.prod.outlook.com ([10.167.10.134]) by CY1PR05MB2507.namprd05.prod.outlook.com ([10.167.10.134]) with mapi id 15.01.1047.008; Fri, 21 Apr 2017 01:29:09 +0000
From: John Scudder <jgs@juniper.net>
To: Enke Chen <enkechen@cisco.com>
CC: John Scudder <jgs@juniper.net>, Job Snijders <job@ntt.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuhrbp3Q+amjrFUC5PeWc81WgJg==
Date: Fri, 21 Apr 2017 01:29:09 +0000
Message-ID: <513CB54C-1312-47EA-9EF0-7BADB681F2D3@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <11b08110-26e7-d67b-55f1-1f8cb777605e@cisco.com> <67EBB9EF-A3C0-44DC-936E-B6F1687B2094@juniper.net> <b754e588-573b-c1a3-aa37-da14e9d5703d@cisco.com> <5342F46A-44B1-4706-951F-588399283439@juniper.net> <30bf398c-b453-f676-394e-5b5ad9a50356@cisco.com>
In-Reply-To: <30bf398c-b453-f676-394e-5b5ad9a50356@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=juniper.net;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [75.151.14.9]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CY1PR05MB2506; 7:6UyRn74QHPa5hjaEF+MJGRcHTWd5GVZtr2Bgllz65KYdbztsEsdqB0WV9taZN+z4Xr+MA8kG94NTghXEKAAiKE7QtIPAqdvrGoW72vapFcPAEdMwb6CiRAFVDlaHlDxCJcqivs8p2ueafKDxzPowB6jb5HcDshBWVSHtMb3DhJa/zYVrlMVTPDxdjj2R/xR3ikZqnGPAVp/6B9c+gEVBxqZiUv/2w1LuZAFczb5KGQrzWr3yKkS7PX5TSXJXjPfOQ52MrDFKF3uUCwW0JOFmRCsb+SP9YjF5q/Mv/CvdMeQgJmh2ItL3vzDcHru5UWAFhb094kTdhWQRRM8HETNYug==
x-forefront-antispam-report: SFV:SKI; SCL:-1SFV:NSPM; SFS:(10019020)(6009001)(39400400002)(39450400003)(39840400002)(39860400002)(39850400002)(39410400002)(24454002)(377454003)(122556002)(6512007)(54906002)(6506006)(6436002)(53936002)(99286003)(86362001)(6916009)(2950100002)(229853002)(50986999)(76176999)(54356999)(66066001)(189998001)(81166006)(8936002)(33656002)(8676002)(6486002)(77096006)(230783001)(36756003)(2900100001)(93886004)(83716003)(2906002)(4326008)(25786009)(6246003)(6116002)(102836003)(3846002)(82746002)(3660700001)(5660300001)(305945005)(110136004)(3280700002)(7736002)(38730400002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2506; H:CY1PR05MB2507.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; 
x-ms-office365-filtering-correlation-id: bfc2e068-882a-486e-fd85-08d48855cf4b
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081);  SRVR:CY1PR05MB2506; 
x-microsoft-antispam-prvs: <CY1PR05MB2506F5DBCDC25C9C8C3CA46BAA1A0@CY1PR05MB2506.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(95692535739014);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041248)(20161123564025)(20161123562025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123555025)(20161123560025)(6072148); SRVR:CY1PR05MB2506; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2506; 
x-forefront-prvs: 02843AA9E0
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-ID: <5CFC07D6F5BB4648A9803C17B4E2C5F7@junipernetworks.onmicrosoft.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Apr 2017 01:29:09.6663 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2506
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/5-N8N19-Lu-lUiIbqMMa-_iKdmo>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 01:29:13 -0000

#include individual contributor disclaimer

> On Apr 20, 2017, at 9:08 PM, Enke Chen <enkechen@cisco.com> wrote:
>=20
> So *all* the new releases would generate "permit all" for any neighbor th=
at does
> not have an inbound policy? =20

Something like that. We are into minutiae here but in my imagined case it's=
 not a per-peer option, it's a global "emulate legacy defaults" option. (I =
think Jared called it "set bgp insecure-mode on" or something similarly pro=
vocative.)

The global is only generated if (a) there is an existing config being upgra=
ded and (b) it doesn't already have the command present (so, the way you tu=
rn it off is... configure it off).=20

> I am confused - how is this "permit all" different
> from today?

It's not. That's the point. I had hoped to avoid rehashing this since it wa=
s already covered in the thread but as I recall the claimed advantages vs. =
"do nothing" included

- there are no surprises for legacy deployments as you've been warning of, =
since as you say the black-box behavior is unchanged,
- at least the default is explicit in the config so if you call it "insecur=
e-mode" or something, maybe people will have incentive to flip it from "on"=
 to "off",
- new deployments (where a legacy config is not being upgraded) would start=
 with the default "off" -- this is probably the most important point.=20

--John


From nobody Fri Apr 21 00:25:25 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 452C012946A for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 00:25:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id neK8-YdfIXTU for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 00:25:22 -0700 (PDT)
Received: from mail-io0-x236.google.com (mail-io0-x236.google.com [IPv6:2607:f8b0:4001:c06::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22E92120724 for <idr@ietf.org>; Fri, 21 Apr 2017 00:25:22 -0700 (PDT)
Received: by mail-io0-x236.google.com with SMTP id r16so103028385ioi.2 for <idr@ietf.org>; Fri, 21 Apr 2017 00:25:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=v9TjHcUFW6HyXtTRea895Dtoy4wi+IOn25pWLK7bgh8=; b=Zd+iZp30H5v7GUNQVnZMwfHOXaTyY0l5E6j46zNxAFp+MolERit+QCzPGrR6TZY7Cy I/YBrMAB3QYjBJtaNjPwEjxhlD+RhgwaZlvhFnyKuvUwvpZ4r3aZuym4xhq/VZix/jcJ rKnwf6NtWKtVyPVDF+9yelhkpI+6CV9brlIngsCDIVBAOJxkSPDIX35vWhcpL4Wo3Rks EzbYEpQM78KHFYOKW/jOPFQt5kgv3U1fbdhIExfXgR+O9DjiVa1DOShLlc1GJIGf4vsL vf8Ns+F5lmnFO1PN6N0UBQl9mAlWRY40feMsOf/lRuuEr16c8BvxnGwTlXkvIKOB3kHK H1GQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=v9TjHcUFW6HyXtTRea895Dtoy4wi+IOn25pWLK7bgh8=; b=GYShxGDf0l5CaDTlTbwerbtF0zq2EKI1HAl78kA/PKpeP0LIM2BDtDpzWFDJmhMpd/ WURXWFIPnjAgAqZxsbzPVGVxNIvorrdwaxn6u4WBBN6mpyUce7h0iMBUEeWEo+pCKKzu FdzsCLhifZrMlSFGLpmEXVjegxGIT+JHnC+Qm4kVUvgTNK8EmAiJpahnaxU9EGY+8f6T dffrUyX0fjhmrB+5vSMEdStzN1a6lklEFOzrmw0MO8GTHJIwG7+81Y8/gusensUkUc+d wBvVJNgzee+aSCC9qUG2cb0/H+qLRHj2vceKCuEsCIq7iSLqfXTBiEoPdRCx0VyBrp/P zLeA==
X-Gm-Message-State: AN3rC/757qOk/7PrLpfqQOHR6iB6mWR6QeknQkVRWvP6aQhZ5FRUJ9dR WO70x9dSxUvapEsfxKtYvKd43kyGvg==
X-Received: by 10.107.16.135 with SMTP id 7mr14491805ioq.228.1492759519348; Fri, 21 Apr 2017 00:25:19 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Fri, 21 Apr 2017 00:25:17 -0700 (PDT)
Received: by 10.79.170.4 with HTTP; Fri, 21 Apr 2017 00:25:17 -0700 (PDT)
In-Reply-To: <513CB54C-1312-47EA-9EF0-7BADB681F2D3@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <11b08110-26e7-d67b-55f1-1f8cb777605e@cisco.com> <67EBB9EF-A3C0-44DC-936E-B6F1687B2094@juniper.net> <b754e588-573b-c1a3-aa37-da14e9d5703d@cisco.com> <5342F46A-44B1-4706-951F-588399283439@juniper.net> <30bf398c-b453-f676-394e-5b5ad9a50356@cisco.com> <513CB54C-1312-47EA-9EF0-7BADB681F2D3@juniper.net>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 21 Apr 2017 09:25:17 +0200
X-Google-Sender-Auth: OAvEsLnt2eGa-IC4tx0iLwWCpiY
Message-ID: <CA+b+ERmstJmiVB9o4cSWz+kz++S0Wxx1Re+o53mwXdTogaqbSA@mail.gmail.com>
To: "John G. Scudder" <jgs@juniper.net>
Cc: Susan Hares <shares@ndzh.com>, idr wg <idr@ietf.org>, Enke Chen <enkechen@cisco.com>
Content-Type: multipart/alternative; boundary=001a113fe9c2e2cf7d054da82874
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/kU01lBM4D0Yb6o5pXbqdthhVBQ0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 07:25:24 -0000

--001a113fe9c2e2cf7d054da82874
Content-Type: text/plain; charset=UTF-8

All,

The entire new proposal is to help operate eBGP sessions. And this is
perhaps even cool for Internet sessions.

But I think silent route drops or making them invalid for best path ..
those options are not cool.

I would very much prefer to keep all eBGP sessions down ... not even send
out OPEN where such policy is not in place in new release or when someone
removes auto configured "bgp insecure mode". This is easy to troubleshoot,
to notice that something is not right and fix by anyone immediately or roll
back to previous release and come back to vendor with complain ;).

Having sessions to be up normally and getting silent drops on the peers
side where you can not login and check I find hard to accept as reasons for
it can be counted in 10s if not 100s.

//R.



On Apr 21, 2017 03:29, "John Scudder" <jgs@juniper.net> wrote:

> #include individual contributor disclaimer
>
> > On Apr 20, 2017, at 9:08 PM, Enke Chen <enkechen@cisco.com> wrote:
> >
> > So *all* the new releases would generate "permit all" for any neighbor
> that does
> > not have an inbound policy?
>
> Something like that. We are into minutiae here but in my imagined case
> it's not a per-peer option, it's a global "emulate legacy defaults" option.
> (I think Jared called it "set bgp insecure-mode on" or something similarly
> provocative.)
>
> The global is only generated if (a) there is an existing config being
> upgraded and (b) it doesn't already have the command present (so, the way
> you turn it off is... configure it off).
>
> > I am confused - how is this "permit all" different
> > from today?
>
> It's not. That's the point. I had hoped to avoid rehashing this since it
> was already covered in the thread but as I recall the claimed advantages
> vs. "do nothing" included
>
> - there are no surprises for legacy deployments as you've been warning of,
> since as you say the black-box behavior is unchanged,
> - at least the default is explicit in the config so if you call it
> "insecure-mode" or something, maybe people will have incentive to flip it
> from "on" to "off",
> - new deployments (where a legacy config is not being upgraded) would
> start with the default "off" -- this is probably the most important point.
>
> --John
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a113fe9c2e2cf7d054da82874
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div dir=3D"auto">All,</div><div dir=3D"auto"><br></div>T=
he entire new proposal is to help operate eBGP sessions. And this is perhap=
s even cool for Internet sessions.<div dir=3D"auto"><br><div dir=3D"auto"><=
div dir=3D"auto">But I think silent route drops or making them invalid for =
best path .. those options are not cool.</div><div dir=3D"auto"><br></div><=
div dir=3D"auto">I would very much prefer to keep all eBGP sessions down ..=
. not even send out OPEN where such policy is not in place in new release o=
r when someone removes auto configured &quot;bgp insecure mode&quot;. This =
is easy to troubleshoot, to notice that something is not right and fix by a=
nyone immediately or roll back to previous release and come back to vendor =
with complain ;).</div><div dir=3D"auto"><br></div><div dir=3D"auto">Having=
 sessions to be up normally and getting silent drops on the peers side wher=
e you can not login and check I find hard to accept as reasons for it can b=
e counted in 10s if not 100s.</div><div dir=3D"auto"><br></div><div dir=3D"=
auto">//R.</div><div dir=3D"auto"><br></div><div dir=3D"auto"><br></div></d=
iv></div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On=
 Apr 21, 2017 03:29, &quot;John Scudder&quot; &lt;<a href=3D"mailto:jgs@jun=
iper.net">jgs@juniper.net</a>&gt; wrote:<br type=3D"attribution"><blockquot=
e class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc sol=
id;padding-left:1ex">#include individual contributor disclaimer<br>
<br>
&gt; On Apr 20, 2017, at 9:08 PM, Enke Chen &lt;<a href=3D"mailto:enkechen@=
cisco.com">enkechen@cisco.com</a>&gt; wrote:<br>
&gt;<br>
&gt; So *all* the new releases would generate &quot;permit all&quot; for an=
y neighbor that does<br>
&gt; not have an inbound policy?<br>
<br>
Something like that. We are into minutiae here but in my imagined case it&#=
39;s not a per-peer option, it&#39;s a global &quot;emulate legacy defaults=
&quot; option. (I think Jared called it &quot;set bgp insecure-mode on&quot=
; or something similarly provocative.)<br>
<br>
The global is only generated if (a) there is an existing config being upgra=
ded and (b) it doesn&#39;t already have the command present (so, the way yo=
u turn it off is... configure it off).<br>
<br>
&gt; I am confused - how is this &quot;permit all&quot; different<br>
&gt; from today?<br>
<br>
It&#39;s not. That&#39;s the point. I had hoped to avoid rehashing this sin=
ce it was already covered in the thread but as I recall the claimed advanta=
ges vs. &quot;do nothing&quot; included<br>
<br>
- there are no surprises for legacy deployments as you&#39;ve been warning =
of, since as you say the black-box behavior is unchanged,<br>
- at least the default is explicit in the config so if you call it &quot;in=
secure-mode&quot; or something, maybe people will have incentive to flip it=
 from &quot;on&quot; to &quot;off&quot;,<br>
- new deployments (where a legacy config is not being upgraded) would start=
 with the default &quot;off&quot; -- this is probably the most important po=
int.<br>
<br>
--John<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</blockquote></div></div>

--001a113fe9c2e2cf7d054da82874--


From nobody Fri Apr 21 00:32:35 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3F8812948E for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 00:32:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.608
X-Spam-Level: 
X-Spam-Status: No, score=-2.608 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, T_SPF_PERMERROR=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WL-2vuM0ZvMB for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 00:32:32 -0700 (PDT)
Received: from relais-inet.orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48AB1120724 for <idr@ietf.org>; Fri, 21 Apr 2017 00:32:32 -0700 (PDT)
Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) by opfednr22.francetelecom.fr (ESMTP service) with ESMTP id CDCE6205F0; Fri, 21 Apr 2017 09:32:30 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.61]) by opfednr00.francetelecom.fr (ESMTP service) with ESMTP id 99AD21A0064; Fri, 21 Apr 2017 09:32:30 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM7E.corporate.adroot.infra.ftgroup ([fe80::b91c:ea2c:ac8a:7462%19]) with mapi id 14.03.0319.002; Fri, 21 Apr 2017 09:32:30 +0200
From: <bruno.decraene@orange.com>
To: John Scudder <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>
CC: Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSugWjFx6qnNOc8UaJCUOYEKex/KHOnYWAgAACnoCAAMk28A==
Date: Fri, 21 Apr 2017 07:32:29 +0000
Message-ID: <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net>
In-Reply-To: <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.1]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/gKvHXGfr1KqikQtW7rDyXEO6GLo>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 07:32:34 -0000

> From: John Scudder  Sent: Thursday, April 20, 2017 11:13 PM
>=20
 > (as an individual contributor)
 >=20
 > On Apr 20, 2017, at 5:03 PM, Enke Chen <enkechen@cisco.com> wrote:
 > > It's not like the issues with software update are new :-)
 >=20
 > Yes, exactly. That's why I'm so surprised by this discussion.
 >=20
 > What I still see here is
 >=20
 > - on one hand, a worked example showing how an implementor could roll ou=
t the
 > functionality without causing heartburn for users. (My paraphrase: expos=
e the default in
 > the configuration. When upgrading old->new, automatically create the cor=
responding
 > configuration line(s) to configure for legacy behavior.)
 >=20
 > - on the other hand, general statements about how this is a hard problem.
 >=20
 > I find the specific worked example more convincing.

Good point. Thanks for the useful contribution to the debate.

a) Regarding this specific point, could the draft refer to this point. e.g.=
 add this requirement (if this is a requirement draft, which it looks like =
it when reading the first sentence of section 2) or add the solution (space=
) (if the draft define a solution).
e.g. "When the BGP speaker is upgraded to those new default behavior, exist=
ing BGP sessions, configured using the old default, must be unaffected".
Or whatever text.

That is indeed the most significant deployment impact, so it's good that it=
 can be addressed/included, rather than silently ignored.

b) Still, this draft introduce new deployment impact to all network operato=
rs using EBGP, including the ones not concerned with this problem space, as=
 provisioning tools need to be updated prior to this deployment, otherwise =
provisioning would fails. Plus silently fails as the session is kept up, si=
lently ignoring the route with no feedback to the EBGP peer). Plus for each=
 plateform, they need to selectively handle both configurations depending o=
n the software version of this plateform.

Regards,
--Bruno=20

 > --John
 > _______________________________________________
 > Idr mailing list
 > Idr@ietf.org
 > https://www.ietf.org/mailman/listinfo/idr

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Fri Apr 21 01:20:54 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D48A129440 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 01:20:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.608
X-Spam-Level: 
X-Spam-Status: No, score=-2.608 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, T_SPF_PERMERROR=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7JO3RLSQxV2V for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 01:20:50 -0700 (PDT)
Received: from relais-inet.orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85F66126CC7 for <idr@ietf.org>; Fri, 21 Apr 2017 01:20:50 -0700 (PDT)
Received: from opfednr06.francetelecom.fr (unknown [xx.xx.xx.70]) by opfednr26.francetelecom.fr (ESMTP service) with ESMTP id 2145420230; Fri, 21 Apr 2017 10:20:49 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.10]) by opfednr06.francetelecom.fr (ESMTP service) with ESMTP id DC75F1A0057; Fri, 21 Apr 2017 10:20:48 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM5C.corporate.adroot.infra.ftgroup ([fe80::4bd:9b2b:3651:6fba%19]) with mapi id 14.03.0319.002; Fri, 21 Apr 2017 10:20:48 +0200
From: <bruno.decraene@orange.com>
To: Eric C Rosen <erosen@juniper.net>, Tony Przygienda <tonysietf@gmail.com>,  Brian Dickson <brian.peter.dickson@gmail.com>
CC: "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSuV/NFx6qnNOc8UaJCUOYEKex/KHOmJIAgAAgM4CAAAGEAIAABE6AgAAC7gD//9m4gP//0tYAgAAEUgCAABrkgIAA5Lyw
Date: Fri, 21 Apr 2017 08:20:47 +0000
Message-ID: <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net>
In-Reply-To: <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.1]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/YmfOBJnHZQXDgu9yA8KlHgyzUrM>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 08:20:52 -0000

> From: Eric C Rosen  > Sent: Thursday, April 20, 2017 10:01 PM
>=20
 > On 4/20/2017 2:24 PM, Tony Przygienda wrote:
 > > Can't miss that food fight ;-)
 >=20
 > It did seem to degenerate rapidly into "if you don't agree with my
 > proposal, you don't care about security".  ;-(
 >=20
 > I agree with Enke that surprising your customers with a change in
 > behavior due to altered defaults is generally considered to be a big no-=
no.
 >=20
 > When the customers complain about a change in behavior, it is not
 > considered appropriate to respond with "it's not my fault, you should
 > have read the release notes", or "it's not my fault that you don't know
 > how to troubleshoot BGP", or "it's not my fault that you didn't do your
 > due diligence".
 >=20
 > Phasing in a change of behavior over several releases is not a practical
 > solution, because:
 >=20
 > a) Customers will still be surprised when the default behavior finally
 > changes, and
 > b) Many customers won't deploy all the releases anyway.
 >=20
 > >
 > > Having said that, I think this is BCP material at best and if this is
 > > a BCP then
 > >
 > > i) a "backward compatibility a.k.a which end of the stick is sharp"
 > > section is very advisable
 >=20
 > I would agree that something more than "figure out how to configure the
 > new release to behave like the old release" would be helpful.
 >=20
 > > ii) the BCP should describe which customer segment is best served with
 > > which default
 > >
 >=20
 > But then operators from different segments would have to get together to
 > understand each others' requirements, and they'd have to respect each
 > others' opinions as well.   I can't wait to see what happens when the
 > "trust nobody" folks get together with the "zeroconfig plug and play"
 > folks ;-)
 >=20
 > The dilemma is that there is a real security problem in certain
 > environments, but the proposed solution seems to have unintended
 > side-effects that are problematic.  Then the question becomes whether
 > the benefits are worth the cost, and this is not really a question that
 > can be resolved by IETF consensus.

Good summary, thanks.

1) As already asked, could the draft states what the problem it aims at sol=
ving?
In particular,
- it does not solve the general route leak problem, nor the 3 problems indi=
cated in the first section of the introduction.
- on the list, one author expressed a different, more focused/pragmatic, go=
al
" The problem is that there are some platforms which _immediately_
activate a line of configuration after you press enter, and a BGP
session may already come up before you get to the configuration line
which restricts what should be announced or accepted."

2) Can the draft document the side-effects, e.g. in a manageability section.


Without those 2 points, IMHO the draft is misleading for the reader/reviewe=
r/voter/user. This trade-off analysis is currently absent in the document u=
p to the point that those drawbacks have not been raised during RTG-DIR and=
 RTG-OPS review. So it's probably fair to assume that this may also have mi=
ssed by some other IETF contributors.

3) Once the problem that we want to solve has been clarified (cf 1) , then =
we can start reviewing the solution.
In particular, if the problem is indeed:
" The problem is that there are some platforms which _immediately_
activate a line of configuration after you press enter, and a BGP
session may already come up before you get to the configuration line
which restricts what should be announced or accepted."

Then, there might be other solutions. e.g.
- fixing this CLI issue on those plateforms. In particular, no need to also=
 impact the netconf provisioning which has not this issue, or the implement=
ations which do not have such CLI issue.
- use a 2 step provisioning on both EBGP peers:
   - on the sending side, use a trick for avoid the session to come up unti=
l the BGP configuration is complete enough . e.g. interface shut, use the w=
rong authentication key/TTL hack
   - on the receiving side, use a trick to avoid the session to successfull=
y come up or to accept the routes. Then after allowing for a reasonable tim=
e to let the sender finish its config, restore the correct configuration. O=
bviously this can be automated by a "controller", a local feature, a local =
event script.
This 2 step provisioning has the benefit of limiting the cost of the soluti=
on to the space where the problem is. (vs asking everyone to bear the cost,=
 for a benefit of a few, whatever important is this use case)
- I sure others may find more creative solutions.

4) Regarding the specific solution proposed in the draft,
-  why has it been prefer to silently drop the route, with will surprise pe=
ople and definitely the EBGP peer, rather than bringing done the BGP sessio=
n with a reasonable error (sub)code / text to help diagnose the problem.

- the 3rd bullet is debatable to me
"   o  A BGP speaker SHOULD fall back to an "import nothing" and "export no=
thing" mode following failure of internal components, such as a policy engi=
ne."
This is an error handling situation. IMHO https://tools.ietf.org/html/draft=
-ietf-grow-ops-reqs-for-bgp-error-handling-07 had a better analysis on this=
 point. e.g. at the minimum, rather than calling for silently dropping the =
route, I would call for closing the BGP session, possibly trying to restart=
 it. Plus if this BGP internal failure also impact IBGP session, we have a =
bigger problem.

- it's not clear whether this draft is a requirement draft or a solution dr=
aft. As per the first sentence of section 2 and its further text, it looks =
like a requirement draft. But in this case, the requirements should be solu=
tion agnostic. Which is definitely not the case. (e.g. above comments are s=
olutions specific)

Thanks,
Regards,
-- Bruno

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Fri Apr 21 01:46:45 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83FC81294F4 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 01:46:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xc-olre6IT-1 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 01:46:42 -0700 (PDT)
Received: from mail-wm0-x231.google.com (mail-wm0-x231.google.com [IPv6:2a00:1450:400c:c09::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E5C7129476 for <idr@ietf.org>; Fri, 21 Apr 2017 01:46:42 -0700 (PDT)
Received: by mail-wm0-x231.google.com with SMTP id r190so11447160wme.1 for <idr@ietf.org>; Fri, 21 Apr 2017 01:46:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=20wzRskGOJAlwrpeeIqZkUZMzXdY3e3UizxThsIpXT8=; b=b3sxf3qAFIIhIkBGhedF5hzYN7oO1c3mFAL+B/+ZtwJGrH87AYMG8kPx6/fUY9LWoL +4TP08xADHSCuxJjWfrrcYLWT3KUVQfaSOPbt4jSG1kzZm00xxYA3azLWr/48cABV/K7 je31KNO3BGKlqSWbLvoqIJYwG+mL8XgvqCuy2MBxN0kUUEtOR8Y/G7rWFWF/C5bmIhLA pbijTLcUK5EZ4ub0YEkhlWlboqP0r/7yMf8OI4qC8EaPTXDJ35ONGIvRvgpMdAiDv8Ov Ct9G66tkSRA6ZvyP39gN7AQCDb2Jv5Ye9Je0H8PwFtpBGSq/+gkZmPQHUY/Colv2snf8 NV3w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=20wzRskGOJAlwrpeeIqZkUZMzXdY3e3UizxThsIpXT8=; b=kUToZMsRiJDkI/ryf/7sihsxZ3OhRI9pd6TWRLBeA81EbfwO/RHmX3dXS9gc/xFpRy TjzfzEloekCYteBzPESWOAiVrP29d3C+DaGx67KAZN+cO7OZX8VZDH0VKlVbkaPWX9Y/ dJ0Az9M3TZ+eTYAtG4Yopu/GFCPgA8+Okc9/YeaDJwk+V8b233+fxB3LGCIuvyvXZTpR RtjLDaz73Vsuc8WcjNnroZDe/JB8HEAsccZERPJCT1VLtyJV642D3QZOTvHA05s3LjQ6 wlpt2qcHw1SuhQRl/8vOgPV4Spzb++wJOGhUCfRmoSLZqje1Jwdo7Qr6KznBqfJKToNW CWHg==
X-Gm-Message-State: AN3rC/57LC6qNZk4r6WFexAKiJHqdpW50cDJR7K4NLQE9HAF6VsjNfR7 05MSXAWDBEbL2g==
X-Received: by 10.80.134.5 with SMTP id o5mr47337edo.93.1492764400667; Fri, 21 Apr 2017 01:46:40 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:154d:67d1:53a6:3be]) by smtp.gmail.com with ESMTPSA id f37sm249455ede.4.2017.04.21.01.46.39 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Apr 2017 01:46:39 -0700 (PDT)
Date: Fri, 21 Apr 2017 10:46:38 +0200
From: Job Snijders <job@instituut.net>
To: bruno.decraene@orange.com
Cc: John Scudder <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170421084638.l6pbvtznfsxnq2wy@Vurt.local>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/q1Xb3thvxNCxEcyd9vPlW2J2Rok>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 08:46:44 -0000

On Fri, Apr 21, 2017 at 07:32:29AM +0000, bruno.decraene@orange.com wrote:
> > From: John Scudder  Sent: Thursday, April 20, 2017 11:13 PM
> > 
>  > (as an individual contributor)
>  > 
>  > On Apr 20, 2017, at 5:03 PM, Enke Chen <enkechen@cisco.com> wrote:
>  > > It's not like the issues with software update are new :-)
>  > 
>  > Yes, exactly. That's why I'm so surprised by this discussion.
>  > 
>  > What I still see here is
>  > 
>  > - on one hand, a worked example showing how an implementor could
>  > roll out the functionality without causing heartburn for users. (My
>  > paraphrase: expose the default in the configuration. When upgrading
>  > old->new, automatically create the corresponding configuration
>  > line(s) to configure for legacy behavior.)
>  > 
>  > - on the other hand, general statements about how this is a hard problem.
>  > 
>  > I find the specific worked example more convincing.
> 
> Good point. Thanks for the useful contribution to the debate.
> 
> a) Regarding this specific point, could the draft refer to this point.
> e.g. add this requirement (if this is a requirement draft, which it
> looks like it when reading the first sentence of section 2) or add the
> solution (space) (if the draft define a solution).
> e.g. "When the BGP speaker is upgraded to those new default behavior,
> existing BGP sessions, configured using the old default, must be
> unaffected". Or whatever text.

You are adding complexity and increasing inconsistency rather then
reducing it.

> That is indeed the most significant deployment impact, so it's good
> that it can be addressed/included, rather than silently ignored.
> 
> b) Still, this draft introduce new deployment impact to all network
> operators using EBGP, including the ones not concerned with this
> problem space, as provisioning tools need to be updated prior to this
> deployment, otherwise provisioning would fails. Plus silently fails as
> the session is kept up, silently ignoring the route with no feedback
> to the EBGP peer). Plus for each plateform, they need to selectively
> handle both configurations depending on the software version of this
> plateform.

So, going forward, any IDR proposal that requires a change to any
provision system is a no-go?

For the record: NTT has many conditional clauses in their configuration
generation system to deal with configuration differences between
different versions of the software on the same platforms. This is
common. I do not believe you or anyone else operate your networks
without the accepting that different versions may have for example
different syntax.

I've already stated how the failure scenario can only occur after a
missteps in the process, and that outages are likely to be remedied
swiftly and permanently. I've also contributed a case where bgp-reject
actually reduces the duration of outages that would otherwise be
caused and prolonged if an insecure mode of operation is used.

Kind regards,

Job


From nobody Fri Apr 21 01:57:10 2017
Return-Path: <nick@foobar.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CE571294F4 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 01:57:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id em9ogXjPVF5i for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 01:57:07 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE3A0129415 for <idr@ietf.org>; Fri, 21 Apr 2017 01:57:06 -0700 (PDT)
X-Envelope-To: idr@ietf.org
Received: from crumpet.local (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id v3L8v39o021497 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 21 Apr 2017 09:57:03 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.local
Message-ID: <58F9C95E.2050201@foobar.org>
Date: Fri, 21 Apr 2017 09:57:02 +0100
From: Nick Hilliard <nick@foobar.org>
User-Agent: Postbox 5.0.12 (Macintosh/20170323)
MIME-Version: 1.0
To: Robert Raszuk <robert@raszuk.net>
CC: idr wg <idr@ietf.org>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org> <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com> <58F89C07.8080900@foobar.org> <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com> <58F93B30.2010909@foobar.org> <CA+b+ER=QLQy8hTrw4Dvs7Au5uhQd=wUxdFWQqQx06Kc61n5BLg@mail.gmail.com>
In-Reply-To: <CA+b+ER=QLQy8hTrw4Dvs7Au5uhQd=wUxdFWQqQx06Kc61n5BLg@mail.gmail.com>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/rVsLzFh_EBFU269x2KyPolEHjO4>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 08:57:09 -0000

Robert Raszuk wrote:
> But my point is that we can come up with single solution to both
> problems which would work in a hardware accelerated way equally well.

Then I suggest you author documents to:

- add a new icmp type to define reachability / mtu detection / etc mechanism
- replicate whatever bits of BFD you want to port over
- get widespread vendor support

Once you've done all this, and not before, then please feel free to
write an update to draft-ietf-idr-rs-bfd rfc to include your new
reachability mechanism.

Or you could update bfd to support mtu detection.

> I
> am also observing that MTU issue is applicable to long distance
> stretched IXes which as I am sure you are aware is a real IX service
> offering by number of IX operators today. 

IXP core MTU monitoring is orthogonal to draft-ietf-idr-rs-bfd.  IXP
edge MTU monitoring is the responsibility of the ixp edge participant.

If you are operating a private infrastructure in your company which
amalgamates these roles and where you have a need to monitor for MTU
changes, then this is a private problem which can be easily solved using
any one of a plethora of off-the-shelf tools and there is no reason
whatsoever for the ietf to standardise a new protocol to solve this
corner case.

I'm not going further down this rat-hole because it has nothing to with
this draft.

Nick


From nobody Fri Apr 21 02:01:38 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93D03129426 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:01:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rzbYBTdWhOEl for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:01:34 -0700 (PDT)
Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8EF7129B43 for <idr@ietf.org>; Fri, 21 Apr 2017 02:01:34 -0700 (PDT)
Received: by mail-io0-x233.google.com with SMTP id r16so105863776ioi.2 for <idr@ietf.org>; Fri, 21 Apr 2017 02:01:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=LSXlALAaJNXnpdf78r21Vou5sGHWBjs4/CANHZ3PjmE=; b=miBheXEdx7w1o6TfK41Bn0Pk92jmUNkqLo+DnzxQih2sJEdv8l5bIrQt98YwG1wIou CBE01IaQX3z/FD776HtkymPDjbc5eE7ZMbDs03bYH+zCypz0qzfm1yRstRhX5PP3xH1y riLY+kU3+ouZeGvc3AOCHaet2ZlUbjTwzeshq57XOk6rg103lhOL5kvEKFWmcWRtkcn7 OpQWpLMRsMZRyQ6fNyLWUJ7NfjmnBuY5Eapmpr3J8DFGVku2o++Xrx1/IabCWasq9WzB PpzRTB5c2zQhjrPaPcSNgfhqHC3K+cCfPyCfLjMo4MdQqF+pobPuqP+3NZFubyKZYYRf h1cg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=LSXlALAaJNXnpdf78r21Vou5sGHWBjs4/CANHZ3PjmE=; b=A58G6+pbpJ4IH1GH8a/mGU6MY/2+UPoo3EUtbPYA8Unh5qLiDy99pgB83HIM+E4OKM 628RlnDiS2CChBylAQ6M/AbYCaTbX5hrOTcehiAXQoZ2liouEhbYe8ujumgyph19/uzB Zyu+E+gERB0cfBAHBxRoU00P/r3qV2AFDYv6b4uUnbnsqwIdahvoKHgTesAuOTwiAvce TH+Mh1x5NZ9IcnSfqoXOHbT7YNMIFzM+rLT0brO7PwiHvSBdX2VvDug2pCCtDO6ShI54 nPmqyd+0UTaldQOU9d07zyrxVuqcQ2l9CKmrLSUE6jyHgokSVq3+XwmgKScz2T0RI6Xp z9CQ==
X-Gm-Message-State: AN3rC/6H/M9Kj8ig0tCyd/jzsTPFuEusBY2/TeJvemSDBPjGOgmPj35W hXGQRxGk3cwsbKzU1HjPq0j7pH9tVxNV4qI=
X-Received: by 10.36.219.195 with SMTP id c186mr9008970itg.25.1492765281103; Fri, 21 Apr 2017 02:01:21 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Fri, 21 Apr 2017 02:01:20 -0700 (PDT)
In-Reply-To: <58F9C95E.2050201@foobar.org>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org> <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com> <58F89C07.8080900@foobar.org> <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com> <58F93B30.2010909@foobar.org> <CA+b+ER=QLQy8hTrw4Dvs7Au5uhQd=wUxdFWQqQx06Kc61n5BLg@mail.gmail.com> <58F9C95E.2050201@foobar.org>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 21 Apr 2017 11:01:20 +0200
X-Google-Sender-Auth: lSmCE8itUm5fhjwRagLycu5YcLw
Message-ID: <CA+b+ERmyuCqn1CCK0gZVV0C5VRQstXxEN_OA6WwmMbxTjrtaBg@mail.gmail.com>
To: Nick Hilliard <nick@foobar.org>
Cc: idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114f5cce50407b054da980f4
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/UbqkHxn853qzP6LCzpV4BCJrnjo>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 09:01:36 -0000

--001a114f5cce50407b054da980f4
Content-Type: text/plain; charset=UTF-8

The document is written, accepted, last called and published as Standard
Track RFC.

Ref: RFC 7880.

> If you are operating a private infrastructure

I am building private secure infra over public IXes. Hint: SD-WAN MTU
stability over IX matters to me.

Best,
R.


On Fri, Apr 21, 2017 at 10:57 AM, Nick Hilliard <nick@foobar.org> wrote:

> Robert Raszuk wrote:
> > But my point is that we can come up with single solution to both
> > problems which would work in a hardware accelerated way equally well.
>
> Then I suggest you author documents to:
>
> - add a new icmp type to define reachability / mtu detection / etc
> mechanism
> - replicate whatever bits of BFD you want to port over
> - get widespread vendor support
>
> Once you've done all this, and not before, then please feel free to
> write an update to draft-ietf-idr-rs-bfd rfc to include your new
> reachability mechanism.
>
> Or you could update bfd to support mtu detection.
>
> > I
> > am also observing that MTU issue is applicable to long distance
> > stretched IXes which as I am sure you are aware is a real IX service
> > offering by number of IX operators today.
>
> IXP core MTU monitoring is orthogonal to draft-ietf-idr-rs-bfd.  IXP
> edge MTU monitoring is the responsibility of the ixp edge participant.
>
> If you are operating a private infrastructure in your company which
> amalgamates these roles and where you have a need to monitor for MTU
> changes, then this is a private problem which can be easily solved using
> any one of a plethora of off-the-shelf tools and there is no reason
> whatsoever for the ietf to standardise a new protocol to solve this
> corner case.
>
> I'm not going further down this rat-hole because it has nothing to with
> this draft.
>
> Nick
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a114f5cce50407b054da980f4
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">The document is written, accepted, last=
 called and published as Standard Track RFC.=C2=A0</div><div class=3D"gmail=
_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">=
<br></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica=
,sans-serif;font-size:small">Ref: RFC 7880.</div><div class=3D"gmail_defaul=
t" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></d=
iv><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-s=
erif;font-size:small">&gt;=C2=A0<span style=3D"font-size:12.8px;font-family=
:arial,sans-serif">If you are operating a private infrastructure</span></di=
v><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-se=
rif;font-size:small"><span style=3D"font-size:12.8px;font-family:arial,sans=
-serif"><br></span></div><div class=3D"gmail_default" style=3D"font-family:=
arial,helvetica,sans-serif;font-size:small"><span style=3D"font-size:12.8px=
;font-family:arial,sans-serif">I am building private secure infra over publ=
ic IXes. Hint: SD-WAN MTU stability over IX matters to me.</span></div><div=
 class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fo=
nt-size:small"><span style=3D"font-size:12.8px;font-family:arial,sans-serif=
"><br></span></div><div class=3D"gmail_default" style=3D"font-family:arial,=
helvetica,sans-serif;font-size:small"><span style=3D"font-size:12.8px;font-=
family:arial,sans-serif">Best,</span></div><div class=3D"gmail_default" sty=
le=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span style=
=3D"font-size:12.8px;font-family:arial,sans-serif">R.</span></div><div clas=
s=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-si=
ze:small"><span style=3D"font-size:12.8px;font-family:arial,sans-serif"><br=
></span></div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quot=
e">On Fri, Apr 21, 2017 at 10:57 AM, Nick Hilliard <span dir=3D"ltr">&lt;<a=
 href=3D"mailto:nick@foobar.org" target=3D"_blank">nick@foobar.org</a>&gt;<=
/span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8=
ex;border-left:1px #ccc solid;padding-left:1ex"><span class=3D"">Robert Ras=
zuk wrote:<br>
&gt; But my point is that we can come up with single solution to both<br>
&gt; problems which would work in a hardware accelerated way equally well.<=
br>
<br>
</span>Then I suggest you author documents to:<br>
<br>
- add a new icmp type to define reachability / mtu detection / etc mechanis=
m<br>
- replicate whatever bits of BFD you want to port over<br>
- get widespread vendor support<br>
<br>
Once you&#39;ve done all this, and not before, then please feel free to<br>
write an update to draft-ietf-idr-rs-bfd rfc to include your new<br>
reachability mechanism.<br>
<br>
Or you could update bfd to support mtu detection.<br>
<span class=3D""><br>
&gt; I<br>
&gt; am also observing that MTU issue is applicable to long distance<br>
&gt; stretched IXes which as I am sure you are aware is a real IX service<b=
r>
&gt; offering by number of IX operators today.<br>
<br>
</span>IXP core MTU monitoring is orthogonal to draft-ietf-idr-rs-bfd.=C2=
=A0 IXP<br>
edge MTU monitoring is the responsibility of the ixp edge participant.<br>
<br>
If you are operating a private infrastructure in your company which<br>
amalgamates these roles and where you have a need to monitor for MTU<br>
changes, then this is a private problem which can be easily solved using<br=
>
any one of a plethora of off-the-shelf tools and there is no reason<br>
whatsoever for the ietf to standardise a new protocol to solve this<br>
corner case.<br>
<br>
I&#39;m not going further down this rat-hole because it has nothing to with=
<br>
this draft.<br>
<span class=3D"HOEnZb"><font color=3D"#888888"><br>
Nick<br>
</font></span><div class=3D"HOEnZb"><div class=3D"h5"><br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--001a114f5cce50407b054da980f4--


From nobody Fri Apr 21 02:02:00 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92379129A9F for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:01:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YQ5AvI0hmwnV for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:01:52 -0700 (PDT)
Received: from mail-wm0-x229.google.com (mail-wm0-x229.google.com [IPv6:2a00:1450:400c:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50CF8129B1A for <idr@ietf.org>; Fri, 21 Apr 2017 02:01:49 -0700 (PDT)
Received: by mail-wm0-x229.google.com with SMTP id y18so6273124wmh.0 for <idr@ietf.org>; Fri, 21 Apr 2017 02:01:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=qjxLGrivmj01hHKA523/Nk76iX+BgwgDtuI2yzfgWOQ=; b=RtjxaUu+mzNYhEoqsHXdLyeooO5/0hdfOikW3RyrVomwp1VjlKBrKM9z+n2SO1FCkC Jyx4rwx1B9YWHy3XqnXR1DFzaAktxhGzWcWcl21ycQP9O8dT1eix1497alRz6r5eGNRx LDeVdGImRhfcQXE1whgZrge1YjxNTnDjHS3tkdf4Ik9hEt4VGDa4F9gxSBtBQZRIlAlE xyHRJcPLSqmES6PfwIK9AeY0Mhur0KmbJNOVf334/zoGdhiZU23azcbTCcCFqRD+R28J 5osmanE7GglPceC3gSGMj/H3wLg/+rP3gFdyHzYDf/NQlWQWsjKl/3cah7Fa4s3MA1J2 Mqww==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=qjxLGrivmj01hHKA523/Nk76iX+BgwgDtuI2yzfgWOQ=; b=h7mfoMeasMUZU+Vq8swfwgy9BebVM4+CABWY3zaQAu4s0nKlkHe9Kt0TU8eaodNdXL iM1NM2HHUjJOSvhquc/qEuqQZuBznQl5Q4BeQ/+VmRYPbbU90trMwzForFzv3YKNg5/u i+bL8yFqf+x/ZABx7n6H1X8NarlsXt5HD8UyK1Tud6tTMFE8Z1jF8peyXL/Do+grH9AB GLfl51mprJZGfNnoGULQ5CnkYxKMxSriikHhqRox7cDByNVQwikl95h5U2+jULBJ/jxN NNfyXO+OebNNhK3yB+Gthn2F899dGeSHn94K+RBGMZ55aXWLZq7kHZ1LtYZZXHQzhvpq FjvA==
X-Gm-Message-State: AN3rC/4ridXlRpFfZPKQ6/AFp0czCrOZ3eKbC5f3nWYmdMzDUFtmoaVw tnQtIETvxCjNjQ==
X-Received: by 10.80.174.230 with SMTP id f35mr48927edd.157.1492765307730; Fri, 21 Apr 2017 02:01:47 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:154d:67d1:53a6:3be]) by smtp.gmail.com with ESMTPSA id o14sm267514edc.53.2017.04.21.02.01.46 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Apr 2017 02:01:46 -0700 (PDT)
Date: Fri, 21 Apr 2017 11:01:45 +0200
From: Job Snijders <job@instituut.net>
To: bruno.decraene@orange.com
Cc: Eric C Rosen <erosen@juniper.net>, Tony Przygienda <tonysietf@gmail.com>,  Brian Dickson <brian.peter.dickson@gmail.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170421090145.f5yuhimb4qg7knrf@Vurt.local>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/hlBXb8jKeJ_L-3NSRxYnikmgFhM>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 09:02:00 -0000

Hi Bruno,

You create a false dilemma stating that it is not clear to you whether
this is a "requirement draft or a solution draft", and that those need
to be separate. 

Did you review Alvaro's suggested changes which prompted the third IDR
consultation on this topic? They are viewable here:

    http://htmlpreview.github.io/?https://github.com/jaredmauch/draft-mauch-bgp-reject/blob/alvaro/draft-ietf-grow-bgp-reject-06-from-5.diff.html

I'm disappointed that you've taken a CLI example I've provided as the
sole driver behind this effort. I did not mean to offer the CLI example
as an exhaustive list of reasons.

Kind regards,

Job

ps. For additional advise on how to derail this effort, let us please
take the ideas offered in
http://www.businessinsider.com/oss-manual-sabotage-productivity-2015-11?international=true&r=US&IR=T
also in consideration.

On Fri, Apr 21, 2017 at 08:20:47AM +0000, bruno.decraene@orange.com wrote:
> > From: Eric C Rosen  > Sent: Thursday, April 20, 2017 10:01 PM
> > 
>  > On 4/20/2017 2:24 PM, Tony Przygienda wrote:
>  > > Can't miss that food fight ;-)
>  > 
>  > It did seem to degenerate rapidly into "if you don't agree with my
>  > proposal, you don't care about security".  ;-(
>  > 
>  > I agree with Enke that surprising your customers with a change in
>  > behavior due to altered defaults is generally considered to be a big no-no.
>  > 
>  > When the customers complain about a change in behavior, it is not
>  > considered appropriate to respond with "it's not my fault, you should
>  > have read the release notes", or "it's not my fault that you don't know
>  > how to troubleshoot BGP", or "it's not my fault that you didn't do your
>  > due diligence".
>  > 
>  > Phasing in a change of behavior over several releases is not a practical
>  > solution, because:
>  > 
>  > a) Customers will still be surprised when the default behavior finally
>  > changes, and
>  > b) Many customers won't deploy all the releases anyway.
>  > 
>  > >
>  > > Having said that, I think this is BCP material at best and if this is
>  > > a BCP then
>  > >
>  > > i) a "backward compatibility a.k.a which end of the stick is sharp"
>  > > section is very advisable
>  > 
>  > I would agree that something more than "figure out how to configure the
>  > new release to behave like the old release" would be helpful.
>  > 
>  > > ii) the BCP should describe which customer segment is best served with
>  > > which default
>  > >
>  > 
>  > But then operators from different segments would have to get together to
>  > understand each others' requirements, and they'd have to respect each
>  > others' opinions as well.   I can't wait to see what happens when the
>  > "trust nobody" folks get together with the "zeroconfig plug and play"
>  > folks ;-)
>  > 
>  > The dilemma is that there is a real security problem in certain
>  > environments, but the proposed solution seems to have unintended
>  > side-effects that are problematic.  Then the question becomes whether
>  > the benefits are worth the cost, and this is not really a question that
>  > can be resolved by IETF consensus.
> 
> Good summary, thanks.
> 
> 1) As already asked, could the draft states what the problem it aims at solving?
> In particular,
> - it does not solve the general route leak problem, nor the 3 problems indicated in the first section of the introduction.
> - on the list, one author expressed a different, more focused/pragmatic, goal
> " The problem is that there are some platforms which _immediately_
> activate a line of configuration after you press enter, and a BGP
> session may already come up before you get to the configuration line
> which restricts what should be announced or accepted."
> 
> 2) Can the draft document the side-effects, e.g. in a manageability section.
> 
> 
> Without those 2 points, IMHO the draft is misleading for the reader/reviewer/voter/user. This trade-off analysis is currently absent in the document up to the point that those drawbacks have not been raised during RTG-DIR and RTG-OPS review. So it's probably fair to assume that this may also have missed by some other IETF contributors.
> 
> 3) Once the problem that we want to solve has been clarified (cf 1) , then we can start reviewing the solution.
> In particular, if the problem is indeed:
> " The problem is that there are some platforms which _immediately_
> activate a line of configuration after you press enter, and a BGP
> session may already come up before you get to the configuration line
> which restricts what should be announced or accepted."
> 
> Then, there might be other solutions. e.g.
> - fixing this CLI issue on those plateforms. In particular, no need to also impact the netconf provisioning which has not this issue, or the implementations which do not have such CLI issue.
> - use a 2 step provisioning on both EBGP peers:
>    - on the sending side, use a trick for avoid the session to come up until the BGP configuration is complete enough . e.g. interface shut, use the wrong authentication key/TTL hack
>    - on the receiving side, use a trick to avoid the session to successfully come up or to accept the routes. Then after allowing for a reasonable time to let the sender finish its config, restore the correct configuration. Obviously this can be automated by a "controller", a local feature, a local event script.
> This 2 step provisioning has the benefit of limiting the cost of the solution to the space where the problem is. (vs asking everyone to bear the cost, for a benefit of a few, whatever important is this use case)
> - I sure others may find more creative solutions.
> 
> 4) Regarding the specific solution proposed in the draft,
> -  why has it been prefer to silently drop the route, with will surprise people and definitely the EBGP peer, rather than bringing done the BGP session with a reasonable error (sub)code / text to help diagnose the problem.
> 
> - the 3rd bullet is debatable to me
> "   o  A BGP speaker SHOULD fall back to an "import nothing" and "export nothing" mode following failure of internal components, such as a policy engine."
> This is an error handling situation. IMHO https://tools.ietf.org/html/draft-ietf-grow-ops-reqs-for-bgp-error-handling-07 had a better analysis on this point. e.g. at the minimum, rather than calling for silently dropping the route, I would call for closing the BGP session, possibly trying to restart it. Plus if this BGP internal failure also impact IBGP session, we have a bigger problem.
> 
> - it's not clear whether this draft is a requirement draft or a solution draft. As per the first sentence of section 2 and its further text, it looks like a requirement draft. But in this case, the requirements should be solution agnostic. Which is definitely not the case. (e.g. above comments are solutions specific)
> 
> Thanks,
> Regards,
> -- Bruno


From nobody Fri Apr 21 02:08:45 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1F28129426 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:08:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WulF3Q6jxyL8 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:08:41 -0700 (PDT)
Received: from uplift.swm.pp.se (ipv6.swm.pp.se [IPv6:2a00:801::f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6FEE71292F5 for <idr@ietf.org>; Fri, 21 Apr 2017 02:08:41 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id C9336B0; Fri, 21 Apr 2017 11:08:38 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1492765718; bh=/PIOqjuuzBezlBrd3zqmibq5N7k3ZtAJ/oHL2cDhx9Q=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=plaI4HEo7gvb/BivHbTzpf6nXilTY7qIYofeTZ0Jwth2zrgloVN5XRwK6XOaoZj9t yWOtsdkNIWBp6Tkq701ZaznoLz36TqqTuvRCK4knHjmuG8NZs64sME2lgWZOXn9NFS E+nRjT2T/zsGwYCnIqykzX/7genjUOntz2xAZt2Q=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id B152BAF; Fri, 21 Apr 2017 11:08:38 +0200 (CEST)
Date: Fri, 21 Apr 2017 11:08:38 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Nick Hilliard <nick@foobar.org>
cc: Robert Raszuk <robert@raszuk.net>, idr wg <idr@ietf.org>
In-Reply-To: <58F9C95E.2050201@foobar.org>
Message-ID: <alpine.DEB.2.02.1704211103320.5591@uplift.swm.pp.se>
References: <CA+b+ERn5o-i-6shdzj_afa8Z1yQO3Ep6HmB=Fv4StSW_ge95Ew@mail.gmail.com> <CA+b+ERkBeBoz0Le4wgqZK1X76=_HKOEUYTWYBd_xnjYoaJgrsw@mail.gmail.com> <CA+b+ERnBL9Q3ep1JrC9HQp3B3AYmiQ8ctTssK1g4L_ueTTRaMQ@mail.gmail.com> <CA+b+ER=cZiBfWj4=+uKeqsWwypGFz3p+Tvx8Q2dD3hFFXSC4=w@mail.gmail.com> <CA+b+ER=f-S118JtY--n-B0P+CB0yvy_rw3JaJpWw02n7prQ=Ww@mail.gmail.com> <20170314204212.GD12864@pfrc.org> <815723FC-B143-4410-B0FF-D9FB4F827862@cisco.com> <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org> <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com> <58F89C07.8080900@foobar.org> <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com> <58F93B30.2010909@foobar.org> <CA+b+ER=QLQy8hTrw4Dvs7Au5uhQd=wUxdFWQqQx06Kc61n5BLg@mail.gmail.com> <58F9C95E.2050201@foobar.org>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/oOwkyauoUO2V1sbTi3XXdY55OfA>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 09:08:44 -0000

On Fri, 21 Apr 2017, Nick Hilliard wrote:

> Robert Raszuk wrote:
>> But my point is that we can come up with single solution to both
>> problems which would work in a hardware accelerated way equally well.
>
> Then I suggest you author documents to:
>
> - add a new icmp type to define reachability / mtu detection / etc mechanism

https://tools.ietf.org/html/draft-van-beijnum-multi-mtu-05

I am interested in working in this area, however IDR doesn't seem to be 
the ideal place to do that. I'd prefer to do it in INT-AREA (where I 
presented I van Beijnums work a few IETFs back.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Fri Apr 21 02:18:31 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9863E129B17 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:18:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.608
X-Spam-Level: 
X-Spam-Status: No, score=-2.608 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, T_SPF_PERMERROR=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ohLI7mKpDDua for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:18:27 -0700 (PDT)
Received: from relais-inet.orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BCBBD129426 for <idr@ietf.org>; Fri, 21 Apr 2017 02:18:26 -0700 (PDT)
Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) by opfednr20.francetelecom.fr (ESMTP service) with ESMTP id 2B17B40126; Fri, 21 Apr 2017 11:18:25 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.32]) by opfednr00.francetelecom.fr (ESMTP service) with ESMTP id F041E1A0064; Fri, 21 Apr 2017 11:18:24 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM32.corporate.adroot.infra.ftgroup ([fe80::8924:188:2124:a046%19]) with mapi id 14.03.0319.002; Fri, 21 Apr 2017 11:18:24 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@instituut.net>
CC: John Scudder <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSunvKFx6qnNOc8UaJCUOYEKex/KHPhBrQ
Date: Fri, 21 Apr 2017 09:18:24 +0000
Message-ID: <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local>
In-Reply-To: <20170421084638.l6pbvtznfsxnq2wy@Vurt.local>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.1]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/tMYEAFbp36S7G5hcww7CX_pJ2qQ>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 09:18:29 -0000

> From: Job Snijders [mailto:job@instituut.net]  > Sent: Friday, April 21, =
2017 10:47 AM
>=20
 > On Fri, Apr 21, 2017 at 07:32:29AM +0000, bruno.decraene@orange.com wrot=
e:
 > > > From: John Scudder  Sent: Thursday, April 20, 2017 11:13 PM
 > > >
 > >  > (as an individual contributor)
 > >  >
 > >  > On Apr 20, 2017, at 5:03 PM, Enke Chen <enkechen@cisco.com> wrote:
 > >  > > It's not like the issues with software update are new :-)
 > >  >
 > >  > Yes, exactly. That's why I'm so surprised by this discussion.
 > >  >
 > >  > What I still see here is
 > >  >
 > >  > - on one hand, a worked example showing how an implementor could
 > >  > roll out the functionality without causing heartburn for users. (My
 > >  > paraphrase: expose the default in the configuration. When upgrading
 > >  > old->new, automatically create the corresponding configuration
 > >  > line(s) to configure for legacy behavior.)
 > >  >
 > >  > - on the other hand, general statements about how this is a hard pr=
oblem.
 > >  >
 > >  > I find the specific worked example more convincing.
 > >
 > > Good point. Thanks for the useful contribution to the debate.
 > >
 > > a) Regarding this specific point, could the draft refer to this point.
 > > e.g. add this requirement (if this is a requirement draft, which it
 > > looks like it when reading the first sentence of section 2) or add the
 > > solution (space) (if the draft define a solution).
 > > e.g. "When the BGP speaker is upgraded to those new default behavior,
 > > existing BGP sessions, configured using the old default, must be
 > > unaffected". Or whatever text.
 >=20
 > You are adding complexity and increasing inconsistency rather then
 > reducing it.

:s/adding/dealing with the

I guess that this means a "No" to my request.

 > > That is indeed the most significant deployment impact, so it's good
 > > that it can be addressed/included, rather than silently ignored.
 > >
 > > b) Still, this draft introduce new deployment impact to all network
 > > operators using EBGP, including the ones not concerned with this
 > > problem space, as provisioning tools need to be updated prior to this
 > > deployment, otherwise provisioning would fails. Plus silently fails as
 > > the session is kept up, silently ignoring the route with no feedback
 > > to the EBGP peer). Plus for each plateform, they need to selectively
 > > handle both configurations depending on the software version of this
 > > plateform.
 >=20
 > So, going forward, any IDR proposal that requires a change to any
 > provision system is a no-go?
=20
It's not about a no-go. It's about understanding and considering the tradeo=
ffs.

=20
 > For the record: NTT has many conditional clauses in their configuration
 > generation system to deal with configuration differences between
 > different versions of the software on the same platforms. This is
 > common. I do not believe you or anyone else operate your networks
 > without the accepting that different versions may have for example
 > different syntax.

I'm not saying that this is not possible. I'm saying that there is an impac=
t, with associated cost and delay.
If possible, I'd prefer a solution which preserve the benefits while reduci=
ng the impacts. This requires that we all agree on the problems that we wan=
t to solve and the consequences of a proposed solution.

At the very minimum,=20
"  o  A BGP speaker MAY provide a configuration option to disable the prece=
ding behaviors, but it MUST implement them by default."
:s/MAY/MUST

But IMHO, we could discuss the "MUST implement them by default". As basical=
ly, the document is saying that the people facing the issue with their CLI,=
 cannot even be asked to enable a one line knob in their configuration, whi=
le the document cannot even acknowledge and take into account the cost adde=
d on all other EBGP users.

Kind regards,
--Bruno
=20
 > I've already stated how the failure scenario can only occur after a
 > missteps in the process, and that outages are likely to be remedied
 > swiftly and permanently. I've also contributed a case where bgp-reject
 > actually reduces the duration of outages that would otherwise be
 > caused and prolonged if an insecure mode of operation is used.
 >=20
 > Kind regards,
 >=20
 > Job

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Fri Apr 21 02:35:12 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 433EF129A8D for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:35:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.409
X-Spam-Level: 
X-Spam-Status: No, score=-0.409 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QcbYbLa6YWok for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:35:08 -0700 (PDT)
Received: from mail-io0-x231.google.com (mail-io0-x231.google.com [IPv6:2607:f8b0:4001:c06::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34D3B1287A5 for <idr@ietf.org>; Fri, 21 Apr 2017 02:35:08 -0700 (PDT)
Received: by mail-io0-x231.google.com with SMTP id k87so112043414ioi.0 for <idr@ietf.org>; Fri, 21 Apr 2017 02:35:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=Vk1UeNVoKjwtMrSDJ2Oq8zKH47vrsso4s9ZavceVIZI=; b=AG5xkjo3SZ5lRd5R31CY7UgXFbmbaMhDUw53FU/AUdZ17tsgOBpvnfNP8IeB8IGeRr zQr2Gi2gRDUs20frAEsDkcz76c+04Rsr3f8TcSMrWIzNrhjEq3+mPa3rqESK7QV7gGt1 70oG54SxHbZoTjpZTKISKkcvikJwUwEnjaMoZAtThWXaaG+kmaLB4IX41U+sQlYoEONf W2Ea0qhENwlNYn+PJUgoPZ6cUJvSMLOOa6JAfp+fXq3T5yr1w+oDwvpsE+PfS38GRqsE zl6DvojEB05z9d7goP7BFkLmg0mf+LarzmSkLh9LtaB6R/EWZrLSBZOdOkT1c1PA1lBi y0RQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=Vk1UeNVoKjwtMrSDJ2Oq8zKH47vrsso4s9ZavceVIZI=; b=dIszX8fr0h5ch+sxhu8jaMxkF3GqSHzpYUAqBsnN4/kqXjGtokMwng4+29Imhe58QY ZM75LDoEXUfkHEd33/l4ug9TaSPdmEafEkS9tf5dyxDk+tHFoKtOpbTsfs0E9xfJes5D g/3gtv0drODuqwv03BpFwaWhlejq44AE8dCxLfexQg1EFFbjX3q4/l26lSwJfqOD7xgt rvVzsiSiMbzxSh0dNmgML7LYRZfaKljRCnDX5d8MRtqogmXla5UZFfazSan34YBSlSiw mHnub/exMKR64jYKTeCqEDo6s3FYDdixGWcSGi5Z57lzlWjrhDwaZ0NVFsalG4enyOlP CQeA==
X-Gm-Message-State: AN3rC/7SCigRZiNP9Y9tZHj1QrWyr70kv8ue5914DrY6TyEzMu1MY7Bj cEIOncnmitPwSbsLjXaLZQJnU1ATgA==
X-Received: by 10.107.33.135 with SMTP id h129mr15436226ioh.57.1492767306922;  Fri, 21 Apr 2017 02:35:06 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Fri, 21 Apr 2017 02:35:06 -0700 (PDT)
In-Reply-To: <20170421090145.f5yuhimb4qg7knrf@Vurt.local>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 21 Apr 2017 11:35:06 +0200
X-Google-Sender-Auth: RccxSqOdo9Fng0_nmhu1aDt4N9Q
Message-ID: <CA+b+ERkw39d3E3wsceVWQAb05peEmt=qgBkYdN5j8T_5XzSZ7Q@mail.gmail.com>
To: Job Snijders <job@instituut.net>
Cc: "bruno.decraene@orange.com" <bruno.decraene@orange.com>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a1140f5e80fc512054da9f9dc
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/-N_h7KG5cNVcJbon4eDIwkzkvXI>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 09:35:10 -0000

--001a1140f5e80fc512054da9f9dc
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

=E2=80=8BHi Job,=E2=80=8B



> Did you review Alvaro's suggested changes which prompted the third IDR
> consultation on this topic? They are viewable here:
>
>     http://htmlpreview.github.io/?https://github.com/jaredmauch/
> draft-mauch-bgp-reject/blob/alvaro/draft-ietf-grow-bgp-
> reject-06-from-5.diff.html
>
>
Do we really have consensus among all authors of this document (leave alone
rest of IETF) that it should apply to all AFI/SAFIs ?

I personnally would recommend to apply it to only 1/1 and 2/1.

And actually even take those SAFIs your claim that it helps case of
sessions being dropped is very implementation specific ... some
implementation when receiving routes to VRF from CE may first check the
maximum-prefix number as expressed in "neighbor 10.1.1.1 maximum-prefix 30"
then check per VRF then apply say BGP prefix-list.

Does this RFC also enforces that BGP route-map or policy should be the
first consideration in BGP inbound processing ?


explicit configuration of a BGP import and export policy for any
External BGP (EBGP) session such as customers, peers, or
confederation boundaries
*=E2=80=8B=E2=80=8Bfor all enabled address families*. When this

- - -


Last ... what's your take on multiple comments regarding build in silency
of this ?

See session will be established just fine ... even incoming prefix count
will be incremented just fine.

Last time I checked until you display bgp table there is no separate
counter in any implementation to indicate in BGP summary how many out of
received paths were best path eligible.

Thx,
r.

--001a1140f5e80fc512054da9f9dc
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><div=
><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-ser=
if;font-size:small">=E2=80=8BHi Job,=E2=80=8B</div><br></div><div>=C2=A0</d=
iv><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bord=
er-left:1px solid rgb(204,204,204);padding-left:1ex">Did you review Alvaro&=
#39;s suggested changes which prompted the third IDR<br>
consultation on this topic? They are viewable here:<br>
<br>
=C2=A0 =C2=A0 <a href=3D"http://htmlpreview.github.io/?https://github.com/j=
aredmauch/draft-mauch-bgp-reject/blob/alvaro/draft-ietf-grow-bgp-reject-06-=
from-5.diff.html" rel=3D"noreferrer" target=3D"_blank">http://htmlpreview.g=
ithub.io/?<wbr>https://github.com/jaredmauch/<wbr>draft-mauch-bgp-reject/bl=
ob/<wbr>alvaro/draft-ietf-grow-bgp-<wbr>reject-06-from-5.diff.html</a><br>
<br></blockquote><div><br></div><div><div class=3D"gmail_default" style=3D"=
font-family:arial,helvetica,sans-serif;font-size:small">Do we really have c=
onsensus among all authors of this document (leave alone rest of IETF) that=
 it should apply to all AFI/SAFIs ?=C2=A0<br></div><div class=3D"gmail_defa=
ult" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br><=
/div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans=
-serif;font-size:small">I personnally would recommend to apply it to only 1=
/1 and 2/1.=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:ar=
ial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_def=
ault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">And =
actually even take those SAFIs your claim that it helps case of sessions be=
ing dropped is very implementation specific ... some implementation when re=
ceiving routes to VRF from CE may first check the maximum-prefix number as =
expressed in &quot;neighbor 10.1.1.1 maximum-prefix 30&quot; then check per=
 VRF then apply say BGP prefix-list.=C2=A0</div><div class=3D"gmail_default=
" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></di=
v></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,s=
ans-serif;font-size:small">Does this RFC also enforces that BGP route-map o=
r policy should be the first consideration in BGP inbound processing ?=C2=
=A0<br></div><div class=3D"gmail_default" style=3D"font-family:arial,helvet=
ica,sans-serif;font-size:small"><br></div><div><div class=3D"gmail_default"=
 style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div=
><table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" style=3D"color:rgb=
(0,0,0);font-family:&quot;times new roman&quot;;font-size:medium"><tbody><t=
r><td class=3D"gmail-lineno" valign=3D"top" style=3D"white-space:pre;font-f=
amily:monospace;vertical-align:top;font-size:0.7em;color:red;text-align:rig=
ht;padding:0px 2px"></td><td class=3D"gmail-left" style=3D"white-space:pre;=
font-family:monospace;vertical-align:top;font-size:0.86em;background-color:=
rgb(238,238,238)">   explicit configuration of a BGP import and export poli=
cy for any</td><td style=3D"white-space:pre;font-family:monospace;vertical-=
align:top;font-size:0.86em"> </td><td class=3D"gmail-right" style=3D"white-=
space:pre;font-family:monospace;vertical-align:top;font-size:0.86em"> </td>=
<td class=3D"gmail-lineno" valign=3D"top" style=3D"white-space:pre;font-fam=
ily:monospace;vertical-align:top;font-size:0.7em;color:red;text-align:right=
;padding:0px 2px"></td></tr><tr><td class=3D"gmail-lineno" valign=3D"top" s=
tyle=3D"white-space:pre;font-family:monospace;vertical-align:top;font-size:=
0.7em;color:red;text-align:right;padding:0px 2px"></td><td class=3D"gmail-l=
eft" style=3D"white-space:pre;font-family:monospace;vertical-align:top;font=
-size:0.86em;background-color:rgb(238,238,238)">   External BGP (EBGP) sess=
ion such as customers, peers, or</td><td style=3D"white-space:pre;font-fami=
ly:monospace;vertical-align:top;font-size:0.86em"> </td><td class=3D"gmail-=
right" style=3D"white-space:pre;font-family:monospace;vertical-align:top;fo=
nt-size:0.86em">  </td><td class=3D"gmail-lineno" valign=3D"top" style=3D"w=
hite-space:pre;font-family:monospace;vertical-align:top;font-size:0.7em;col=
or:red;text-align:right;padding:0px 2px"></td></tr><tr><td class=3D"gmail-l=
ineno" valign=3D"top" style=3D"white-space:pre;font-family:monospace;vertic=
al-align:top;font-size:0.7em;color:red;text-align:right;padding:0px 2px"></=
td><td class=3D"gmail-left" style=3D"white-space:pre;font-family:monospace;=
vertical-align:top;font-size:0.86em;background-color:rgb(238,238,238)">   c=
onfederation boundaries <b><div class=3D"gmail_default" style=3D"font-famil=
y:arial,helvetica,sans-serif;font-size:small;display:inline">=E2=80=8B=E2=
=80=8B</div>for all enabled address families</b>.  When this</td><td style=
=3D"white-space:pre;font-family:monospace;vertical-align:top;font-size:0.86=
em"> </td><td class=3D"gmail-right" style=3D"white-space:pre;font-family:mo=
nospace;vertical-align:top;font-size:0.86em">=20

</td></tr></tbody></table><div class=3D"gmail_default" style=3D"font-family=
:arial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_=
default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">-=
 - -=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:arial,hel=
vetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" s=
tyle=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><=
div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif=
;font-size:small">Last ... what&#39;s your take on multiple comments regard=
ing build in silency of this ?=C2=A0<br></div><div class=3D"gmail_default" =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div>=
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">See session will be established just fine ... even incom=
ing prefix count will be incremented just fine.=C2=A0</div><div class=3D"gm=
ail_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:smal=
l"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,helvet=
ica,sans-serif;font-size:small">Last time I checked until you display bgp t=
able there is no separate counter in any implementation to indicate in BGP =
summary how many out of received paths were best path eligible.</div><div c=
lass=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font=
-size:small"><br></div><div class=3D"gmail_default" style=3D"font-family:ar=
ial,helvetica,sans-serif;font-size:small">Thx,</div><div class=3D"gmail_def=
ault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">r.</=
div></div></div></div></div>

--001a1140f5e80fc512054da9f9dc--


From nobody Fri Apr 21 02:58:48 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 84A05129B18 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:58:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id brgbCMK8A1r0 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 02:58:42 -0700 (PDT)
Received: from mail-wm0-x22d.google.com (mail-wm0-x22d.google.com [IPv6:2a00:1450:400c:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C867129480 for <idr@ietf.org>; Fri, 21 Apr 2017 02:58:42 -0700 (PDT)
Received: by mail-wm0-x22d.google.com with SMTP id m123so12924113wma.0 for <idr@ietf.org>; Fri, 21 Apr 2017 02:58:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=xbd7rpvvrNOeR3Efs64DD9aZtJoUNFbkz/odJeJAvAA=; b=EItVHeTYNvkkDW1aQuWodm5r5aUqtYhKlK6ceijgtsoCvlVo6PL0s2fREjJPHX8IrU Ad2sdiWippMeAj7ksMSGpzBERjlfpCYgqqau+u6EV1C2s9TDYGchmGl3i9J2HHvxtp8m t8aEYam32dd0HTTcv/3TSdm/scTkXIQ70oh2SeffgnAQCsHij4CMr3bIU1O1o/mu0Z7I vChrG1Liegxzrhpt06NNrCBMcnNrk5swashwdsULdXkZ7Tnmy5+5ucy9HJN2CE6/zsL/ SKiIqAk9o+qQIMIFVosKzxWxVg3hYMZpfGk8b4dtZTCBJZEauIf8ssAjq9BOaRwWjYI3 iVOg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=xbd7rpvvrNOeR3Efs64DD9aZtJoUNFbkz/odJeJAvAA=; b=UMMp4B30XJiK/jOb+AWImjaxUbQm9cJhLa3XnOUqH5p8544FG8IzHikZtZEdZ0uQBI 9vjA8CEnLMn1AjpC36F5mZmWId+hla6vBlLEwlEms3s5txC3OC+Q6ZY8MO3De2cAq8MZ K8VRquqXnTCgN9jp7TyM6kVyXu6x7k9iZT1n6mF20KpBswn4xogfp0wh3TQDWFW28QzD uyiMJijLyor3qU34vohwRU76sDMCbiaFqMS7I0kYPJiA+KQz0kJSnwrR3ScDZAuQBV3H NIi/TqDmFDlJvJrV8P2L5K8Mi9exBgETlkUN6lbUhzCfQRMAMMAaGo7YniGaoYkZF55+ kZ0g==
X-Gm-Message-State: AN3rC/7gER1xUd5Z5mF+kXOZsN8T0p51Yjook981vMh2eaQSc+YljCRQ QEbNlc9NNw8uP8IasW2bmQ==
X-Received: by 10.80.165.107 with SMTP id z40mr50192edb.60.1492768721129; Fri, 21 Apr 2017 02:58:41 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:154d:67d1:53a6:3be]) by smtp.gmail.com with ESMTPSA id o19sm294946edo.16.2017.04.21.02.58.39 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Apr 2017 02:58:40 -0700 (PDT)
Date: Fri, 21 Apr 2017 11:58:39 +0200
From: Job Snijders <job@instituut.net>
To: bruno.decraene@orange.com
Cc: John Scudder <jgs@juniper.net>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Message-ID: <20170421095839.sralcy7aos5mzzic@Vurt.local>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/TaWuXsPTrNlq_IJ6YZid1Vhd97I>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 09:58:47 -0000

On Fri, Apr 21, 2017 at 09:18:24AM +0000, bruno.decraene@orange.com wrote:
>  > 
>  > So, going forward, any IDR proposal that requires a change to any
>  > provision system is a no-go?
>  
> It's not about a no-go. It's about understanding and considering the
> tradeoffs.

Bruno, through this thread I have learned:

    - Release notes are not read, and it is unreasonable to expect
      people to read them.
    - Software will not be tested prior to deployment, not even to see
      whether it boots.
    - We cannot expected staggered software deployments, people will
      upgrade all their BGP speakers at the same time (again, without
      testing the software).
    - Any change to a provisioning system is an insurmountable
      imposition.

I'm sure you appreciate how these new insights will affect all future
IDR work. I assure you that if such weak rethoric continues to be
admitted as valid justifications for lethargy, this will affect IDR's
productivty the coming years.

If you want to play the game of 'tradeoffs have to be made', I have not
seen any appreciation in this thread for the cost on the Internet as a
whole resulting from insecure defaults. Robert Raszuk even went as far
to argue that we'd be doing the "little guys" (surely that was not meant
in a belligerent way) a favor by allowing insecure defaults to persist. 

I theorize that for instance this outage was the result of a 'fail open'
rather then 'fail closed' (as proposed in bgp-reject) implmentation
choice. See https://www.theregister.co.uk/2015/06/12/level_3_down_after_routing_through_malaysia_like_idiots/
or https://bgpmon.net/massive-route-leak-cause-internet-slowdown/

Outages like these affect everyone, whether they were a directly
involved party or indirectly involved. Did you notice this event in your
own network? Or perhaps you did notice it because payment terminals in
some countries stopped working?

The BGP Default-Free Zone is composed of roughly 55,000 autonomous
systems operated by as many organisations, who are densily
interconnected with each other through milions of EBGP sessions. When DC
equipment is connected to Internet, or when a CLI-style makes accidents
easy, or when a lack of education results in a common misconfiguration,
there should be checks and balances in place to dampen the negative
effects on the Internet as a whole. The Internet Engineering Task Force
(notice the 'Internet' in IETF) has a responsiblity to promote and
define safe and secure default behaviours.

Kind regards,

Job


From nobody Fri Apr 21 03:11:24 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0D0E129B09 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 03:11:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E0vKOqxKBSlS for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 03:11:21 -0700 (PDT)
Received: from mail-wr0-x233.google.com (mail-wr0-x233.google.com [IPv6:2a00:1450:400c:c0c::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 313A412953D for <idr@ietf.org>; Fri, 21 Apr 2017 03:11:21 -0700 (PDT)
Received: by mail-wr0-x233.google.com with SMTP id z52so10282020wrc.2 for <idr@ietf.org>; Fri, 21 Apr 2017 03:11:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=SC/idD+r/x5E8Pepcbud0O0rwLktwYpDLeO7uTMAp0Y=; b=dqNFtpZrpJGUnMtErOgE2Ofx/tcHhmkrmWYnqafb58aruJHE3eyH5La+38482vTWBl /tCwjHJEgt1jeiSM5nTrWlKGzrkRChsbTtteIHkNUk/6mKZbwrTZZOZPedpOS74y8KFz ITHLyacG4KuE9irFtmz9FkT4HJaE+9e651uxa2cfHr5POvQZrfeVXbaCN4X0clXU6Rft kKnIkuyTL7D6WYB7iaLnumRP8Hu35b4QnWRWfJjuJo1x4PGBfYxvXTch0fl4/Q16QQmO JtW4EsYgd3afTgB7wtyyvWFLQaLFtHn+PD/NIGUXIkrLNbBJ+fk/mMK36gd3ZewJQWiO IXhQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=SC/idD+r/x5E8Pepcbud0O0rwLktwYpDLeO7uTMAp0Y=; b=CMTFCt3UhzSur5ctuLuSmWoqKO1Vcc1bKYLFFr6+WA+xb4/fO/mDVQzj6sDEwRDEwT IuuOTO689uQXeUi//m1ax8iXgR9xTHvPLrAAw2pUoEnvMWwxJQbTBiDenX+dL24HVzVk TFdxzJVngXtnWdXEgj2F4ejvAC1GK/zvmIxarGkghlNQFduL25NRvF5wp+P+1rtH32Vx 28jLNA4mkQHmow1msBi/y4VPuQGCffxzg2iPaOybTxcJY7ZMKDI2fchIOtNQZoeYr1Od rS9CkF3/nCnAt6xLH1hgEQD+BkX0BTCj6WtQRjY0UUzFRTlqgfw3Us6WjECWGnMQJHxL kT2g==
X-Gm-Message-State: AN3rC/4ZFGCH9FYNHatK2igv8OwvLIXpRqrEWVKBruxYZMFSCj2MgOl2 bZyQeUPKgqqaOeSF6QA=
X-Received: by 10.223.176.37 with SMTP id f34mr6413136wra.93.1492769479518; Fri, 21 Apr 2017 03:11:19 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:154d:67d1:53a6:3be]) by smtp.gmail.com with ESMTPSA id b15sm304135ede.8.2017.04.21.03.11.16 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Apr 2017 03:11:16 -0700 (PDT)
Date: Fri, 21 Apr 2017 12:11:16 +0200
From: Job Snijders <job@instituut.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: "bruno.decraene@orange.com" <bruno.decraene@orange.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170421101116.vutc5vn3idt4s46y@Vurt.local>
References: <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <CA+b+ERkw39d3E3wsceVWQAb05peEmt=qgBkYdN5j8T_5XzSZ7Q@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CA+b+ERkw39d3E3wsceVWQAb05peEmt=qgBkYdN5j8T_5XzSZ7Q@mail.gmail.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/qgGpfeR7wmGCV69PFYk0p_vMVz8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 10:11:24 -0000

On Fri, Apr 21, 2017 at 11:35:06AM +0200, Robert Raszuk wrote:
> > Did you review Alvaro's suggested changes which prompted the third IDR
> > consultation on this topic? They are viewable here:
> >
> >     http://htmlpreview.github.io/?https://github.com/jaredmauch/
> > draft-mauch-bgp-reject/blob/alvaro/draft-ietf-grow-bgp-
> > reject-06-from-5.diff.html
>
> Do we really have consensus among all authors of this document (leave
> alone rest of IETF) that it should apply to all AFI/SAFIs ?

Feel free to double check with the GROW chairs or the assigned OPS Area
Director.

> Last ... what's your take on multiple comments regarding build in
> silency of this ?
> 
> See session will be established just fine ... even incoming prefix
> count will be incremented just fine.

The perceived 'silency' is a misnomer. Vendors are free implement
feedback mechanisms (such as a syslog or terminal warning: "you did not
configure a policy"), and some already provide feedback like this.
Nothing in this draft precludes vendors from ensuring the operation of
their BGP implementations a pleasant experience.

No feedback is required for the other side of the EBGP session, after
all the ownership of the change event lays with the side that upgrades
their software (same applies when the 'changing side' removes a policy,
or applies a deny-all policy, or any other standard operating
procedure).

You also fail to acknowledge that today's deployed BGP speaking software
presents a myriad of behaviours: some already follow bgp-reject, some
apply the concept in one direction and some operate in an promiscuous
insecure mode. This draft provides guidance to unify those behaviours
and provide a safe, consistent experience across multiple
implementations. 

> Last time I checked until you display bgp table there is no separate
> counter in any implementation to indicate in BGP summary how many out
> of received paths were best path eligible.

I encourage you to continue your studies on how today's routers work and
what counters are available.

Kind regards,

Job


From nobody Fri Apr 21 04:58:25 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09E83127369 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 04:58:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.608
X-Spam-Level: 
X-Spam-Status: No, score=-2.608 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, T_SPF_PERMERROR=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ph6gym1V5RPQ for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 04:58:21 -0700 (PDT)
Received: from relais-inet.orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E22D124B0A for <idr@ietf.org>; Fri, 21 Apr 2017 04:58:21 -0700 (PDT)
Received: from opfedar03.francetelecom.fr (unknown [xx.xx.xx.5]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id DD2BE10056D; Fri, 21 Apr 2017 13:58:19 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.18]) by opfedar03.francetelecom.fr (ESMTP service) with ESMTP id BC142180070; Fri, 21 Apr 2017 13:58:19 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM34.corporate.adroot.infra.ftgroup ([fe80::cba:56d0:a732:ef5a%19]) with mapi id 14.03.0319.002; Fri, 21 Apr 2017 13:58:19 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@instituut.net>
CC: Eric C Rosen <erosen@juniper.net>, Tony Przygienda <tonysietf@gmail.com>,  Brian Dickson <brian.peter.dickson@gmail.com>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSun3mFx6qnNOc8UaJCUOYEKex/KHPi88g
Date: Fri, 21 Apr 2017 11:58:18 +0000
Message-ID: <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local>
In-Reply-To: <20170421090145.f5yuhimb4qg7knrf@Vurt.local>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.1]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/LTQn39o-ApRa7C-IBBwc8Zamr0I>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 11:58:24 -0000

Hi Job,

> From: Job Snijders [mailto:job@instituut.net]  > Sent: Friday, April 21, =
2017 11:02 AM
>=20
 > Hi Bruno,
 >=20
 > You create a false dilemma stating that it is not clear to you whether
 > this is a "requirement draft or a solution draft",=20

That editorial point should be easy to address.

> and that those need to be separate.

I've not said that.

=20
 > Did you review Alvaro's suggested changes which prompted the third IDR
 > consultation on this topic? They are viewable here:
 >=20
 >     http://htmlpreview.github.io/?https://github.com/jaredmauch/draft-ma=
uch-bgp-
 > reject/blob/alvaro/draft-ietf-grow-bgp-reject-06-from-5.diff.html

I was discussing the current version of the draft and comments sent on the =
mailing list (e.g less than 24 hours ago, one author commented that it does=
 not believe that this document should be changed to update RFC 4271: " I b=
elieve that Alvaro is wrong in the presumption
this document updates 4271. ".
I was not aware of this private repository. Indeed, this candidate version =
is significantly different than the public one.
=20
 > I'm disappointed that you've taken a CLI example I've provided as the
 > sole driver behind this effort. I did not mean to offer the CLI example
 > as an exhaustive list of reasons.

That this incorrect: I've commented on this driver, plus the ones indicated=
 in the draft. What's missing has been authors' answer for those requests f=
or clarification.
For the third time, could authors please document in the draft the drivers =
and the goal(s) that this document aims at achieving. Then we'll be able to=
 take into account all drivers, plus authors will get IDR attention to thei=
r operational feedback. Should be win-win.

-- Bruno

=20=20
 > Kind regards,
 >=20
 > Job
 >=20
 > ps. For additional advise on how to derail this effort, let us please
 > take the ideas offered in
 > http://www.businessinsider.com/oss-manual-sabotage-productivity-2015-
 > 11?international=3Dtrue&r=3DUS&IR=3DT
 > also in consideration.
 >=20
 > On Fri, Apr 21, 2017 at 08:20:47AM +0000, bruno.decraene@orange.com wrot=
e:
 > > > From: Eric C Rosen  > Sent: Thursday, April 20, 2017 10:01 PM
 > > >
 > >  > On 4/20/2017 2:24 PM, Tony Przygienda wrote:
 > >  > > Can't miss that food fight ;-)
 > >  >
 > >  > It did seem to degenerate rapidly into "if you don't agree with my
 > >  > proposal, you don't care about security".  ;-(
 > >  >
 > >  > I agree with Enke that surprising your customers with a change in
 > >  > behavior due to altered defaults is generally considered to be a bi=
g no-no.
 > >  >
 > >  > When the customers complain about a change in behavior, it is not
 > >  > considered appropriate to respond with "it's not my fault, you shou=
ld
 > >  > have read the release notes", or "it's not my fault that you don't =
know
 > >  > how to troubleshoot BGP", or "it's not my fault that you didn't do =
your
 > >  > due diligence".
 > >  >
 > >  > Phasing in a change of behavior over several releases is not a prac=
tical
 > >  > solution, because:
 > >  >
 > >  > a) Customers will still be surprised when the default behavior fina=
lly
 > >  > changes, and
 > >  > b) Many customers won't deploy all the releases anyway.
 > >  >
 > >  > >
 > >  > > Having said that, I think this is BCP material at best and if thi=
s is
 > >  > > a BCP then
 > >  > >
 > >  > > i) a "backward compatibility a.k.a which end of the stick is shar=
p"
 > >  > > section is very advisable
 > >  >
 > >  > I would agree that something more than "figure out how to configure=
 the
 > >  > new release to behave like the old release" would be helpful.
 > >  >
 > >  > > ii) the BCP should describe which customer segment is best served=
 with
 > >  > > which default
 > >  > >
 > >  >
 > >  > But then operators from different segments would have to get togeth=
er to
 > >  > understand each others' requirements, and they'd have to respect ea=
ch
 > >  > others' opinions as well.   I can't wait to see what happens when t=
he
 > >  > "trust nobody" folks get together with the "zeroconfig plug and pla=
y"
 > >  > folks ;-)
 > >  >
 > >  > The dilemma is that there is a real security problem in certain
 > >  > environments, but the proposed solution seems to have unintended
 > >  > side-effects that are problematic.  Then the question becomes wheth=
er
 > >  > the benefits are worth the cost, and this is not really a question =
that
 > >  > can be resolved by IETF consensus.
 > >
 > > Good summary, thanks.
 > >
 > > 1) As already asked, could the draft states what the problem it aims a=
t solving?
 > > In particular,
 > > - it does not solve the general route leak problem, nor the 3 problems=
 indicated in the
 > first section of the introduction.
 > > - on the list, one author expressed a different, more focused/pragmati=
c, goal
 > > " The problem is that there are some platforms which _immediately_
 > > activate a line of configuration after you press enter, and a BGP
 > > session may already come up before you get to the configuration line
 > > which restricts what should be announced or accepted."
 > >
 > > 2) Can the draft document the side-effects, e.g. in a manageability se=
ction.
 > >
 > >
 > > Without those 2 points, IMHO the draft is misleading for the reader/re=
viewer/voter/user.
 > This trade-off analysis is currently absent in the document up to the po=
int that those
 > drawbacks have not been raised during RTG-DIR and RTG-OPS review. So it'=
s probably fair to
 > assume that this may also have missed by some other IETF contributors.
 > >
 > > 3) Once the problem that we want to solve has been clarified (cf 1) , =
then we can start
 > reviewing the solution.
 > > In particular, if the problem is indeed:
 > > " The problem is that there are some platforms which _immediately_
 > > activate a line of configuration after you press enter, and a BGP
 > > session may already come up before you get to the configuration line
 > > which restricts what should be announced or accepted."
 > >
 > > Then, there might be other solutions. e.g.
 > > - fixing this CLI issue on those plateforms. In particular, no need to=
 also impact the netconf
 > provisioning which has not this issue, or the implementations which do n=
ot have such CLI
 > issue.
 > > - use a 2 step provisioning on both EBGP peers:
 > >    - on the sending side, use a trick for avoid the session to come up=
 until the BGP
 > configuration is complete enough . e.g. interface shut, use the wrong au=
thentication
 > key/TTL hack
 > >    - on the receiving side, use a trick to avoid the session to succes=
sfully come up or to
 > accept the routes. Then after allowing for a reasonable time to let the =
sender finish its
 > config, restore the correct configuration. Obviously this can be automat=
ed by a "controller",
 > a local feature, a local event script.
 > > This 2 step provisioning has the benefit of limiting the cost of the s=
olution to the space
 > where the problem is. (vs asking everyone to bear the cost, for a benefi=
t of a few, whatever
 > important is this use case)
 > > - I sure others may find more creative solutions.
 > >
 > > 4) Regarding the specific solution proposed in the draft,
 > > -  why has it been prefer to silently drop the route, with will surpri=
se people and definitely
 > the EBGP peer, rather than bringing done the BGP session with a reasonab=
le error
 > (sub)code / text to help diagnose the problem.
 > >
 > > - the 3rd bullet is debatable to me
 > > "   o  A BGP speaker SHOULD fall back to an "import nothing" and "expo=
rt nothing" mode
 > following failure of internal components, such as a policy engine."
 > > This is an error handling situation. IMHO https://tools.ietf.org/html/=
draft-ietf-grow-ops-
 > reqs-for-bgp-error-handling-07 had a better analysis on this point. e.g.=
 at the minimum,
 > rather than calling for silently dropping the route, I would call for cl=
osing the BGP session,
 > possibly trying to restart it. Plus if this BGP internal failure also im=
pact IBGP session, we have
 > a bigger problem.
 > >
 > > - it's not clear whether this draft is a requirement draft or a soluti=
on draft. As per the first
 > sentence of section 2 and its further text, it looks like a requirement =
draft. But in this case,
 > the requirements should be solution agnostic. Which is definitely not th=
e case. (e.g. above
 > comments are solutions specific)
 > >
 > > Thanks,
 > > Regards,
 > > -- Bruno

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Fri Apr 21 05:34:03 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC92E1293F3 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 05:34:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D3_N_cPiu9BK for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 05:34:00 -0700 (PDT)
Received: from mail-io0-x235.google.com (mail-io0-x235.google.com [IPv6:2607:f8b0:4001:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1751126DCA for <idr@ietf.org>; Fri, 21 Apr 2017 05:33:59 -0700 (PDT)
Received: by mail-io0-x235.google.com with SMTP id a103so118586979ioj.1 for <idr@ietf.org>; Fri, 21 Apr 2017 05:33:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=QJNDaZKqbTdtN9obkdjkcFzLW+jl8tp/m7e6JZuQ2Ig=; b=ZpPYdDr70e0YRy9uA8km9j8EMLTt7e+NSRWbH14La8pUK2FQJqmh00YpaHFPSE9QMm QpLHaARvaouPORDEOojsEgCvnwoXaQYz6Epc6Jlmyhj9JBAoraqMIqtSgn3i2KEqFviB iLeoKXSsMljLMuxrCaErZ5kjcFUqvE2AZ/SWVfstGC4GiZrz6jn2x2gmi0G30OjFfosM 43TUq1IzH88peu7kEZXzaLgMoubquU98ckRNHJt1EiW6jelohBo9tY8w1Uz8H5buINBn r/9TnPWEneGUvLkhNKg8EDAyO1TMkUYI7oytlU58BilzLrTeNvAz3FCrYbpWTbDpjIN+ pszQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=QJNDaZKqbTdtN9obkdjkcFzLW+jl8tp/m7e6JZuQ2Ig=; b=HS6fsNu+CH7olGEjvJSfJy0SH6FOgjWm0F5qU6PvdjtCEb2qgggXThWdGoX7/rWJFL n5PEM3XVVtbtNZ/Wr8RUZCoiKfV3U/OwiF1tdH7xvNM1m1fk9IxZ1c/kLpFRC5f4eQDW I0tppcr9VIP8yJ0hMLLL1ATClGMl86GLZIdef6jR0Y+mf21odAPKWBEUrMVVgLFXDa1r kxfn08x11AjiW5KgRduLCThWXvmyMwkCzzY7FiGtISJVZCXFGD1wB0F5tu+krE+PQ8D3 iwTbmYOqUSb0GgoBd7ekK6mk4NdogIYHQYUsqcM45eGSK71SjOG3ZBswznW87HTYBLO8 R0lg==
X-Gm-Message-State: AN3rC/74ff+BBirbJpbbW5YO1DEbw9NdmJ8CS6By8tl308WZPZqKyqbN AGkLM5qRKU1i6qqmig0h2HHbnWphDQ==
X-Received: by 10.36.80.194 with SMTP id m185mr4576208itb.24.1492778003584; Fri, 21 Apr 2017 05:33:23 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Fri, 21 Apr 2017 05:33:22 -0700 (PDT)
Received: by 10.79.170.4 with HTTP; Fri, 21 Apr 2017 05:33:22 -0700 (PDT)
In-Reply-To: <20170421095839.sralcy7aos5mzzic@Vurt.local>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 21 Apr 2017 14:33:22 +0200
X-Google-Sender-Auth: XZzYBD-foxreJCmOPihiK0ZuvaQ
Message-ID: <CA+b+ERmxaa99tpUSfbp7Nk4-x6SXtX-W0-pbt-ZY=Vym_NFGPg@mail.gmail.com>
To: Job Snijders <job@instituut.net>
Cc: bruno.decraene@orange.com, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Type: multipart/alternative; boundary=001a11449730a1dda3054dac761a
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/lGqQimETNGzN6ZfcjIm8aEPuvt0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 12:34:02 -0000

--001a11449730a1dda3054dac761a
Content-Type: text/plain; charset=UTF-8

Job,

Let's face it ... your proposal in spite of all claims you are making does
nothing to prevent outages or route leaks.

Your examples of "accept all" or "send all" are clear prove of it.

Forcing any policy != forcing correct policy.

If someone cares about Internet stability he will implement correct policy
today without being forced by a vendor. If someone care less he will send
all and accept all just line it is today.

So let's not try to sell/sneak someting here under completely wrong label.
All this draft is about it is forcefull education for those customers who
do not know that bgp policy exist.

Kind regards,
R.

On Apr 21, 2017 11:58, "Job Snijders" <job@instituut.net> wrote:

> On Fri, Apr 21, 2017 at 09:18:24AM +0000, bruno.decraene@orange.com wrote:
> >  >
> >  > So, going forward, any IDR proposal that requires a change to any
> >  > provision system is a no-go?
> >
> > It's not about a no-go. It's about understanding and considering the
> > tradeoffs.
>
> Bruno, through this thread I have learned:
>
>     - Release notes are not read, and it is unreasonable to expect
>       people to read them.
>     - Software will not be tested prior to deployment, not even to see
>       whether it boots.
>     - We cannot expected staggered software deployments, people will
>       upgrade all their BGP speakers at the same time (again, without
>       testing the software).
>     - Any change to a provisioning system is an insurmountable
>       imposition.
>
> I'm sure you appreciate how these new insights will affect all future
> IDR work. I assure you that if such weak rethoric continues to be
> admitted as valid justifications for lethargy, this will affect IDR's
> productivty the coming years.
>
> If you want to play the game of 'tradeoffs have to be made', I have not
> seen any appreciation in this thread for the cost on the Internet as a
> whole resulting from insecure defaults. Robert Raszuk even went as far
> to argue that we'd be doing the "little guys" (surely that was not meant
> in a belligerent way) a favor by allowing insecure defaults to persist.
>
> I theorize that for instance this outage was the result of a 'fail open'
> rather then 'fail closed' (as proposed in bgp-reject) implmentation
> choice. See https://www.theregister.co.uk/2015/06/12/level_3_down_after_
> routing_through_malaysia_like_idiots/
> or https://bgpmon.net/massive-route-leak-cause-internet-slowdown/
>
> Outages like these affect everyone, whether they were a directly
> involved party or indirectly involved. Did you notice this event in your
> own network? Or perhaps you did notice it because payment terminals in
> some countries stopped working?
>
> The BGP Default-Free Zone is composed of roughly 55,000 autonomous
> systems operated by as many organisations, who are densily
> interconnected with each other through milions of EBGP sessions. When DC
> equipment is connected to Internet, or when a CLI-style makes accidents
> easy, or when a lack of education results in a common misconfiguration,
> there should be checks and balances in place to dampen the negative
> effects on the Internet as a whole. The Internet Engineering Task Force
> (notice the 'Internet' in IETF) has a responsiblity to promote and
> define safe and secure default behaviours.
>
> Kind regards,
>
> Job
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a11449730a1dda3054dac761a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Job,<div dir=3D"auto"><br></div><div dir=3D"auto">Let&#39=
;s face it ... your proposal in spite of all claims you are making does not=
hing to prevent outages or route leaks.</div><div dir=3D"auto"><br></div><d=
iv dir=3D"auto">Your examples of &quot;accept all&quot; or &quot;send all&q=
uot; are clear prove of it.</div><div dir=3D"auto"><br></div><div dir=3D"au=
to">Forcing any policy !=3D forcing correct policy.</div><div dir=3D"auto">=
<br></div><div dir=3D"auto">If someone cares about Internet stability he wi=
ll implement correct policy today without being forced by a vendor. If some=
one care less he will send all and accept all just line it is today.</div><=
div dir=3D"auto"><br></div><div dir=3D"auto">So let&#39;s not try to sell/s=
neak someting here under completely wrong label. All this draft is about it=
 is forcefull education for those customers who do not know that bgp policy=
 exist.</div><div dir=3D"auto"><br></div><div dir=3D"auto">Kind regards,</d=
iv><div dir=3D"auto">R.</div></div><div class=3D"gmail_extra"><br><div clas=
s=3D"gmail_quote">On Apr 21, 2017 11:58, &quot;Job Snijders&quot; &lt;<a hr=
ef=3D"mailto:job@instituut.net">job@instituut.net</a>&gt; wrote:<br type=3D=
"attribution"><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;=
border-left:1px #ccc solid;padding-left:1ex">On Fri, Apr 21, 2017 at 09:18:=
24AM +0000, <a href=3D"mailto:bruno.decraene@orange.com">bruno.decraene@ora=
nge.com</a> wrote:<br>
&gt;=C2=A0 &gt;<br>
&gt;=C2=A0 &gt; So, going forward, any IDR proposal that requires a change =
to any<br>
&gt;=C2=A0 &gt; provision system is a no-go?<br>
&gt;<br>
&gt; It&#39;s not about a no-go. It&#39;s about understanding and consideri=
ng the<br>
&gt; tradeoffs.<br>
<br>
Bruno, through this thread I have learned:<br>
<br>
=C2=A0 =C2=A0 - Release notes are not read, and it is unreasonable to expec=
t<br>
=C2=A0 =C2=A0 =C2=A0 people to read them.<br>
=C2=A0 =C2=A0 - Software will not be tested prior to deployment, not even t=
o see<br>
=C2=A0 =C2=A0 =C2=A0 whether it boots.<br>
=C2=A0 =C2=A0 - We cannot expected staggered software deployments, people w=
ill<br>
=C2=A0 =C2=A0 =C2=A0 upgrade all their BGP speakers at the same time (again=
, without<br>
=C2=A0 =C2=A0 =C2=A0 testing the software).<br>
=C2=A0 =C2=A0 - Any change to a provisioning system is an insurmountable<br=
>
=C2=A0 =C2=A0 =C2=A0 imposition.<br>
<br>
I&#39;m sure you appreciate how these new insights will affect all future<b=
r>
IDR work. I assure you that if such weak rethoric continues to be<br>
admitted as valid justifications for lethargy, this will affect IDR&#39;s<b=
r>
productivty the coming years.<br>
<br>
If you want to play the game of &#39;tradeoffs have to be made&#39;, I have=
 not<br>
seen any appreciation in this thread for the cost on the Internet as a<br>
whole resulting from insecure defaults. Robert Raszuk even went as far<br>
to argue that we&#39;d be doing the &quot;little guys&quot; (surely that wa=
s not meant<br>
in a belligerent way) a favor by allowing insecure defaults to persist.<br>
<br>
I theorize that for instance this outage was the result of a &#39;fail open=
&#39;<br>
rather then &#39;fail closed&#39; (as proposed in bgp-reject) implmentation=
<br>
choice. See <a href=3D"https://www.theregister.co.uk/2015/06/12/level_3_dow=
n_after_routing_through_malaysia_like_idiots/" rel=3D"noreferrer" target=3D=
"_blank">https://www.theregister.co.uk/<wbr>2015/06/12/level_3_down_after_<=
wbr>routing_through_malaysia_like_<wbr>idiots/</a><br>
or <a href=3D"https://bgpmon.net/massive-route-leak-cause-internet-slowdown=
/" rel=3D"noreferrer" target=3D"_blank">https://bgpmon.net/massive-<wbr>rou=
te-leak-cause-internet-<wbr>slowdown/</a><br>
<br>
Outages like these affect everyone, whether they were a directly<br>
involved party or indirectly involved. Did you notice this event in your<br=
>
own network? Or perhaps you did notice it because payment terminals in<br>
some countries stopped working?<br>
<br>
The BGP Default-Free Zone is composed of roughly 55,000 autonomous<br>
systems operated by as many organisations, who are densily<br>
interconnected with each other through milions of EBGP sessions. When DC<br=
>
equipment is connected to Internet, or when a CLI-style makes accidents<br>
easy, or when a lack of education results in a common misconfiguration,<br>
there should be checks and balances in place to dampen the negative<br>
effects on the Internet as a whole. The Internet Engineering Task Force<br>
(notice the &#39;Internet&#39; in IETF) has a responsiblity to promote and<=
br>
define safe and secure default behaviours.<br>
<br>
Kind regards,<br>
<br>
Job<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</blockquote></div></div>

--001a11449730a1dda3054dac761a--


From nobody Fri Apr 21 05:40:18 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 080E1126DCA for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 05:40:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FK_hI2twJP0f for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 05:40:14 -0700 (PDT)
Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F0AD124234 for <idr@ietf.org>; Fri, 21 Apr 2017 05:40:14 -0700 (PDT)
Received: by mail-wm0-x232.google.com with SMTP id r190so16186740wme.1 for <idr@ietf.org>; Fri, 21 Apr 2017 05:40:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=Pfg3+W/l2JsTzQRgflUg3HvWUDLsbHUeccgeTwhqO0s=; b=FIwYJJeZYB56WUqqfZ42wg06KTO8U/mHlOLmNuHWKVjNA3L7xr7+mvkzjGxIl48FmY Oguze56xvcoQ0pGsY+XHn0A0jm+3bDfiidenzFdU4xxIHOGIajUnl20W9hrCXqeLMQ3x bxzTmTXWRDk1cdjG0rKK0pCx4JhJDDswiQbBMe9CrQTgRdqbi8lsJET4zIBck1k35Krp G9DMmJnSjEyjUBECNlr5xyWuMlsJGMRo9zc2QhAG2z55rARgQABnEqiK1kL9OU4C5UzD 8a0s7eRe2NfgBQrRdzNmkFVD6NSuLCOOcGjXK1eS8HmRNsS8r5aEDcb8AZkLP1EWdggD ojDw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=Pfg3+W/l2JsTzQRgflUg3HvWUDLsbHUeccgeTwhqO0s=; b=sWIyU2LK3i4M7NFXWrnASdl3lrJmOBIjMhRSS2wiUeguj7I3rsQWSGFH3lxHsp/eDQ 1rj3aZg3eoV9kGnOgfl226fWq/d7tjuzgEcOwsfl6XJ92WqAnTH+BfOGr/+wcutcFUSV QtKQiu4gujVfLcaoqEYjmQp/VqQU4eU3KDU5urpn/l1XvmA6ybxQdcO1PEbt7BtrjpjD tdwW14N0+pxheuZL4bBX4uJDonOOxYTQBssRK8pboAR2mnpbfz38hoOci9A8rFMOuKnq EDMXKIQbVrawvTCPLO6ayujmhqwURwBp/Mn2y/aBQc3AEIhzWqf7kvw/hR3xTqUqhco4 1ysA==
X-Gm-Message-State: AN3rC/6iXMsjCOrhD8Hr5aPabkgzyW8xcilz6PK69veUIkIx/hhR3g/N 3YNsXsZ1d7vnDg==
X-Received: by 10.28.137.20 with SMTP id l20mr7763251wmd.6.1492778412826; Fri, 21 Apr 2017 05:40:12 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:154d:67d1:53a6:3be]) by smtp.gmail.com with ESMTPSA id o19sm394203edo.16.2017.04.21.05.40.11 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Apr 2017 05:40:11 -0700 (PDT)
Date: Fri, 21 Apr 2017 14:40:11 +0200
From: Job Snijders <job@instituut.net>
To: bruno.decraene@orange.com
Cc: Eric C Rosen <erosen@juniper.net>, Tony Przygienda <tonysietf@gmail.com>,  Brian Dickson <brian.peter.dickson@gmail.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170421124011.mdxpyoijvfh7eus4@Vurt.local>
References: <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Yx9oAIOFIaHz5go4c0rtUP5RRy4>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 12:40:17 -0000

On Fri, Apr 21, 2017 at 11:58:18AM +0000, bruno.decraene@orange.com wrote:
> > From: Job Snijders [mailto:job@instituut.net]  > Sent: Friday, April 21, 2017 11:02 AM
>  > You create a false dilemma stating that it is not clear to you
>  > whether this is a "requirement draft or a solution draft", 
> 
> That editorial point should be easy to address.
> 
> > and that those need to be separate.
> 
> I've not said that.

The use of the word 'or' in your sentence """it's not clear whether this
draft is a requirement draft or a solution draft.""" led me to believe
that you assert the two are mutually exclusive. Furthermore, from the
context it appears that you recommend to abandon 'bgp-reject', start
over with a requirements document, and then see what happens. If this is
not the case please elaborate, and accept my apologies for interpreting
it as I did.

>  > Did you review Alvaro's suggested changes which prompted the third IDR
>  > consultation on this topic? They are viewable here:
>  > 
>  >     http://htmlpreview.github.io/?https://github.com/jaredmauch/draft-mauch-bgp-
>  > reject/blob/alvaro/draft-ietf-grow-bgp-reject-06-from-5.diff.html
> 
> I was discussing the current version of the draft and comments sent on
> the mailing list (e.g less than 24 hours ago, one author commented
> that it does not believe that this document should be changed to
> update RFC 4271: " I believe that Alvaro is wrong in the presumption
> this document updates 4271. ".
> I was not aware of this private repository. Indeed, this candidate
> version is significantly different than the public one.

The link to the publicly available private repository was meant as a
convenience to you and the WG. It is a verbatim repetition of Alvaro's
suggestions which were emailed to idr@ on April 18th. I hoped to make
Alvaro's comments easier to read by creating the HTML rfcdiff. Did you
perhaps miss that message?

    https://mailarchive.ietf.org/arch/msg/idr/gU6sk8yrC3uF7aLERwnDh2cuFP4

>  > I'm disappointed that you've taken a CLI example I've provided as
>  > the sole driver behind this effort. I did not mean to offer the CLI
>  > example as an exhaustive list of reasons.
> 
> That this incorrect: I've commented on this driver, plus the ones
> indicated in the draft. What's missing has been authors' answer for
> those requests for clarification.  For the third time, could authors
> please document in the draft the drivers and the goal(s) that this
> document aims at achieving. Then we'll be able to take into account
> all drivers, plus authors will get IDR attention to their operational
> feedback. Should be win-win.

Please review the Introduction section of draft-ietf-grow-bgp-reject-05.

Should you fail to identify drivers and goals in that section, can you
elaborate what it is you do read in that section? 

I find it hard to believe that the Introduction passed through SECDIR,
RTGDIR, GENART, OPSDIR, and GROW Last Call, and was clear to those
involved, yet you indicate that drivers & goals are not clear, I am not
sure what I can do to further your understanding in that regard.

Kind regards,

Job


From nobody Fri Apr 21 07:32:07 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 175EF12944C for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 07:32:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.388
X-Spam-Level: 
X-Spam-Status: No, score=-5.388 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, T_SPF_PERMERROR=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rLKBbsP8QAsg for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 07:32:03 -0700 (PDT)
Received: from relais-inet.orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E91012009C for <idr@ietf.org>; Fri, 21 Apr 2017 07:32:03 -0700 (PDT)
Received: from opfednr04.francetelecom.fr (unknown [xx.xx.xx.68]) by opfednr26.francetelecom.fr (ESMTP service) with ESMTP id E12EB20620; Fri, 21 Apr 2017 16:32:01 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.69]) by opfednr04.francetelecom.fr (ESMTP service) with ESMTP id AF7084005B; Fri, 21 Apr 2017 16:32:01 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILMA2.corporate.adroot.infra.ftgroup ([fe80::bc1c:ad2f:eda3:8c3d%18]) with mapi id 14.03.0319.002; Fri, 21 Apr 2017 16:32:01 +0200
From: <bruno.decraene@orange.com>
To: Job Snijders <job@instituut.net>
CC: Eric C Rosen <erosen@juniper.net>, Tony Przygienda <tonysietf@gmail.com>,  Brian Dickson <brian.peter.dickson@gmail.com>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSun3mFx6qnNOc8UaJCUOYEKex/KHPw90CgAAPS0A=
Date: Fri, 21 Apr 2017 14:32:01 +0000
Message-ID: <1334_1492785121_58FA17E1_1334_3109_1_53C29892C857584299CBF5D05346208A31CC4307@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421124011.mdxpyoijvfh7eus4@Vurt.local>
In-Reply-To: <20170421124011.mdxpyoijvfh7eus4@Vurt.local>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.1]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/qmJrs30u5fPD77XNZyaDwrtPhKU>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 14:32:06 -0000

Job,

 > From: Job Snijders [mailto:job@instituut.net]  > Sent: Friday, April 21,=
 2017 2:40 PM
> EBGP Route Propagation Behavior Without Policies) to Proposed Standard
 >=20
 > On Fri, Apr 21, 2017 at 11:58:18AM +0000, bruno.decraene@orange.com wrot=
e:
 > > > From: Job Snijders [mailto:job@instituut.net]  > Sent: Friday, April=
 21, 2017 11:02 AM
 > >  > You create a false dilemma stating that it is not clear to you
 > >  > whether this is a "requirement draft or a solution draft",
 > >
 > > That editorial point should be easy to address.
 > >
 > > > and that those need to be separate.
 > >
 > > I've not said that.
 >=20
 > The use of the word 'or' in your sentence """it's not clear whether this
 > draft is a requirement draft or a solution draft.""" led me to believe
 > that you assert the two are mutually exclusive. Furthermore, from the
 > context it appears that you recommend to abandon 'bgp-reject', start
 > over with a requirements document, and then see what happens. If this is
 > not the case please elaborate, and accept my apologies for interpreting
 > it as I did.

Thanks for the clarification.=20
On my side, I don't think that there is a need for a dedicated problem stat=
ement document. IMHO the place for this problem statement is in the Introdu=
ction section of you document.
=20
 > >  > Did you review Alvaro's suggested changes which prompted the third =
IDR
 > >  > consultation on this topic? They are viewable here:
 > >  >
 > >  >     http://htmlpreview.github.io/?https://github.com/jaredmauch/dra=
ft-mauch-bgp-
 > >  > reject/blob/alvaro/draft-ietf-grow-bgp-reject-06-from-5.diff.html
 > >
 > > I was discussing the current version of the draft and comments sent on
 > > the mailing list (e.g less than 24 hours ago, one author commented
 > > that it does not believe that this document should be changed to
 > > update RFC 4271: " I believe that Alvaro is wrong in the presumption
 > > this document updates 4271. ".
 > > I was not aware of this private repository. Indeed, this candidate
 > > version is significantly different than the public one.
 >=20
 > The link to the publicly available private repository was meant as a
 > convenience to you and the WG. It is a verbatim repetition of Alvaro's
 > suggestions which were emailed to idr@ on April 18th. I hoped to make
 > Alvaro's comments easier to read by creating the HTML rfcdiff. Did you
 > perhaps miss that message?
 >=20
 >     https://mailarchive.ietf.org/arch/msg/idr/gU6sk8yrC3uF7aLERwnDh2cuFP4
=20
I had read Alvaro's email.
What I had missed is the link to the private repository, and then its meani=
ng. I had though (apparently incorrectly, sorry for this) that this were th=
e candidate -06 that authors were working on. i.e. the latest "current" sta=
tus of the draft. From your above clarification, this is not, and -05 is th=
e latest version.
=20
 > >  > I'm disappointed that you've taken a CLI example I've provided as
 > >  > the sole driver behind this effort. I did not mean to offer the CLI
 > >  > example as an exhaustive list of reasons.
 > >
 > > That this incorrect: I've commented on this driver, plus the ones
 > > indicated in the draft. What's missing has been authors' answer for
 > > those requests for clarification.  For the third time, could authors
 > > please document in the draft the drivers and the goal(s) that this
 > > document aims at achieving. Then we'll be able to take into account
 > > all drivers, plus authors will get IDR attention to their operational
 > > feedback. Should be win-win.
 >=20
 > Please review the Introduction section of draft-ietf-grow-bgp-reject-05.
 >=20
 > Should you fail to identify drivers and goals in that section, can you
 > elaborate what it is you do read in that section?

I had tried in https://mailarchive.ietf.org/arch/msg/idr/9Qn2bHQw1QIruWMCJI=
oEN0Z-qC4 but can try again below


"   There are BGP routing security issues that need to be addressed to make=
 the Internet more stable."
Agreed, but not very specific. At least this does not present the specific =
points that this document wants to address/solve. (believe me, I wish you w=
ould address all BGP routing security issues but we probably do not want to=
 put the bar too high, as it would be too hard to succeed)

"  Route leaks [RFC7908] are part of the  problem, but software defects or =
operator misconfigurations can  contribute too."
- I agree that route leak is an important issue. But they seem to be alread=
y worked on by draft-ymbk-idr-bgp-open-policy or draft-ietf-idr-route-leak-=
detection-mitigation. Plus this document is not a general solution to route=
 leak, so this is also not the point that this document wants to address (b=
ecause otherwise, it failed)
- Software defect won't probably be addressed by this proposal.
- Misconfiguration won't probably be addressed by this proposal. In particu=
lar no effort is made to ensure that the export/import policy is good/corre=
ct.

"   Many deployed BGP speakers send and accept any and all route
   announcements between their BGP neighbors by default.  This practice
   dates back to the early days of the Internet, where operators were
   permissive in sending routing information to allow all networks to
   reach each other.  As the Internet has become more densely
   interconnected, the risk of a misbehaving BGP speaker poses
   significant risks to Internet routing."

Ok, this is a statement of facts. But:
All BGP speakers requires configuration to establish an EBGP session. When =
doing this configuration, the operator needs to apply the right policy.
But this draft is not helping to solve "the right" policy issue. All it req=
uires is an additional configuration key word. This is an improvement but:
- This does not cover configuration mistakes.
- An operator is likely to blindly copy paste the new key word (enable poli=
cy "no filtering")  as part of configuring the session. In which case the g=
ain would be minimal
=20
It's also not clear to me if we can assume that the operator is a reasonabl=
e guy which wants to do the good thing, but failed because of a mistake or =
an improper configuration tool; or if this operator just does not give a da=
mn.
IMHO, given that the guy/company is an operator doing this to get money, I =
would personally opt for the former. In which case, he could be asked and s=
hould be happy to add one single configuration line to enable those new def=
ault behaviors. This alone would address my concern. In addition, as this d=
ocument requires a software upgrade, one could signal this new behavior in =
the BGP Open, such that you could check by yourself.


"   This specification intends to improve this situation by requiring the
   explicit configuration of a BGP import and export policy for any
   External BGP (EBGP) session such as customers, peers, or
   confederation boundaries for all enabled address families.  When this
   solution is implemented, BGP speakers do not accept or send routes
   without policies configured on EBGP sessions."

That is not part of the problem statement but a summary of the solution. (y=
et, a useful summary as part of the Introduction)

=20
 > I find it hard to believe that the Introduction passed through SECDIR,
 > RTGDIR, GENART, OPSDIR, and GROW Last Call, and was clear to those
 > involved, yet you indicate that drivers & goals are not clear, I am not
 > sure what I can do to further your understanding in that regard.

I find it equally hard that nobody complains on the impact/cost in term of =
existing EBGP configuration missing the new required policy, and impact on =
service provisioning tools (while they are notoriously heavy, expensive and=
 not very flexible).
Plus I'm not saying that this document has no benefit. I'm saying that it a=
lso has cost. And by carefully considering both, we could probably find a t=
radeoff satisfying all parties (that's my optimistic side, but just like an=
ybody I can be wrong)


Given my vision of the cost/benefit, in term of solution I think that the b=
elow change would be reasonable tradeoff. At least it would address my main=
 concern:

OLD:  A BGP speaker MAY provide a configuration option to disable the prece=
ding behaviors, but it MUST implement them by default.
NEW: A BGP speaker MUST provide a configuration option to enable the preced=
ing behaviors. Until network/service provisioning are upgraded, it SHOULD b=
e disabled by default. Such provisioning tools should be upgraded soon is o=
rder to prepare for the future new default behavior.

Optionally, on the solution side:
- I would also support the addition of a BGP capability to signal whether t=
his behavior is enabled or not. This would allow an EBGP peer to reject the=
 EBGP session if the configuration is not acceptable to them. But I can liv=
e without.
- I would prefer that the BGP session be closed, rather than keeping it up =
and not considering the received routes/not sending routes.

Thanks,
Kind regards,
--Bruno
=20
 > Kind regards,
 >=20
 > Job

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Fri Apr 21 07:33:54 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF37612944C for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 07:33:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qv64_6UVH_5U for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 07:33:51 -0700 (PDT)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0102.outbound.protection.outlook.com [104.47.34.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1266112009C for <idr@ietf.org>; Fri, 21 Apr 2017 07:33:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=oZbQPulTTR7Eu3DRFJcgv4/icbofTJgEEScfX9lvX1o=; b=kvc+/htvn5kEnZSW4ZFgDpf2D5LtJCEvEoHRojgHAt0cEYlC0fUQXmwwDTPm4XYrzW3WzuIS5e0Jfx6VV4kRO8UpD/QeA/Q362HbjsgcVs0sH1iPzoaAAelGifBPAFVPGunc8733KhTqYZAJSW1h5TCdyJ5kdOasbomedf84F5k=
Authentication-Results: orange.com; dkim=none (message not signed) header.d=none;orange.com; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.33.8] (66.129.241.12) by SN2PR05MB2510.namprd05.prod.outlook.com (10.166.213.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Fri, 21 Apr 2017 14:33:49 +0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <17818_1492627535_58F7B04F_17818_5514_1_53C29892C857584299CBF5D05346208A31CBDD15@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Date: Fri, 21 Apr 2017 10:33:45 -0400
CC: "Alvaro Retana (aretana)" <aretana@cisco.com>, "idr@ietf.org" <idr@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-ID: <571201E9-E30A-4356-B7CA-0DAE99F9B28F@juniper.net>
References: <20170419174042.7AA36B814E4@rfc-editor.org> <DCAC4E8F-A609-4DCB-BADB-23434A6F0EAC@cisco.com> <17818_1492627535_58F7B04F_17818_5514_1_53C29892C857584299CBF5D05346208A31CBDD15@OPEXCLILM21.corporate.adroot.infra.ftgroup>
To: Bruno Decraene <bruno.decraene@orange.com>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR11CA0038.namprd11.prod.outlook.com (10.173.25.24) To SN2PR05MB2510.namprd05.prod.outlook.com (10.166.213.19)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 93962a6a-08d9-4ae3-75da-08d488c36d8b
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:SN2PR05MB2510; 
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 3:qh9/iCt1+dpOa8rYMy+rrIdKCq20TZMz9Viy5O1kcIsx2OYndMh+wy4nZ8ofR1AfzbKqYKRE4ixiHY+9J4SsfG6incTldMXvOD8GR+MoahdQcbYaaJgL8/ZbbkIDWUVip6zhaxbh7DwLNbwyJfUBQEUqvN96krZODN9axLYyFesSm8ZczvBaxXezM4Khy++qz+W5TukJVIBO4WTqR95T4o9rDJ56a8ni8MXUtzvWaxKIouWzKIpKpYfiUNP5bc8XQPcTWJtaSq+RTIwdLzzuLAxLspRV5l+tZbggGZk1Pc7o3ejRF0lJDaveACVvIFPog7CDGXGRc631BCX7d+CfSAicqMWCB72ccQMcyd3NqiU=; 25:QgUoTMuQNp6XiMJg1QRhjIj6srtfyGaZRB6pt2xAm5MWJoK/lC8WY/gKerr6Tzs7iGpfwEUdgqaTUqI7tRsL6fk0rxG2Y5COHTZoJdTF7xCMTW2TkNUB9dWKMFhqlpLbgNN5GlH/H8QNer+EaUgx3zMlgV86d88mLz7Ho9nYVsYeCuXoDJ1kAWUOIM1xORzAY+wE76UHbp+p9lATbrMApor7SncGNog1Xm6LgEJhG07I15xr8aSFUFJlDacX9dBQVENvirSqGl0rdhV4i4aqm8UhS6D3YFqUpxlpG2PIOjKZiZcTm4A/3JXwBCMgjVxAd4C2AnNMP7QUzMAt/FmOqcxifTIIORVGXm8aRytFUnEbiqbWjAgJa2dRZTBGG1KO/Jmspei8OkSvnS5j6hhCgL6SqCbwM8LPkVGOLu5wonzwx8AOpSkIDWu7mVJG9yXjcKLnbzDI4NoCuk4zt6UVkwnXuYkE/3R7paWyuAR1klY=
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 31:fWZLmIwKEq6QbIdHOFsEEXTHjWZ/9n86RplZCqOVPODwMieMR/cYVXYW+U5Hyb77POlh+4O4MIKOZgLSqOSJh3EsKsGsHvH1tIHJfV2042COaeSAr/auG2Ghe09Rj7VUHx9NvykC77bgCBo56ZnKglwmwoFerSNfFigCJLcWUCXb/eXZVTMCgRdbUNEu+NV8A+FTfYoEJvwctGUrjXQY9j31yIdHw/CvTCr1pocjJLQOmCAieJZPXBAZPkjVSJKKvY8q5+UVhNdaAbqOIi1eFA==; 20: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
X-Microsoft-Antispam-PRVS: <SN2PR05MB2510474817D08323EE6C6AEBAA1A0@SN2PR05MB2510.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(18271650672692);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(20161123555025)(20161123564025)(20161123560025)(20161123562025)(6072148); SRVR:SN2PR05MB2510; BCL:0; PCL:0; RULEID:; SRVR:SN2PR05MB2510; 
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 4: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
X-Forefront-PRVS: 02843AA9E0
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(39400400002)(39410400002)(39860400002)(39450400003)(39840400002)(39850400002)(377454003)(24454002)(25786009)(6116002)(3846002)(54906002)(86362001)(53936002)(33656002)(50466002)(90366009)(6486002)(77096006)(66066001)(6666003)(7736002)(6916009)(2950100002)(23676002)(5660300001)(229853002)(47776003)(305945005)(36756003)(110136004)(38730400002)(42186005)(57306001)(4326008)(189998001)(81166006)(2906002)(50986999)(8676002)(50226002)(82746002)(76176999)(83716003)(6246003)(8746002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN2PR05MB2510; H:[172.29.33.8]; FPR:; SPF:None;  MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtTTjJQUjA1TUIyNTEwOzIzOnV6eGVNN1lTRDFnV1gvZC95UDljNjc1S1Zx?= =?utf-8?B?SXFxdktQVXFIdlNrWTYvQjA3RklvTHRFbzRlL0lTY3NTL2dvV3p4ZDVFbGlF?= =?utf-8?B?S0M5aDVheWEvbDQyLy9EYzBQQ3lWejlJUkVFTDd5N3dKM3lkU0xTVExwNzI4?= =?utf-8?B?azhlVlJTRFFKdmQvaE1NVHdOR2NVVlNNS2lhTXBHcUZOZDhzbUdGZS8rWHAr?= =?utf-8?B?Z3k0NFVCZWs3ZG9Vc3JzYXB1WVptUkI5amx6WXRnRko4eDVrWDduNlAxcFFp?= =?utf-8?B?aFNjckhOK3NHeWdTYW9oWXpuSXRhaG82SzZKSENiQTlKa3dZWVJScmk1K1B0?= =?utf-8?B?VE1HT2w0T3p0U3Vpczl4TGYvQ0NheEltVHArcHhYQXVxV0wzc2VSNFBYNWxo?= =?utf-8?B?RVhjQW8zNGhkaWpheG83Y0d4WVZMSTdobis0Y1YvcEhBOSsyMGtiVElEbk4z?= =?utf-8?B?L2pqZzFNNEQ0TGF0a1pBWjJDWXVvTzRXOW9YZVZkUVJpaHo4SW5VeGwxTnow?= =?utf-8?B?THU4aVZBVHA0aVBQR1JCVHBXM0JWZHFWSk1MUzFmTG4ydDNkc3JIQnhkdG5T?= =?utf-8?B?WE5qeG5NZkt6S3ZObUN1VWQ0N05hTlo1RFdzTXpSSmRwdkN2aWx3WmdqMXpH?= =?utf-8?B?enhIWnBkTmlMZDNhSCtzSHlSaHJZWWFjbVNSeUFGbGgzaERSVWliVDVZSWF1?= =?utf-8?B?U1FuUDFaZXk5NERVdUpZK2NMN1ZXMU5GeTJBN2NOQnN2dFFhUHJLTWw2ODdW?= =?utf-8?B?dE1kUGk0aHo5dFZmNWpnT2F5b3hHWE45dW9YOCsrQXVJYnVSeG1FSk9kbkVh?= =?utf-8?B?K3U0UzBhYloyNXM5RFVWQjRlK3ZxUWhBZHNWNzhweVo1dkttMjIxeVRDRmhC?= =?utf-8?B?azBqWnJSeDdiNDc4SnhxM0VuVDkyb2hGZzhlaHZOaGxqN3Jud1NoUmNwVHd6?= =?utf-8?B?dWM2aHFGNjNVcVBKMTFuQ1YxOGVPYWJteGd5QzJVL3NjMnFvWmdEclp2aVFq?= =?utf-8?B?Tms0UU4vb0pJREhITVI3clVJY0cvNzNEQStZOHFObDUwdTFTTkF1SW5VTllL?= =?utf-8?B?VHFtSTNFRWJDKzVtcDV6M1E4WUp2ekxpUGNNWEFnMit1anBSTm95UmJRS2ZZ?= =?utf-8?B?c3BlKzRCdDRwU3FvbjE0aXBnMlh6QW81TUh5QjluTmZJdUxDdDN0L1pCS1px?= =?utf-8?B?dlRKYXMyZjM5Wk90RFpyd2FTREtBbXBvcDRpZ21ZWFU1UlBWa09xQzR3L01q?= =?utf-8?B?a3lLSnMxWGFQOWlKR2d1dGl5WVd2bnhmZkZuZkpZRGIxZUtXejhwcngzMnhl?= =?utf-8?B?eXBZdjk2MVV4ZXloelhjVkYxMm56VDdRNmJFVU9XcjBRd0tRWnZBSWdKRUZN?= =?utf-8?B?SCtMWlNVRGFCMEI3TXZBckVsajZtRFFkaVEyb1gyL2tXWHhPdTRSYUduWjE1?= =?utf-8?B?cG9POWt5d2duSjByOWxwdlVFWkZFeWsxYjFmT0xoK3ZVWGNuZkY2ejRoUmVT?= =?utf-8?B?U1dIZjU0N0NMNTdPZVZhTnJ4VGZTZXVUK0hDWCtERzJib3VZWGJYcUlmTXlG?= =?utf-8?B?Ylg3Z1RmV2hKUFg5SWpJYVVCNkY1LzFBUFovM1BnZTdhOTgzZnd4K1ZFQ2FQ?= =?utf-8?B?RkUzL1NsTHBWdG0zcWdHUHdaejFjbFl4Y0hRZ3NINFo3MXZQNzE1N0FnPT0=?=
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 6: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; 5:3Ahbwsdbiy9GyEXFxl3f/YmnrjBxEjMinpdYhtdOmfACqwV3TfEXL5WborXjtshVHwdUAjqhN1IV5gA0aFGTy9SbFxE2rzUgblg7TpSbq4PJu8zwLDuIasSKMsaAO4De8oTkLaILI2NzcGMOCOwyvg==; 24:wEa6TToBm4aYCXG9RbvWJ78JSp7Qt39MNaVMn5hSGJta+BXSgsPzflzg4BZCVcxprUMgWGu2x6Am042IaiKHTfkD9BolY/D6VuJ+o/AGcw0=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 7:DzMcq7/JSRkTT7POZ4V5JK0gC/RxWouLw+XY2BA6zsvs9sB1gO9rk0NQLjMRS+LexE9+kPAtcLg1A3jiBu9D0weqhmraBMso5EKcfbbp3BvlXXj6z7+MxxF+Pwv5gLOvcbhEeBFd2/KGTR9l/YkrO127dDs5b8746CP8xvfVZrF5unPAUk7nnnkaZ70IB9vz4k0MZ+GatcELVgf+U+PtAYn8EPEo+o9cLCq7JF6PqGBHtJQ3JS3YFkfHCk6ITQCecwDk1I8tVDJ7lz0Al0F1IDdl1g9Ja/oCpOl50gb6TsJmszlhM46CqOW4BKKf3OfGYv9ZtIdCUwFQA0YFJfThxA==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Apr 2017 14:33:49.9545 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR05MB2510
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/OjvAbqUl435SOJxwpuKI1lZ59Q0>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5001)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 14:33:53 -0000

On Apr 19, 2017, at 2:45 PM, bruno.decraene@orange.com wrote:
>=20
> IMHO, OPTIONAL may not be what was intended.
> As per RFC 2119 " the adjective "OPTIONAL", mean that an item is
>   truly optional.  One vendor may choose to include the item because a
>   particular marketplace requires it or because the vendor feels that
>   it enhances the product while another vendor may omit the same =
item."
>=20
> Here, I think that the original intention was to say that the =
attribute MAY be sent if appropriate and MAY be omitted if appropriate. =
IOW, it is _not_ REQUIRED to always send it.
>=20
> As an example, quickly parsing RFC 4171, it does not seem to indicate =
whether the LOCAL_PREF attribute is mandatory or discretionary. But =
given that it is well-known, as per =C2=A75, it can only be mandatory or =
discretionary. Given that it usually does not appear in EBGP session, I =
would argue that it is not mandatory, hence discretionary. But I don't =
think that we could say that sending the attribute LOCAL_PREF is =
OPTIONAL given that RFC 4271 mandates its use in IBGP (plus not sending =
it on some IBGP sessions would create forwarding loops).

In short: there is no good fit between the RFC 4271 concept of =
"discretionary" and any RFC 2119 keyword at all. Agreed. (Actually there =
is not even a good match between the RFC 4271 concept of "discretionary" =
and the plain-English definition of "discretionary", more's the pity.)

> I may propose the follow text: Others are discretionary and may or may =
not be sent in a particular UPDATE message
> Or: Others are discretionary and are not required to be sent in all =
UPDATE message

I would be OK with either of these options, or with simply truncating =
the sentence: "Others are discretionary." (It's clear from context that =
they aren't required to be sent with every update, the previous sentence =
being the "exception that proves the rule".)

Thanks for the feedback.

--John=


From nobody Fri Apr 21 08:19:34 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16C25129516 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:19:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.698
X-Spam-Level: 
X-Spam-Status: No, score=-1.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kasy3UJ3Zprr for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:19:30 -0700 (PDT)
Received: from mail-oi0-x229.google.com (mail-oi0-x229.google.com [IPv6:2607:f8b0:4003:c06::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5DF49127868 for <idr@ietf.org>; Fri, 21 Apr 2017 08:19:30 -0700 (PDT)
Received: by mail-oi0-x229.google.com with SMTP id s131so12961887oia.3 for <idr@ietf.org>; Fri, 21 Apr 2017 08:19:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=mUZi4me+xBv0N8Ltbr592tYF8/v8e1VOajshLfKp/f4=; b=u30JPOqB3LDAUCvjC0H241jZeI0WHtr254GlnddJ5s6zSHmzr7T/YS7rgkPJZQ429G DWytE9dEFO2+qpcPvwwmSmiG96MCvDL5Njc85HVvkA91m92Zjwhx9jnXCEBfs8vC7F8m cgOlbSYvvtU9Drpe94jQflF4QAWBn3wNh9eURLQ4ml4+ynYrxRFM4HCS9Q8KdptKFm4+ kSW/7O6O4cSxBc9S+6Vjna0SxkfHl24mccsfMt9xrjKFT1ARvqjBlRi07s+0Zsu5vNUI p7VFVwZlxzq2SUsop2mqC7YyZkbz2woJniQpbgmpIZbj4560NXdm/AUdau/m83c8QX0o mXcw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=mUZi4me+xBv0N8Ltbr592tYF8/v8e1VOajshLfKp/f4=; b=ZS9Llq6BxghCbk6SndOshsR6/T5sv+tAh+3LuyrcJzwGLWi+rw4PexBEqpdx7mJHrI hZ1AkLlNrarX4i9RvGiTk3sIIgQSfQPM4xS+livWd8+kNSbd1zrFfztlrZT0xtF00p6u ABG3bbkMsILNs6c0p3MPXnGWincsT36uCSoMHMOdSqxEndAW5lwKgmPhHSALYDYyx8BL MuD9IZxpieFbqbaT4vH2w70OnSzCSag2OtfY7B/gAY4Ypf6+B0jrruatInobdyCo3KB0 PvV7jCk3LhheHeLW2J38F0X19UNpWoEAhkWxKdJxMOUvOmmPe2laNFBvn69Vde0O8RYB s90g==
X-Gm-Message-State: AN3rC/6fEW0iyjNMry9eWkyRDbV4vhXMLwa+MN7jDEq9pG7OexzfG79y Q6Za0w+bUvOUsF8l+BLyUFhfnwhgtw==
X-Received: by 10.36.115.12 with SMTP id y12mr10887683itb.24.1492787969558; Fri, 21 Apr 2017 08:19:29 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Fri, 21 Apr 2017 08:19:28 -0700 (PDT)
In-Reply-To: <1334_1492785121_58FA17E1_1334_3109_1_53C29892C857584299CBF5D05346208A31CC4307@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421124011.mdxpyoijvfh7eus4@Vurt.local> <1334_1492785121_58FA17E1_1334_3109_1_53C29892C857584299CBF5D05346208A31CC4307@OPEXCLILM21.corporate.adroot.infra.ftgroup>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 21 Apr 2017 17:19:28 +0200
X-Google-Sender-Auth: fDu7AM9Smj4t1JXZtwRanDRJoXE
Message-ID: <CA+b+ERn1vX_b20CGyNbck+_Gm0Dt=fqnxqWzdqHmHiPKNTWD_Q@mail.gmail.com>
To: "bruno.decraene@orange.com" <bruno.decraene@orange.com>
Cc: Job Snijders <job@instituut.net>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a11444dcaa6af35054daec8fa
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Jazu56wMWk0tcxgOk9jzC0A9UF4>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 15:19:33 -0000

--001a11444dcaa6af35054daec8fa
Content-Type: text/plain; charset=UTF-8

One final point ...

> - An operator is likely to blindly copy paste the new key word (enable
policy
> "no filtering")  as part of configuring the session. In which case the
gain would
> be minimal

Exactly !

The draft assumes that there are operators managing those 55000 ASes who
already do know today what to put in their BGP policy and they are not
doing
it only because they are lazy and their vendor does not enforce them to do
it.

Are we really that bad in Internet NOCs ? Do we need configuration
enforcement
and RFCs like this ?

Wouldn't it be a much better to instead share a pointer to Best Practices
for EBGP
Policy Configuration wiki and even include such URL in deployment section
of the draft
under discussion ?

Thx,
r.


On Fri, Apr 21, 2017 at 4:32 PM, <bruno.decraene@orange.com> wrote:

> Job,
>
>  > From: Job Snijders [mailto:job@instituut.net]  > Sent: Friday, April
> 21, 2017 2:40 PM
> > EBGP Route Propagation Behavior Without Policies) to Proposed Standard
>  >
>  > On Fri, Apr 21, 2017 at 11:58:18AM +0000, bruno.decraene@orange.com
> wrote:
>  > > > From: Job Snijders [mailto:job@instituut.net]  > Sent: Friday,
> April 21, 2017 11:02 AM
>  > >  > You create a false dilemma stating that it is not clear to you
>  > >  > whether this is a "requirement draft or a solution draft",
>  > >
>  > > That editorial point should be easy to address.
>  > >
>  > > > and that those need to be separate.
>  > >
>  > > I've not said that.
>  >
>  > The use of the word 'or' in your sentence """it's not clear whether this
>  > draft is a requirement draft or a solution draft.""" led me to believe
>  > that you assert the two are mutually exclusive. Furthermore, from the
>  > context it appears that you recommend to abandon 'bgp-reject', start
>  > over with a requirements document, and then see what happens. If this is
>  > not the case please elaborate, and accept my apologies for interpreting
>  > it as I did.
>
> Thanks for the clarification.
> On my side, I don't think that there is a need for a dedicated problem
> statement document. IMHO the place for this problem statement is in the
> Introduction section of you document.
>
>  > >  > Did you review Alvaro's suggested changes which prompted the third
> IDR
>  > >  > consultation on this topic? They are viewable here:
>  > >  >
>  > >  >     http://htmlpreview.github.io/?https://github.com/jaredmauch/
> draft-mauch-bgp-
>  > >  > reject/blob/alvaro/draft-ietf-grow-bgp-reject-06-from-5.diff.html
>  > >
>  > > I was discussing the current version of the draft and comments sent on
>  > > the mailing list (e.g less than 24 hours ago, one author commented
>  > > that it does not believe that this document should be changed to
>  > > update RFC 4271: " I believe that Alvaro is wrong in the presumption
>  > > this document updates 4271. ".
>  > > I was not aware of this private repository. Indeed, this candidate
>  > > version is significantly different than the public one.
>  >
>  > The link to the publicly available private repository was meant as a
>  > convenience to you and the WG. It is a verbatim repetition of Alvaro's
>  > suggestions which were emailed to idr@ on April 18th. I hoped to make
>  > Alvaro's comments easier to read by creating the HTML rfcdiff. Did you
>  > perhaps miss that message?
>  >
>  >     https://mailarchive.ietf.org/arch/msg/idr/
> gU6sk8yrC3uF7aLERwnDh2cuFP4
>
> I had read Alvaro's email.
> What I had missed is the link to the private repository, and then its
> meaning. I had though (apparently incorrectly, sorry for this) that this
> were the candidate -06 that authors were working on. i.e. the latest
> "current" status of the draft. From your above clarification, this is not,
> and -05 is the latest version.
>
>  > >  > I'm disappointed that you've taken a CLI example I've provided as
>  > >  > the sole driver behind this effort. I did not mean to offer the CLI
>  > >  > example as an exhaustive list of reasons.
>  > >
>  > > That this incorrect: I've commented on this driver, plus the ones
>  > > indicated in the draft. What's missing has been authors' answer for
>  > > those requests for clarification.  For the third time, could authors
>  > > please document in the draft the drivers and the goal(s) that this
>  > > document aims at achieving. Then we'll be able to take into account
>  > > all drivers, plus authors will get IDR attention to their operational
>  > > feedback. Should be win-win.
>  >
>  > Please review the Introduction section of draft-ietf-grow-bgp-reject-05.
>  >
>  > Should you fail to identify drivers and goals in that section, can you
>  > elaborate what it is you do read in that section?
>
> I had tried in https://mailarchive.ietf.org/arch/msg/idr/
> 9Qn2bHQw1QIruWMCJIoEN0Z-qC4 but can try again below
>
>
> "   There are BGP routing security issues that need to be addressed to
> make the Internet more stable."
> Agreed, but not very specific. At least this does not present the specific
> points that this document wants to address/solve. (believe me, I wish you
> would address all BGP routing security issues but we probably do not want
> to put the bar too high, as it would be too hard to succeed)
>
> "  Route leaks [RFC7908] are part of the  problem, but software defects or
> operator misconfigurations can  contribute too."
> - I agree that route leak is an important issue. But they seem to be
> already worked on by draft-ymbk-idr-bgp-open-policy or
> draft-ietf-idr-route-leak-detection-mitigation. Plus this document is not
> a general solution to route leak, so this is also not the point that this
> document wants to address (because otherwise, it failed)
> - Software defect won't probably be addressed by this proposal.
> - Misconfiguration won't probably be addressed by this proposal. In
> particular no effort is made to ensure that the export/import policy is
> good/correct.
>
> "   Many deployed BGP speakers send and accept any and all route
>    announcements between their BGP neighbors by default.  This practice
>    dates back to the early days of the Internet, where operators were
>    permissive in sending routing information to allow all networks to
>    reach each other.  As the Internet has become more densely
>    interconnected, the risk of a misbehaving BGP speaker poses
>    significant risks to Internet routing."
>
> Ok, this is a statement of facts. But:
> All BGP speakers requires configuration to establish an EBGP session. When
> doing this configuration, the operator needs to apply the right policy.
> But this draft is not helping to solve "the right" policy issue. All it
> requires is an additional configuration key word. This is an improvement
> but:
> - This does not cover configuration mistakes.
> - An operator is likely to blindly copy paste the new key word (enable
> policy "no filtering")  as part of configuring the session. In which case
> the gain would be minimal
>
> It's also not clear to me if we can assume that the operator is a
> reasonable guy which wants to do the good thing, but failed because of a
> mistake or an improper configuration tool; or if this operator just does
> not give a damn.
> IMHO, given that the guy/company is an operator doing this to get money, I
> would personally opt for the former. In which case, he could be asked and
> should be happy to add one single configuration line to enable those new
> default behaviors. This alone would address my concern. In addition, as
> this document requires a software upgrade, one could signal this new
> behavior in the BGP Open, such that you could check by yourself.
>
>
> "   This specification intends to improve this situation by requiring the
>    explicit configuration of a BGP import and export policy for any
>    External BGP (EBGP) session such as customers, peers, or
>    confederation boundaries for all enabled address families.  When this
>    solution is implemented, BGP speakers do not accept or send routes
>    without policies configured on EBGP sessions."
>
> That is not part of the problem statement but a summary of the solution.
> (yet, a useful summary as part of the Introduction)
>
>
>  > I find it hard to believe that the Introduction passed through SECDIR,
>  > RTGDIR, GENART, OPSDIR, and GROW Last Call, and was clear to those
>  > involved, yet you indicate that drivers & goals are not clear, I am not
>  > sure what I can do to further your understanding in that regard.
>
> I find it equally hard that nobody complains on the impact/cost in term of
> existing EBGP configuration missing the new required policy, and impact on
> service provisioning tools (while they are notoriously heavy, expensive and
> not very flexible).
> Plus I'm not saying that this document has no benefit. I'm saying that it
> also has cost. And by carefully considering both, we could probably find a
> tradeoff satisfying all parties (that's my optimistic side, but just like
> anybody I can be wrong)
>
>
> Given my vision of the cost/benefit, in term of solution I think that the
> below change would be reasonable tradeoff. At least it would address my
> main concern:
>
> OLD:  A BGP speaker MAY provide a configuration option to disable the
> preceding behaviors, but it MUST implement them by default.
> NEW: A BGP speaker MUST provide a configuration option to enable the
> preceding behaviors. Until network/service provisioning are upgraded, it
> SHOULD be disabled by default. Such provisioning tools should be upgraded
> soon is order to prepare for the future new default behavior.
>
> Optionally, on the solution side:
> - I would also support the addition of a BGP capability to signal whether
> this behavior is enabled or not. This would allow an EBGP peer to reject
> the EBGP session if the configuration is not acceptable to them. But I can
> live without.
> - I would prefer that the BGP session be closed, rather than keeping it up
> and not considering the received routes/not sending routes.
>
> Thanks,
> Kind regards,
> --Bruno
>
>  > Kind regards,
>  >
>  > Job
>
> ____________________________________________________________
> _____________________________________________________________
>
> Ce message et ses pieces jointes peuvent contenir des informations
> confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez
> recu ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages
> electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou
> falsifie. Merci.
>
> This message and its attachments may contain confidential or privileged
> information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and
> delete this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been
> modified, changed or falsified.
> Thank you.
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a11444dcaa6af35054daec8fa
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default"><span style=3D"font-size:12.8=
px">One final point ...=C2=A0</span></div><div class=3D"gmail_default" styl=
e=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span style=3D=
"font-family:arial,sans-serif;font-size:12.8px"><br></span></div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px">&gt;=
 - An operator is likely to blindly copy paste the new key word=C2=A0</span=
><span style=3D"font-family:arial,sans-serif;font-size:12.8px">(enable poli=
cy=C2=A0</span></div><div class=3D"gmail_default" style=3D"font-family:aria=
l,helvetica,sans-serif;font-size:small"><span style=3D"font-family:arial,sa=
ns-serif;font-size:12.8px">&gt; &quot;no filtering&quot;)=C2=A0 as part of =
configuring the session.=C2=A0</span><span style=3D"font-family:arial,sans-=
serif;font-size:12.8px">In which case the gain would=C2=A0</span></div><div=
 class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fo=
nt-size:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px=
">&gt; be minimal</span></div><div class=3D"gmail_default" style=3D"font-fa=
mily:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family=
:arial,sans-serif;font-size:12.8px"><br></span></div><div class=3D"gmail_de=
fault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><sp=
an style=3D"font-family:arial,sans-serif;font-size:12.8px">Exactly !</span>=
</div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,san=
s-serif;font-size:small"><span style=3D"font-family:arial,sans-serif;font-s=
ize:12.8px"><br></span></div><div class=3D"gmail_default"><span style=3D"fo=
nt-size:12.8px">The draft assumes that there are operators managing those 5=
5000 ASes=C2=A0</span><span style=3D"font-size:12.8px">who=C2=A0</span></di=
v><div class=3D"gmail_default"><span style=3D"font-size:12.8px">already=C2=
=A0</span><span style=3D"font-size:12.8px">do know today what to put in the=
ir=C2=A0</span><span style=3D"font-size:12.8px">BGP policy and they are not=
 doing=C2=A0</span></div><div class=3D"gmail_default"><span style=3D"font-s=
ize:12.8px">it only because</span><span style=3D"font-size:12.8px">=C2=A0</=
span><span style=3D"font-size:12.8px">they are lazy and their vendor does n=
ot=C2=A0</span><span style=3D"font-size:12.8px">enforce them to do it.=C2=
=A0</span></div><div class=3D"gmail_default"><span style=3D"font-size:12.8p=
x"><br></span></div><div class=3D"gmail_default"><span style=3D"font-size:1=
2.8px">Are we really that bad in Internet NOCs ? Do we need configuration e=
nforcement=C2=A0</span></div><div class=3D"gmail_default"><span style=3D"fo=
nt-size:12.8px">and RFCs=C2=A0</span><span style=3D"font-size:12.8px">like=
=C2=A0</span><span style=3D"font-size:12.8px">this ?=C2=A0</span></div><div=
 class=3D"gmail_default"><span style=3D"font-size:12.8px"><br></span></div>=
<div class=3D"gmail_default"><span style=3D"font-size:12.8px">Wouldn&#39;t =
it be a much better to instead share a pointer to Best Practices for EBGP=
=C2=A0</span></div><div class=3D"gmail_default"><span style=3D"font-size:12=
.8px">Policy Configuration wiki and even include such URL in deployment sec=
tion of the draft=C2=A0</span></div><div class=3D"gmail_default"><span styl=
e=3D"font-size:12.8px">under=C2=A0</span><span style=3D"font-size:12.8px">d=
iscussion ?</span></div><div class=3D"gmail_default"><span style=3D"font-si=
ze:12.8px"><br></span></div><div class=3D"gmail_default"><span style=3D"fon=
t-size:12.8px">Thx,</span><br></div><div class=3D"gmail_default"><span styl=
e=3D"font-size:12.8px">r.</span></div><div class=3D"gmail_default"><br></di=
v></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Fri, A=
pr 21, 2017 at 4:32 PM,  <span dir=3D"ltr">&lt;<a href=3D"mailto:bruno.decr=
aene@orange.com" target=3D"_blank">bruno.decraene@orange.com</a>&gt;</span>=
 wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bor=
der-left:1px #ccc solid;padding-left:1ex">Job,<br>
<br>
=C2=A0&gt; From: Job Snijders [mailto:<a href=3D"mailto:job@instituut.net">=
job@instituut.net</a>]=C2=A0 &gt; Sent: Friday, April 21, 2017 2:40 PM<br>
&gt; EBGP Route Propagation Behavior Without Policies) to Proposed Standard=
<br>
<span class=3D"">=C2=A0&gt;<br>
=C2=A0&gt; On Fri, Apr 21, 2017 at 11:58:18AM +0000, <a href=3D"mailto:brun=
o.decraene@orange.com">bruno.decraene@orange.com</a> wrote:<br>
=C2=A0&gt; &gt; &gt; From: Job Snijders [mailto:<a href=3D"mailto:job@insti=
tuut.net">job@instituut.net</a>]=C2=A0 &gt; Sent: Friday, April 21, 2017 11=
:02 AM<br>
=C2=A0&gt; &gt;=C2=A0 &gt; You create a false dilemma stating that it is no=
t clear to you<br>
=C2=A0&gt; &gt;=C2=A0 &gt; whether this is a &quot;requirement draft or a s=
olution draft&quot;,<br>
=C2=A0&gt; &gt;<br>
=C2=A0&gt; &gt; That editorial point should be easy to address.<br>
=C2=A0&gt; &gt;<br>
=C2=A0&gt; &gt; &gt; and that those need to be separate.<br>
=C2=A0&gt; &gt;<br>
=C2=A0&gt; &gt; I&#39;ve not said that.<br>
=C2=A0&gt;<br>
=C2=A0&gt; The use of the word &#39;or&#39; in your sentence &quot;&quot;&q=
uot;it&#39;s not clear whether this<br>
=C2=A0&gt; draft is a requirement draft or a solution draft.&quot;&quot;&qu=
ot; led me to believe<br>
=C2=A0&gt; that you assert the two are mutually exclusive. Furthermore, fro=
m the<br>
=C2=A0&gt; context it appears that you recommend to abandon &#39;bgp-reject=
&#39;, start<br>
=C2=A0&gt; over with a requirements document, and then see what happens. If=
 this is<br>
=C2=A0&gt; not the case please elaborate, and accept my apologies for inter=
preting<br>
=C2=A0&gt; it as I did.<br>
<br>
</span>Thanks for the clarification.<br>
On my side, I don&#39;t think that there is a need for a dedicated problem =
statement document. IMHO the place for this problem statement is in the Int=
roduction section of you document.<br>
<span class=3D""><br>
=C2=A0&gt; &gt;=C2=A0 &gt; Did you review Alvaro&#39;s suggested changes wh=
ich prompted the third IDR<br>
=C2=A0&gt; &gt;=C2=A0 &gt; consultation on this topic? They are viewable he=
re:<br>
=C2=A0&gt; &gt;=C2=A0 &gt;<br>
=C2=A0&gt; &gt;=C2=A0 &gt;=C2=A0 =C2=A0 =C2=A0<a href=3D"http://htmlpreview=
.github.io/?https://github.com/jaredmauch/draft-mauch-bgp-" rel=3D"noreferr=
er" target=3D"_blank">http://htmlpreview.github.io/?<wbr>https://github.com=
/jaredmauch/<wbr>draft-mauch-bgp-</a><br>
=C2=A0&gt; &gt;=C2=A0 &gt; reject/blob/alvaro/draft-ietf-<wbr>grow-bgp-reje=
ct-06-from-5.<wbr>diff.html<br>
=C2=A0&gt; &gt;<br>
=C2=A0&gt; &gt; I was discussing the current version of the draft and comme=
nts sent on<br>
=C2=A0&gt; &gt; the mailing list (e.g less than 24 hours ago, one author co=
mmented<br>
=C2=A0&gt; &gt; that it does not believe that this document should be chang=
ed to<br>
=C2=A0&gt; &gt; update RFC 4271: &quot; I believe that Alvaro is wrong in t=
he presumption<br>
=C2=A0&gt; &gt; this document updates 4271. &quot;.<br>
=C2=A0&gt; &gt; I was not aware of this private repository. Indeed, this ca=
ndidate<br>
=C2=A0&gt; &gt; version is significantly different than the public one.<br>
=C2=A0&gt;<br>
=C2=A0&gt; The link to the publicly available private repository was meant =
as a<br>
=C2=A0&gt; convenience to you and the WG. It is a verbatim repetition of Al=
varo&#39;s<br>
=C2=A0&gt; suggestions which were emailed to idr@ on April 18th. I hoped to=
 make<br>
=C2=A0&gt; Alvaro&#39;s comments easier to read by creating the HTML rfcdif=
f. Did you<br>
=C2=A0&gt; perhaps miss that message?<br>
=C2=A0&gt;<br>
=C2=A0&gt;=C2=A0 =C2=A0 =C2=A0<a href=3D"https://mailarchive.ietf.org/arch/=
msg/idr/gU6sk8yrC3uF7aLERwnDh2cuFP4" rel=3D"noreferrer" target=3D"_blank">h=
ttps://mailarchive.ietf.org/<wbr>arch/msg/idr/<wbr>gU6sk8yrC3uF7aLERwnDh2cu=
FP4</a><br>
<br>
</span>I had read Alvaro&#39;s email.<br>
What I had missed is the link to the private repository, and then its meani=
ng. I had though (apparently incorrectly, sorry for this) that this were th=
e candidate -06 that authors were working on. i.e. the latest &quot;current=
&quot; status of the draft. From your above clarification, this is not, and=
 -05 is the latest version.<br>
<span class=3D""><br>
=C2=A0&gt; &gt;=C2=A0 &gt; I&#39;m disappointed that you&#39;ve taken a CLI=
 example I&#39;ve provided as<br>
=C2=A0&gt; &gt;=C2=A0 &gt; the sole driver behind this effort. I did not me=
an to offer the CLI<br>
=C2=A0&gt; &gt;=C2=A0 &gt; example as an exhaustive list of reasons.<br>
=C2=A0&gt; &gt;<br>
=C2=A0&gt; &gt; That this incorrect: I&#39;ve commented on this driver, plu=
s the ones<br>
=C2=A0&gt; &gt; indicated in the draft. What&#39;s missing has been authors=
&#39; answer for<br>
=C2=A0&gt; &gt; those requests for clarification.=C2=A0 For the third time,=
 could authors<br>
=C2=A0&gt; &gt; please document in the draft the drivers and the goal(s) th=
at this<br>
=C2=A0&gt; &gt; document aims at achieving. Then we&#39;ll be able to take =
into account<br>
=C2=A0&gt; &gt; all drivers, plus authors will get IDR attention to their o=
perational<br>
=C2=A0&gt; &gt; feedback. Should be win-win.<br>
=C2=A0&gt;<br>
=C2=A0&gt; Please review the Introduction section of draft-ietf-grow-bgp-re=
ject-05.<br>
=C2=A0&gt;<br>
=C2=A0&gt; Should you fail to identify drivers and goals in that section, c=
an you<br>
=C2=A0&gt; elaborate what it is you do read in that section?<br>
<br>
</span>I had tried in <a href=3D"https://mailarchive.ietf.org/arch/msg/idr/=
9Qn2bHQw1QIruWMCJIoEN0Z-qC4" rel=3D"noreferrer" target=3D"_blank">https://m=
ailarchive.ietf.org/<wbr>arch/msg/idr/<wbr>9Qn2bHQw1QIruWMCJIoEN0Z-qC4</a> =
but can try again below<br>
<br>
<br>
&quot;=C2=A0 =C2=A0There are BGP routing security issues that need to be ad=
dressed to make the Internet more stable.&quot;<br>
Agreed, but not very specific. At least this does not present the specific =
points that this document wants to address/solve. (believe me, I wish you w=
ould address all BGP routing security issues but we probably do not want to=
 put the bar too high, as it would be too hard to succeed)<br>
<br>
&quot;=C2=A0 Route leaks [RFC7908] are part of the=C2=A0 problem, but softw=
are defects or operator misconfigurations can=C2=A0 contribute too.&quot;<b=
r>
- I agree that route leak is an important issue. But they seem to be alread=
y worked on by draft-ymbk-idr-bgp-open-policy or draft-ietf-idr-route-leak-=
<wbr>detection-mitigation. Plus this document is not a general solution to =
route leak, so this is also not the point that this document wants to addre=
ss (because otherwise, it failed)<br>
- Software defect won&#39;t probably be addressed by this proposal.<br>
- Misconfiguration won&#39;t probably be addressed by this proposal. In par=
ticular no effort is made to ensure that the export/import policy is good/c=
orrect.<br>
<br>
&quot;=C2=A0 =C2=A0Many deployed BGP speakers send and accept any and all r=
oute<br>
=C2=A0 =C2=A0announcements between their BGP neighbors by default.=C2=A0 Th=
is practice<br>
=C2=A0 =C2=A0dates back to the early days of the Internet, where operators =
were<br>
=C2=A0 =C2=A0permissive in sending routing information to allow all network=
s to<br>
=C2=A0 =C2=A0reach each other.=C2=A0 As the Internet has become more densel=
y<br>
=C2=A0 =C2=A0interconnected, the risk of a misbehaving BGP speaker poses<br=
>
=C2=A0 =C2=A0significant risks to Internet routing.&quot;<br>
<br>
Ok, this is a statement of facts. But:<br>
All BGP speakers requires configuration to establish an EBGP session. When =
doing this configuration, the operator needs to apply the right policy.<br>
But this draft is not helping to solve &quot;the right&quot; policy issue. =
All it requires is an additional configuration key word. This is an improve=
ment but:<br>
- This does not cover configuration mistakes.<br>
- An operator is likely to blindly copy paste the new key word (enable poli=
cy &quot;no filtering&quot;)=C2=A0 as part of configuring the session. In w=
hich case the gain would be minimal<br>
<br>
It&#39;s also not clear to me if we can assume that the operator is a reaso=
nable guy which wants to do the good thing, but failed because of a mistake=
 or an improper configuration tool; or if this operator just does not give =
a damn.<br>
IMHO, given that the guy/company is an operator doing this to get money, I =
would personally opt for the former. In which case, he could be asked and s=
hould be happy to add one single configuration line to enable those new def=
ault behaviors. This alone would address my concern. In addition, as this d=
ocument requires a software upgrade, one could signal this new behavior in =
the BGP Open, such that you could check by yourself.<br>
<br>
<br>
&quot;=C2=A0 =C2=A0This specification intends to improve this situation by =
requiring the<br>
<span class=3D"">=C2=A0 =C2=A0explicit configuration of a BGP import and ex=
port policy for any<br>
=C2=A0 =C2=A0External BGP (EBGP) session such as customers, peers, or<br>
=C2=A0 =C2=A0confederation boundaries for all enabled address families.=C2=
=A0 When this<br>
</span>=C2=A0 =C2=A0solution is implemented, BGP speakers do not accept or =
send routes<br>
=C2=A0 =C2=A0without policies configured on EBGP sessions.&quot;<br>
<br>
That is not part of the problem statement but a summary of the solution. (y=
et, a useful summary as part of the Introduction)<br>
<span class=3D""><br>
<br>
=C2=A0&gt; I find it hard to believe that the Introduction passed through S=
ECDIR,<br>
=C2=A0&gt; RTGDIR, GENART, OPSDIR, and GROW Last Call, and was clear to tho=
se<br>
=C2=A0&gt; involved, yet you indicate that drivers &amp; goals are not clea=
r, I am not<br>
=C2=A0&gt; sure what I can do to further your understanding in that regard.=
<br>
<br>
</span>I find it equally hard that nobody complains on the impact/cost in t=
erm of existing EBGP configuration missing the new required policy, and imp=
act on service provisioning tools (while they are notoriously heavy, expens=
ive and not very flexible).<br>
Plus I&#39;m not saying that this document has no benefit. I&#39;m saying t=
hat it also has cost. And by carefully considering both, we could probably =
find a tradeoff satisfying all parties (that&#39;s my optimistic side, but =
just like anybody I can be wrong)<br>
<br>
<br>
Given my vision of the cost/benefit, in term of solution I think that the b=
elow change would be reasonable tradeoff. At least it would address my main=
 concern:<br>
<br>
OLD:=C2=A0 A BGP speaker MAY provide a configuration option to disable the =
preceding behaviors, but it MUST implement them by default.<br>
NEW: A BGP speaker MUST provide a configuration option to enable the preced=
ing behaviors. Until network/service provisioning are upgraded, it SHOULD b=
e disabled by default. Such provisioning tools should be upgraded soon is o=
rder to prepare for the future new default behavior.<br>
<br>
Optionally, on the solution side:<br>
- I would also support the addition of a BGP capability to signal whether t=
his behavior is enabled or not. This would allow an EBGP peer to reject the=
 EBGP session if the configuration is not acceptable to them. But I can liv=
e without.<br>
- I would prefer that the BGP session be closed, rather than keeping it up =
and not considering the received routes/not sending routes.<br>
<br>
Thanks,<br>
Kind regards,<br>
--Bruno<br>
<br>
=C2=A0&gt; Kind regards,<br>
=C2=A0&gt;<br>
=C2=A0&gt; Job<br>
<span class=3D"im HOEnZb"><br>
______________________________<wbr>______________________________<wbr>_____=
_________________________<wbr>______________________________<wbr>_<br>
<br>
Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc<br>
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler<br>
a l&#39;expediteur et le detruire ainsi que les pieces jointes. Les message=
s electroniques etant susceptibles d&#39;alteration,<br>
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.<br>
<br>
This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;<br>
they should not be distributed, used or copied without authorisation.<br>
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.<br>
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.<br>
Thank you.<br>
<br>
</span><div class=3D"HOEnZb"><div class=3D"h5">____________________________=
__<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--001a11444dcaa6af35054daec8fa--


From nobody Fri Apr 21 08:37:50 2017
Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6460312956C for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:37:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HgyiK4P-QwBX for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:37:46 -0700 (PDT)
Received: from mobil.space.net (mobil.space.net [195.30.115.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0792712956D for <idr@ietf.org>; Fri, 21 Apr 2017 08:37:43 -0700 (PDT)
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id 3D2C460BA1 for <idr@ietf.org>; Fri, 21 Apr 2017 17:37:42 +0200 (CEST)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id 0162A60739; Fri, 21 Apr 2017 17:37:42 +0200 (CEST)
Received: by moebius4.space.net (Postfix, from userid 1007) id F24B821A13; Fri, 21 Apr 2017 17:37:41 +0200 (CEST)
Date: Fri, 21 Apr 2017 17:37:41 +0200
From: Gert Doering <gert@space.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: "bruno.decraene@orange.com" <bruno.decraene@orange.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170421153741.GT25069@Space.Net>
References: <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421124011.mdxpyoijvfh7eus4@Vurt.local> <1334_1492785121_58FA17E1_1334_3109_1_53C29892C857584299CBF5D05346208A31CC4307@OPEXCLILM21.corporate.adroot.infra.ftgroup> <CA+b+ERn1vX_b20CGyNbck+_Gm0Dt=fqnxqWzdqHmHiPKNTWD_Q@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CA+b+ERn1vX_b20CGyNbck+_Gm0Dt=fqnxqWzdqHmHiPKNTWD_Q@mail.gmail.com>
X-NCC-RegID: de.space
User-Agent: Mutt/1.7.2 (2016-11-26)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/1oLKwhZ4PtMV4m5XPjKbTi6gR-0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 15:37:48 -0000

Hi,

On Fri, Apr 21, 2017 at 05:19:28PM +0200, Robert Raszuk wrote:
> Are we really that bad in Internet NOCs ? Do we need configuration
> enforcement and RFCs like this ?

Yes, and yes.

Even if I cannot discern whether this was meant as rhetoric questions - 
the answer is still yes.  If you assume that 40.000 of those ASes have
noone on-site who has any idea how BGP works, you are likely still too
optimistic about the level of understanding out there.

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279


From nobody Fri Apr 21 08:45:35 2017
Return-Path: <nick@foobar.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18A7A129535 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:45:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uVAlMB4qPBhw for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:45:31 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71CCD129528 for <idr@ietf.org>; Fri, 21 Apr 2017 08:45:31 -0700 (PDT)
X-Envelope-To: idr@ietf.org
Received: from cupcake.local (089-101-195156.ntlworld.ie [89.101.195.156] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id v3LFjRe0070629 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 21 Apr 2017 16:45:28 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-195156.ntlworld.ie [89.101.195.156] (may be forged) claimed to be cupcake.local
Message-ID: <58FA2913.8080206@foobar.org>
Date: Fri, 21 Apr 2017 16:45:23 +0100
From: Nick Hilliard <nick@foobar.org>
User-Agent: Postbox 5.0.12 (Macintosh/20170323)
MIME-Version: 1.0
To: Gert Doering <gert@space.net>
CC: Robert Raszuk <robert@raszuk.net>, "bruno.decraene@orange.com" <bruno.decraene@orange.com>, "idr@ietf.org" <idr@ietf.org>
References: <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421124011.mdxpyoijvfh7eus4@Vurt.local> <1334_1492785121_58FA17E1_1334_3109_1_53C29892C857584299CBF5D05346208A31CC4307@OPEXCLILM21.corporate.adroot.infra.ftgroup> <CA+b+ERn1vX_b20CGyNbck+_Gm0Dt=fqnxqWzdqHmHiPKNTWD_Q@mail.gmail.com> <20170421153741.GT25069@Space.Net>
In-Reply-To: <20170421153741.GT25069@Space.Net>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/vcz0X6M3wnWkfa5ScO0uTIDmgkg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 15:45:34 -0000

Gert Doering wrote:
> On Fri, Apr 21, 2017 at 05:19:28PM +0200, Robert Raszuk wrote:
>> Are we really that bad in Internet NOCs ? Do we need configuration
>> enforcement and RFCs like this ?
> 
> Yes, and yes.
> 
> Even if I cannot discern whether this was meant as rhetoric questions - 
> the answer is still yes.  If you assume that 40.000 of those ASes have
> noone on-site who has any idea how BGP works, you are likely still too
> optimistic about the level of understanding out there.

+ yes, and yes again.

I am sick to the back teeth of handling the fallout from unintentional
routing leaks.  Incidentally, in my experience, these are NOC size
invariant - large multinational NOCs are just as likely to leak a DFZ as
tiny rural WISPs, which suggests to me that the problems are inherently
tied to non-sensible defaults.

Vendors please note: your defaults cause continual and serious
operational problems.  This is not ok.

Nick


From nobody Fri Apr 21 08:46:31 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A38EF12954B for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:46:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c1aDfaip1YCu for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:46:28 -0700 (PDT)
Received: from mail-wm0-x22c.google.com (mail-wm0-x22c.google.com [IPv6:2a00:1450:400c:c09::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB775129535 for <idr@ietf.org>; Fri, 21 Apr 2017 08:46:27 -0700 (PDT)
Received: by mail-wm0-x22c.google.com with SMTP id m123so20509180wma.0 for <idr@ietf.org>; Fri, 21 Apr 2017 08:46:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=dd5oGnV8GdGgZd633CIky7JKJO7ezINhW6i82ufdLqo=; b=1dAEh65Qm0ievvd1vq9ROFzu4iSrt5PV7YKm5tHSi1tH+leZC2qbD7RF51FVD7bYQz hO8TwJ96UErwg/g6V8xZye4h2RBXy2DY8ZQK9/HzWR/fkJUNxBjeabQxznFzVQC37MuE uU6Djrcc5BV/0C+M3md7kWH4jCGHxW3WUEQhLI+12K9Ld+V6gPxtyCzOA0r9MpDtqr6D in91UbPqZmcBa9MUXKc66wRltnt++1fcGaGtJiiAlayjT1N0tb1TYBSBATg7oMeCRw1G F97Uyo+iw6KaZEPlQZab6/FogfB7/JTACEIUdBTjA1uy3yl1IZ3GNHzzwzbmqtppQmFt jUHA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=dd5oGnV8GdGgZd633CIky7JKJO7ezINhW6i82ufdLqo=; b=kIQBeQSEVSBOiacMxgA256wH0D95Z9wydfxOlIB8Km3vwVi5FGafhJ5rPlckO1ug0E cuRCJiCDAXPecGr4ENxIos1JdN0VK+WNwtkI/kMK9LT/vnR+nFlG70TU6iUN9Evcf2E6 KKkyDkGdCDXn39PQnFwVapV9gDA1dr6KPdTo1ApTfy7yEJPfCKC5WI/frVUkNa0rAUm7 v1vjo/C8x2QU6IQi5N43B8shn/Ed/lrVPAWk/XxbDdM2mKJ03RCZtM/4aLWJbCxQWLGE G0eEKq5qB+2CGCqmGJ8NKgkrLbCZXudgoe1dE1+fKx5mzoD0Kv8tntwJtbQVTp5dsA4z t4kg==
X-Gm-Message-State: AN3rC/50ReOSL78ggYh8tl9gB4w2+OkitLZVBfBzSa0RfROcBSEpTXTy QNILH0KSEwqjnQ==
X-Received: by 10.80.159.175 with SMTP id c44mr65562edf.45.1492789586171; Fri, 21 Apr 2017 08:46:26 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:154d:67d1:53a6:3be]) by smtp.gmail.com with ESMTPSA id s40sm502880edd.42.2017.04.21.08.46.25 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Apr 2017 08:46:25 -0700 (PDT)
Date: Fri, 21 Apr 2017 17:46:24 +0200
From: Job Snijders <job@instituut.net>
To: Gert Doering <gert@space.net>
Cc: Robert Raszuk <robert@raszuk.net>, "bruno.decraene@orange.com" <bruno.decraene@orange.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170421154624.fxbtupcnthdmls3t@Vurt.local>
References: <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421124011.mdxpyoijvfh7eus4@Vurt.local> <1334_1492785121_58FA17E1_1334_3109_1_53C29892C857584299CBF5D05346208A31CC4307@OPEXCLILM21.corporate.adroot.infra.ftgroup> <CA+b+ERn1vX_b20CGyNbck+_Gm0Dt=fqnxqWzdqHmHiPKNTWD_Q@mail.gmail.com> <20170421153741.GT25069@Space.Net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20170421153741.GT25069@Space.Net>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/KD4VhvWXbKp4V0H7_dwJ3_O87Es>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 15:46:30 -0000

On Fri, Apr 21, 2017 at 05:37:41PM +0200, Gert Doering wrote:
> On Fri, Apr 21, 2017 at 05:19:28PM +0200, Robert Raszuk wrote:
> > Are we really that bad in Internet NOCs ? Do we need configuration
> > enforcement and RFCs like this ?
> 
> Yes, and yes.
> 
> Even if I cannot discern whether this was meant as rhetoric questions
> - the answer is still yes.  If you assume that 40.000 of those ASes
> have noone on-site who has any idea how BGP works, you are likely
> still too optimistic about the level of understanding out there.

Instead of blaming operators, I prefer we assign some work items to
vendors to motivate them to improve their software rather then acept
this scorn. I'd be careful to indulge Robert in his blatant disrespect
for the operational side of the internet.

So perhaps we can rephrase the rethorical question "Are we really that
bad in Internet NOCs" into "Are NOCs forced to work with poor user
interfaces, inconsistency across implementations, and insecure defaults?"
- Yes, they are. Vendors would do well to take same ownership.

Kind regards,

Job


From nobody Fri Apr 21 08:48:41 2017
Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23791129584 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:48:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lnFB7DwkYs-H for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:48:38 -0700 (PDT)
Received: from mobil.space.net (mobil.space.net [195.30.115.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91F2612954D for <idr@ietf.org>; Fri, 21 Apr 2017 08:48:38 -0700 (PDT)
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id E2A6260BAA for <idr@ietf.org>; Fri, 21 Apr 2017 17:48:36 +0200 (CEST)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id 9AC7F60ADF; Fri, 21 Apr 2017 17:48:36 +0200 (CEST)
Received: by moebius4.space.net (Postfix, from userid 1007) id 8C48521AD7; Fri, 21 Apr 2017 17:48:36 +0200 (CEST)
Date: Fri, 21 Apr 2017 17:48:36 +0200
From: Gert Doering <gert@space.net>
To: Job Snijders <job@instituut.net>
Cc: Gert Doering <gert@space.net>, Robert Raszuk <robert@raszuk.net>, "bruno.decraene@orange.com" <bruno.decraene@orange.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170421154836.GU25069@Space.Net>
References: <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421124011.mdxpyoijvfh7eus4@Vurt.local> <1334_1492785121_58FA17E1_1334_3109_1_53C29892C857584299CBF5D05346208A31CC4307@OPEXCLILM21.corporate.adroot.infra.ftgroup> <CA+b+ERn1vX_b20CGyNbck+_Gm0Dt=fqnxqWzdqHmHiPKNTWD_Q@mail.gmail.com> <20170421153741.GT25069@Space.Net> <20170421154624.fxbtupcnthdmls3t@Vurt.local>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="s+S+w46K/2uZ1vVJ"
Content-Disposition: inline
In-Reply-To: <20170421154624.fxbtupcnthdmls3t@Vurt.local>
X-NCC-RegID: de.space
User-Agent: Mutt/1.7.2 (2016-11-26)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/bsBpHoeJJZaZHx_6qGA5SezmDmU>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 15:48:40 -0000

--s+S+w46K/2uZ1vVJ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

On Fri, Apr 21, 2017 at 05:46:24PM +0200, Job Snijders wrote:
> So perhaps we can rephrase the rethorical question "Are we really that
> bad in Internet NOCs" into "Are NOCs forced to work with poor user
> interfaces, inconsistency across implementations, and insecure defaults?"
> - Yes, they are. Vendors would do well to take same ownership.

And this, yes.

(... and I applaud the IOS XR folks for boldly going where no Cisco=20
OS has gone before, and demonstrating that "yes, it can be done!")

Gert Doering
        -- NetMaster
--=20
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279

--s+S+w46K/2uZ1vVJ
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=39sO
-----END PGP SIGNATURE-----

--s+S+w46K/2uZ1vVJ--


From nobody Fri Apr 21 08:54:37 2017
Return-Path: <erosen@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 257D6129528 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:54:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B7cEqSR5RjKx for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 08:54:32 -0700 (PDT)
Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0103.outbound.protection.outlook.com [104.47.41.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 313ED129522 for <idr@ietf.org>; Fri, 21 Apr 2017 08:54:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=tR9iLdxQjpENhvQxaZ/MoqxsoCrifgzkRhoqcewPCzQ=; b=Wc4UeinwQWiuWJs713a4XmspUJNn96y8M7A2/aMv7cSlLd4CLpd6CMsMKDSErtTDPNmW+H/NgQFwqRH57QsT0ymECWoFgVnpmRfXSoZZYzZOJ3JRsdUsVoFtJUBzpV1TT5K7zsVkfC3UG7uzU4HKb50jaVa45YmlUYBYwtNbYJY=
Authentication-Results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.35.36] (66.129.241.12) by BY2PR05MB2184.namprd05.prod.outlook.com (10.166.112.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1061.6; Fri, 21 Apr 2017 15:54:30 +0000
To: "John G. Scudder" <jgs@juniper.net>, <idr@ietf.org>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net>
CC: Hares Susan <shares@ndzh.com>
From: Eric C Rosen <erosen@juniper.net>
Message-ID: <76d50f1f-e009-ab24-9c66-abdd41791dc1@juniper.net>
Date: Fri, 21 Apr 2017 11:54:29 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net>
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR01CA0051.prod.exchangelabs.com (10.172.194.141) To BY2PR05MB2184.namprd05.prod.outlook.com (10.166.112.12)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: f5187cf2-2fb2-49d9-c031-08d488ceb2b9
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:BY2PR05MB2184; 
X-Microsoft-Exchange-Diagnostics: 1; BY2PR05MB2184; 3:IM444QZf5bmKDC9hXCWQ4UkH/+IWxHq/VzCiOP8wdc94XZCmEgzVny+rfyiH9E2XmgkhgeIfuWmDemIYb0NatO+0tVOfQHFBFD252eVwD7Got3xjfVWakGwPFJKGUprBuKw0rDZOSTuddADpDJLqNOGtNQ9NEIu0FBlUEcyB8jb77gO0Xf7g9/NwJNk3O8nG8vyg+S9z223/9jEMZCyCxs8joNA4hg6yo2WrMn9pYBMnQCYPJtS/0KcbFNhVECCt2tue9TbvPRVFSk2HYrYUN+H8uArdHdmlPttrLwaHszhEUF+t5wicsxlWxcIAre163p45CKpeVtAMaC0+qCgIntKc3XOkOoLtlCirAFB/Zpw=; 25:HOP3VzHhW9KEZuYiUX5CsqTf+GfJFFfatLVyamae9hHMEz7KjkcZM2+RYT+RIpMC6oaEjds+GS1DedIdSo2yP5BnoGW8oL2izeEuDuqIhmjJ2VCxxHECJ963VQyOxLPa3iuIaQVzUchdD4lC1lyciv7Xn0Mvf/3Ac4n8rsfg+X3/vSntIgaPA618Y66zuXt+p48vSwphDuUN92D+1wgGCJLyf1ICgPmGooybBTT5/s+gOVBpbLyELia6e1/Z+6LiQGYHT25WT+Z2xswvUbYhjyjAuEvNmdrsLhM3fWMMKbrSyty2MaEgusoDtA7UM8jMTRUyDmNo+4AF+iwIQzAMQ0vJFk5UvQ8cEj8FPqopsjgNe4sfLj9/wvGf6mzD1d0gaksLM7jY2V2M5JR9a1Tqd7W6u9OtToexH4IHBWonQmH1TnlEez3b/qZTsmBbuhVbLopV67ttKQ6VWmzM2Fz1T0Qcm6VONxdFJjQhygbslYs=
X-Microsoft-Exchange-Diagnostics: 1; BY2PR05MB2184; 31:TFroEoqwmCmqtZ1VWgH5SGMACNtXd+D8GqBaL0kJ/dV863qHgpcyJrXmqGq9AyX8dbLPdSDmi49Pwv2fiprkYLomy6vArlUwFkY62I0tFIZiUhjWtdkXYy8NUB9lgfhr2BXfjn/q7KfY5wt+w1w1LJ41l/Z+DL2qsd90VkAwEMppnURH8GiP1ugQFE3QIC32BM5dPVhxLxcW/1brS1GxsiVW4YdU+6GkG9eXJLzUIAE=; 20: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
X-Microsoft-Antispam-PRVS: <BY2PR05MB2184D16978AD70416F494C89D41A0@BY2PR05MB2184.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(120809045254105)(100405760836317);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(20161123562025)(20161123555025)(20161123560025)(20161123564025)(6072148); SRVR:BY2PR05MB2184; BCL:0; PCL:0; RULEID:; SRVR:BY2PR05MB2184; 
X-Microsoft-Exchange-Diagnostics: 1; BY2PR05MB2184; 4:WdT2ijxo+BIZIgXFOAza8t6KIOT91DoGPxfEFi8rORiiABWl4EtCJybxhYp7yi3AoQQ+AjLA+p1JGOzXy68mMWhsoHO8U+eZShBGQUzKVM45huqdsI93ZkpAkz+NpO+iEi6TJ32phF145XwiNAhkh1KHkJFD1PRj/4KmORQF3QXeHfzRyGHJYc4P/Omb439jTlzxqAAxu3fFF/dku4t+Pj9n1nf3wAX692r/bfiR2CfkdPlzH7Bpk4wQcXl6Purz1L9IO4FcsRHUysMSqYtdMSLVPebHjwmGtkzl+PKGG2D3WJLTkR2r9TcTStuM9blQe2z1eM+FGDUwCj8WbtBxc66Ln4E033SFrXs8IKiU88kqrwpa4cdoPtw3SGsPqeixQrSyosjVSvGCjsE33NLOxjVJj+eWNHfbs2dAg0p34hUFP6XfeDcaqd/Xfnlg14DSbo+DT+yUCq+MnSohvM7axE/lamTN91vL6TxqLrzfZF12s8MxZgXp78xr+ab/DPYfG3/W+8g7UUmmlyf38aHpuViDIi580FF8/OGffC/QXthXRV6UEkHnKaXQiqaa/aQYCTXNTDYcebSURV2W0Om1lyeRQy/mwl8fDdT6Bz8oaCkBnzWDT+qkz61R0qNIQ7DP+IgYRd9OXM7h4uNi3QVRiqdcURTWCOa/FeqD5YXluvOWIYrZGhOsQGhJYYM//r7E7VrpUtSyfxQTyFPVcQOvYOWckSg9ruGsc5Nnuaitumioip9i0NLmyolnA6hUi+dtnp+IXxxl+LZEsSAJvUujBiKLwau21zWjhtx19DxOAqspc8J3KXwBqG3rKfvXTKVQ
X-Forefront-PRVS: 02843AA9E0
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(39850400002)(39400400002)(39410400002)(39860400002)(39840400002)(39450400003)(24454002)(377424004)(377454003)(50466002)(31686004)(345774005)(230700001)(23746002)(2950100002)(64126003)(42186005)(86362001)(6246003)(31696002)(53936002)(6306002)(6486002)(77096006)(90366009)(66066001)(38730400002)(230783001)(4001350100001)(189998001)(47776003)(54356999)(76176999)(50986999)(33646002)(25786009)(53546009)(3260700006)(4326008)(305945005)(229853002)(8676002)(1941001)(5660300001)(81166006)(83506001)(2906002)(7736002)(6116002)(3846002)(36756003)(24704002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR05MB2184; H:[172.29.35.36]; FPR:; SPF:None; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?Windows-1252?Q?1; BY2PR05MB2184; 23:RyuUOX0DCkdcsq8qjKwfw66lCk2j9wq6bBufd?= =?Windows-1252?Q?fRa6VtDXulVYfK/iKW1s8jKNhjG/MS6atOsjhyOaN/LCh9Na5JLVrWzS?= =?Windows-1252?Q?aOYfPEAEE2kq3KRXrKlXU7WdnD0xo7sTCBTCPvqvLlRBbM2NYhFL3s+B?= =?Windows-1252?Q?KYairfjJdgSwlV40VVLsQ+3dQP79AyVBG2DZjju3+42vFcANF+O7vcim?= =?Windows-1252?Q?NaO9gTY6e1DZTzTiW3cnWqZIkMkuULzbKiYy8nD5o3LoV+SG/GI2Dffm?= =?Windows-1252?Q?/LFgEZBpNTmSKNsfs0uTZ6Tjw71hXXkCvvZuPDUyklombUqpwxfz9/LH?= =?Windows-1252?Q?OStzzDLVQTDI2LYTKA8H6OB8EACaokU0QjRE5hXLflHxogCaIWwQViQ2?= =?Windows-1252?Q?KbjWtrIS6dp2E5gZp/kPHS5WSzIRwStlXk3j2H8eeP+rp/GlVSLC91Rr?= =?Windows-1252?Q?yPA9dZ2wSMmbSAPsywQlb9KOE8gtlnsZjWf848zf+JaazalG3eo4ze2T?= =?Windows-1252?Q?9Hpe/UY0t2j6ckpjVGC8EqLOT+WvineuR329JgcN1iu26cwsliwmhjUK?= =?Windows-1252?Q?q3o8I4Z6flIDygkgVY/+YCwUyurIno7UD/IEegDsb91r83WBOhQ0KjCV?= =?Windows-1252?Q?Bejhzo9ywKwIsLlZ0eS5tpm42sQhXVHEhm1aJoBE2q/wvn7JOgeA5RIh?= =?Windows-1252?Q?TlkUnZNa26oaorePfD0/fYsIRRymh3yDb50v1LMwsDnOwKSj1EiDIRQS?= =?Windows-1252?Q?MbI78ngQ5aZT3aBvSH8Yq/+r7gG0BRZbBj6Dh/yy5IpctZ+r4GUygZ+o?= =?Windows-1252?Q?VwpTRA64EFgw6o7BT7qbLB9QYjM7G/8nSEjLpgS5aRYk06lDLILSv+9g?= =?Windows-1252?Q?HA5B6UgLtcGAPOb0y3/lpifUUoRNyfRmWykBH/fWhdUnmRDPrriM6Szc?= =?Windows-1252?Q?LSIm99DsnH7bSmqIwgNyL6UDF3SKXduQFXhkQwhZigPqSwS0/g8SwTgh?= =?Windows-1252?Q?FWwdMytbWN2UCJ7DN3yGYcCkstrifANWpxzXZXhiZezKHtrQNoYQmcMs?= =?Windows-1252?Q?jzsi0aIEqdrpbrRMSz77ZwMkNNBqE7nyUtRLuq9p+o7FFPzIe2C3C2hi?= =?Windows-1252?Q?3hf3e8foi29mshRvWLFrMH3ELBlJ8FjlNVYnFL5gFt5OUx+JZ0QzGsiu?= =?Windows-1252?Q?5RZkNDKMMsktJ5a4wPpKsXhWjcm6jo1ULo4co3yYyiaoy/A4wo2XFDoB?= =?Windows-1252?Q?w9As3X2pNYVNxkA0wfmb+Lj9sVEq7gVei1UJq4lajdC+VQQxkzaPyKIY?= =?Windows-1252?Q?LWlh+vAZQfUaSlF1o+Z5JUkBS7QbMNoguQXM6V+hwqsDJn16+0uLaIo1?= =?Windows-1252?Q?CxWkcjscRlo9PWeoKdMFiyeJE3ePS3V5UBxMDuw4C82akJSI8A+gG061?= =?Windows-1252?Q?EXMfNEuBb/BtI9uHzrPpOQ1wpOToFV7YyYYTB9pyg=3D=3D?=
X-Microsoft-Exchange-Diagnostics: 1; BY2PR05MB2184; 6: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; 5:BlpLdDj7ypaiNqDaLjCkf+vngKhlMatUmj80eyNqRpbs0dvncHeDibcTim6jS7odPkQnz5bcoygsnx8td0CEFT5axZ7KedRtMukhni3+ppTr2EpCMV5//8lNPaIW0tNoJnleFDTFpv5AUs0qptOBMA==; 24:H0FXzmLRF9+Fh5In9eo18jb2kp0UDW2GbgVmk3jTrYOxNgV1kWUuTTv7262bEghouFu52yO8sY9pdnwc030hPxctKaaID6jVPz3LdDolbdY=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; BY2PR05MB2184; 7:HUDuBhv88/9ahfFgylEq2O5cGyhFdxFhrVXn+G/NlNVM/mUdHG3SQiAUEulXFjkjUXeXmAV6Zn55TwnDZRUCkKCBT1aePucntfhw2GU1zJ9cZF4kagVFs6B7N/H8L3Th3BThUpDGsv0TtGHIfpCFAd95em0SSe2Itt3gFhYWQq5/eNz6UKw90iA0d8Qw27Jcp3f7IvSLAlkbH8xQI+PGSOecv6DYgJEoBbC6AdZz5OOxklLgP76HVhLilWoDJubGB9ey4lpSg8uY6A6k7+aRqIpmeD5AS2Vlm3CAFegRegY1+ZJjnyppJT3NRBMSjOMf6SWalGvWW+7ngn/+qUCMvg==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Apr 2017 15:54:30.0994 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR05MB2184
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/LUJk_DgWFObVLe-0T8dTZLbJY44>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 15:54:36 -0000

Well, it didn't take long for this thread to reach the point of 
diminishing returns.

FWIW, my take on it is the following.

The document should not be considered to be an update to 4271, as it 
does not change anything 4271 says, and does not update or extend the 
protocol in any way.  Standards track seems entirely inappropriate, as 
there is no protocol specification in it.

The document is not really a Best Current Practices document, as it 
advocates a change from current practice.

The document is okay as an Informational document representing the 
consensus of the GROW WG.  It would be nice if the document indicated 
that it only considers the use of BGP when providing Internet service, 
and does not consider other uses of BGP.  It would also be nice if the 
document indicated that there may be unintended side-effects of changing 
the defaults, but the authors consider those to be of no consequence.




On 4/19/2017 12:49 PM, John G. Scudder wrote:
> IDR folks,
>
> As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has completed GROW WGLC and is now in IETF LC.
>
> As nobody other than Alvaro noticed (thank you for noticing, Alvaro!) draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that it mandates what a BGP implementation MUST do. See section 2 of the draft for the details. It's short and easy to read.
>
> If we had noticed this earlier, we would have either chosen to home the document in IDR, or explicitly made an exception to have GROW do the work. Given that we didn't, though, the plan is to continue progressing the draft as a GROW document. However:
>
> - As I understand it, the authors will add the Updates: 4271 header in addition to potentially taking in other comments from AD review.
> - If anyone has a strong objection to the unusual procedure, please say so (either on-list, or to the chairs + AD).
> - Please send any last call comments to the IETF LC (see below) although it's also OK to discuss here on the IDR list of course.
>
> Many IDR participants are also active in GROW and have had their say, but if you haven't, now's your chance.
>
> Thanks,
>
> --John
>
>> Begin forwarded message:
>>
>> From: The IESG <iesg-secretary@ietf.org>
>> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
>> Date: April 18, 2017 at 5:16:05 PM EDT
>> To: "IETF-Announce" <ietf-announce@ietf.org>
>> Cc: grow-chairs@ietf.org, grow@ietf.org, draft-ietf-grow-bgp-reject@ietf.org, christopher.morrow@gmail.com
>> Reply-To: ietf@ietf.org
>>
>>
>> The IESG has received a request from the Global Routing Operations WG
>> (grow) to consider the following document:
>> - 'Default EBGP Route Propagation Behavior Without Policies'
>> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>>
>> The IESG plans to make a decision in the next few weeks, and solicits
>> final comments on this action. Please send substantive comments to the
>> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments may be
>> sent to iesg@ietf.org instead. In either case, please retain the
>> beginning of the Subject line to allow automated sorting.
>>
>> Abstract
>>
>>   This document defines the default behavior of a BGP speaker when
>>   there is no import or export policy associated with an External BGP
>>   session.
>>
>>
>> The file can be obtained via
>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>>
>> IESG discussion can be tracked via
>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>>
>> This IETF LC, which originally concluded on 2017-04-18, is being
>> extended to allow for additional input to be provided. Ops AD (for GROW)
>> and Routing AD (for IDR) wish to ensure that cross WG discussions have
>> had a chance to occur.
>>
>> No IPR declarations have been submitted directly on this I-D.
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr


From nobody Fri Apr 21 09:01:41 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9821412786A for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:01:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.698
X-Spam-Level: 
X-Spam-Status: No, score=-1.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2DQUYx6kXks2 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:01:38 -0700 (PDT)
Received: from mail-io0-x229.google.com (mail-io0-x229.google.com [IPv6:2607:f8b0:4001:c06::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3AD55127735 for <idr@ietf.org>; Fri, 21 Apr 2017 09:01:38 -0700 (PDT)
Received: by mail-io0-x229.google.com with SMTP id r16so119238247ioi.2 for <idr@ietf.org>; Fri, 21 Apr 2017 09:01:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=olqWVvSvKQfKkFbhpgk/S5D06JoNkATMUMU5/CUM270=; b=nNzWh8NkeOOBF5eImxqs7KA8Binfzberl+sCfGWFqnwWNNVOW9ZP4kRpWyLOitc6gV ZB2wc8OqD8pBuSfQmrqMBOd+FdOZP1gZu3yuEy8sOCQ+sfv8a7PHO4kYLs8yuyg0WAja kKwqs2Ou2UPgdlmSMfGIGE0gwMQoMlPDHpzDD5saaB+Omy/Xi1SLfKmeL8vGcG6LwUSq 4ZasFd5SGZyhH1f6Lbr1Q/kKGou68GDtm2agn5OZ/oCyt99H8XNUevluUBu2lC1npWp+ F3zhqTtfPWCggVSNVrroPLeW6vAIozMS3oBqH47N0jfoW69y8+9dZf8afDQTcqJTf7Tf Hutw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=olqWVvSvKQfKkFbhpgk/S5D06JoNkATMUMU5/CUM270=; b=oVTK/cIxHga5gqljg2LFx5E/bHvZg0HIKv/jNFsuiKep8I0Ll65us+WjKCHmFWncY4 CCbiVIjjk+7myYlO7w/qNI3KAu2xBzdZdcbrL6InKWEiFqYgV6XgAMqVoe8VawaVvScA Nxm1F4TeLK63lSxmRcengnvjnfepF/Fzm5DZBPgS7lGzUXvwfijTi5LoeBl46FIsuoXP 448MWi9Y4uCYy/T8RQRvwcBSiJ1iZ/CVg8hVRgRdecpYnuY9hLi3QMRlIMPNflx/ZHbH hTt5jBcDB1XBoEGp3gTJE+BjQkOCAYh+X0NCt6t+W9NQwFzqsADVTq4hfLtpLomM8Qnn wvTw==
X-Gm-Message-State: AN3rC/7+zOBt1e15+4eAilKZPcRrfq9/e2HpWlnzvi1X+NtIT+Zwfqp0 EeQzwVNppxLjYB1R77HHJ4nUfCZDc2gr
X-Received: by 10.107.140.10 with SMTP id o10mr17512665iod.139.1492790422917;  Fri, 21 Apr 2017 09:00:22 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Fri, 21 Apr 2017 09:00:21 -0700 (PDT)
Received: by 10.79.170.4 with HTTP; Fri, 21 Apr 2017 09:00:21 -0700 (PDT)
In-Reply-To: <20170421153741.GT25069@Space.Net>
References: <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421124011.mdxpyoijvfh7eus4@Vurt.local> <1334_1492785121_58FA17E1_1334_3109_1_53C29892C857584299CBF5D05346208A31CC4307@OPEXCLILM21.corporate.adroot.infra.ftgroup> <CA+b+ERn1vX_b20CGyNbck+_Gm0Dt=fqnxqWzdqHmHiPKNTWD_Q@mail.gmail.com> <20170421153741.GT25069@Space.Net>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 21 Apr 2017 18:00:21 +0200
X-Google-Sender-Auth: MH_JoZtezdmueDbbTrP5jw_5De8
Message-ID: <CA+b+ER=5+nwTZLLu7WsU47q0JN=qA8YqU8BfgRve7C-=k1tDmA@mail.gmail.com>
To: Gert Doering <gert@space.net>
Cc: idr wg <idr@ietf.org>, bruno.decraene@orange.com
Content-Type: multipart/alternative; boundary=94eb2c06084ce1dd7e054daf5a34
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/bW5t6ybGbIGFBKLlKgkigkMKXm0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 16:01:40 -0000

--94eb2c06084ce1dd7e054daf5a34
Content-Type: text/plain; charset=UTF-8

Gert & Nick

Your answer perfectly proves that what we need is education on how to write
proper BGP policy.

Enforcing by RFC someting which everyone else considers a big secret and
private data is and will be of no solution to the root of the problem.

I am to proceed with this draft fwd if in the same time in the draft itself
we document what proper bgp policy is.

Otherwise it is like enforcing something which those who (in spite of their
good intentions) do not do today will continue not doing tomorrow.

Cheers
R.

On Apr 21, 2017 17:37, "Gert Doering" <gert@space.net> wrote:

> Hi,
>
> On Fri, Apr 21, 2017 at 05:19:28PM +0200, Robert Raszuk wrote:
> > Are we really that bad in Internet NOCs ? Do we need configuration
> > enforcement and RFCs like this ?
>
> Yes, and yes.
>
> Even if I cannot discern whether this was meant as rhetoric questions -
> the answer is still yes.  If you assume that 40.000 of those ASes have
> noone on-site who has any idea how BGP works, you are likely still too
> optimistic about the level of understanding out there.
>
> Gert Doering
>         -- NetMaster
> --
> have you enabled IPv6 on something today...?
>
> SpaceNet AG                        Vorstand: Sebastian v. Bomhard
> Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
> D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
> Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279
>

--94eb2c06084ce1dd7e054daf5a34
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Gert &amp; Nick<div dir=3D"auto"><br></div><div dir=3D"au=
to">Your answer perfectly proves that what we need is education on how to w=
rite proper BGP policy.</div><div dir=3D"auto"><br></div><div dir=3D"auto">=
Enforcing by RFC someting which everyone else considers a big secret and pr=
ivate data is and will be of no solution to the root of the problem.</div><=
div dir=3D"auto"><br></div><div dir=3D"auto">I am to proceed with this draf=
t fwd if in the same time in the draft itself we document what proper bgp p=
olicy is.</div><div dir=3D"auto"><br></div><div dir=3D"auto">Otherwise it i=
s like enforcing something which those who (in spite of their good intentio=
ns) do not do today will continue not doing tomorrow.</div><div dir=3D"auto=
"><br></div><div dir=3D"auto">Cheers</div><div dir=3D"auto">R.</div></div><=
div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Apr 21, 2017 17=
:37, &quot;Gert Doering&quot; &lt;<a href=3D"mailto:gert@space.net">gert@sp=
ace.net</a>&gt; wrote:<br type=3D"attribution"><blockquote class=3D"gmail_q=
uote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1e=
x">Hi,<br>
<br>
On Fri, Apr 21, 2017 at 05:19:28PM +0200, Robert Raszuk wrote:<br>
&gt; Are we really that bad in Internet NOCs ? Do we need configuration<br>
&gt; enforcement and RFCs like this ?<br>
<br>
Yes, and yes.<br>
<br>
Even if I cannot discern whether this was meant as rhetoric questions -<br>
the answer is still yes.=C2=A0 If you assume that 40.000 of those ASes have=
<br>
noone on-site who has any idea how BGP works, you are likely still too<br>
optimistic about the level of understanding out there.<br>
<br>
Gert Doering<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 -- NetMaster<br>
--<br>
have you enabled IPv6 on something today...?<br>
<br>
SpaceNet AG=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 Vorstand: Sebastian v. Bomhard<br>
Joseph-Dollinger-Bogen 14=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Aufsichtsratsvo=
rs.: A. Grundner-Culemann<br>
D-80807 Muenchen=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0HRB: 136055 (AG Muenchen)<br>
Tel: +49 (0)89/32356-444=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0USt-IdNr.:=
 DE813185279<br>
</blockquote></div></div>

--94eb2c06084ce1dd7e054daf5a34--


From nobody Fri Apr 21 09:03:15 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22FDB12878D for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:03:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FZLnaFUfEVDU for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:03:11 -0700 (PDT)
Received: from mail-wm0-x231.google.com (mail-wm0-x231.google.com [IPv6:2a00:1450:400c:c09::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C1BA129481 for <idr@ietf.org>; Fri, 21 Apr 2017 09:03:10 -0700 (PDT)
Received: by mail-wm0-x231.google.com with SMTP id r190so20912857wme.1 for <idr@ietf.org>; Fri, 21 Apr 2017 09:03:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=09+ZbVlxktLnrVRkXL5Oh5eg6JCn1ERmE2saSquh86g=; b=PSHXfceWApR1oFJB2MN+1KLTQnI/6pgzDZtPjuksRXKCXwjCBh1uQeSiF3aEGgaCzw 4Vvic6Hmw9T30d/5vaJ8Q9/ProjNmGDZnvtAjatA/ljvR1HRSxCh7WEgKdxQ9zL9LdQ6 0YOTvTq5xwwWb75UWSwDP+IXkBNtPXai6X0Q9Q9dbdiY1pPo9Bg7Le3n8COyP/6OR0UR 4i7JHovmc4P38gLBqqhgiCAeZKx6KrG/PAV5Z1JyKH/jad/x04guBgbk5ZrHS1gL+Fzj iIvpw++hOlngfcdevVHqjh1NtEDYZaSZZdid9ZIrWsLQi7Ikv7MlW3BJ4l7P1WfT8Wwz rCmg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=09+ZbVlxktLnrVRkXL5Oh5eg6JCn1ERmE2saSquh86g=; b=We+bf2DKmBVebZ3IF4BCSw1eOfph3xbI2B1foHyTEw9rdL5iv2A7dbp2zkIOptc++/ oBx/t4OgQU/8wcrGP3SEhsdNIjPUswckEaMNfaG338ibVi6TW/kGl4a03u0GgHQsXwst Mq51S2KgtieAooY846+YpQltK8/UR8z4pErD2cIHhM3YyzCFozbakwaBGvfrdV3z4GYH RGymMFhAEloAbGOnsLKg1sbuiKcUivz6VFEHlnB7OTBzB6UZ+V4GJKGA5rE2PAq6DdCF 5///7umuOfTCUsIg0GQXCvz217H8qbFL6UGgO6z6zUeOhS4JnMhdxctYGGIJ4klV8Xrt fL9g==
X-Gm-Message-State: AN3rC/6PWl9XCYK4lnibB9WVsaQJiRvKGNgmEdb9lnGG4nwo4/NDuZrj 9GL0E+4wUbt5Uw==
X-Received: by 10.80.148.123 with SMTP id q56mr64688eda.58.1492790588847; Fri, 21 Apr 2017 09:03:08 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:154d:67d1:53a6:3be]) by smtp.gmail.com with ESMTPSA id m53sm505352edc.29.2017.04.21.09.03.07 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Apr 2017 09:03:07 -0700 (PDT)
Date: Fri, 21 Apr 2017 18:03:07 +0200
From: Job Snijders <job@instituut.net>
To: bruno.decraene@orange.com
Cc: Eric C Rosen <erosen@juniper.net>, Tony Przygienda <tonysietf@gmail.com>,  Brian Dickson <brian.peter.dickson@gmail.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170421160307.64hzidhsigvuw4as@Vurt.local>
References: <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <19977_1492775899_58F9F3DB_19977_3102_1_53C29892C857584299CBF5D05346208A31CC3DAC@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421124011.mdxpyoijvfh7eus4@Vurt.local> <1334_1492785121_58FA17E1_1334_3109_1_53C29892C857584299CBF5D05346208A31CC4307@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1334_1492785121_58FA17E1_1334_3109_1_53C29892C857584299CBF5D05346208A31CC4307@OPEXCLILM21.corporate.adroot.infra.ftgroup>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/9dD6iBZvkoK1V2OxgCyL5AwLHdE>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 16:03:14 -0000

On Fri, Apr 21, 2017 at 02:32:01PM +0000, bruno.decraene@orange.com wrote:
>  > From: Job Snijders [mailto:job@instituut.net]  > Sent: Friday, April 21, 2017 2:40 PM
> > EBGP Route Propagation Behavior Without Policies) to Proposed Standard
>  > 
>  > On Fri, Apr 21, 2017 at 11:58:18AM +0000, bruno.decraene@orange.com wrote:
>  > > > From: Job Snijders [mailto:job@instituut.net]  > Sent: Friday, April 21, 2017 11:02 AM
>  > >  > You create a false dilemma stating that it is not clear to you
>  > >  > whether this is a "requirement draft or a solution draft",
>  > >
>  > > That editorial point should be easy to address.
>  > >
>  > > > and that those need to be separate.
>  > >
>  > > I've not said that.
>  > 
>  > The use of the word 'or' in your sentence """it's not clear whether this
>  > draft is a requirement draft or a solution draft.""" led me to believe
>  > that you assert the two are mutually exclusive. Furthermore, from the
>  > context it appears that you recommend to abandon 'bgp-reject', start
>  > over with a requirements document, and then see what happens. If this is
>  > not the case please elaborate, and accept my apologies for interpreting
>  > it as I did.
> 
> Thanks for the clarification. 
> On my side, I don't think that there is a need for a dedicated problem
> statement document. IMHO the place for this problem statement is in
> the Introduction section of you document.
>  
>  > >  > Did you review Alvaro's suggested changes which prompted the third IDR
>  > >  > consultation on this topic? They are viewable here:
>  > >  >
>  > >  >     http://htmlpreview.github.io/?https://github.com/jaredmauch/draft-mauch-bgp-reject/blob/alvaro/draft-ietf-grow-bgp-reject-06-from-5.diff.html
>  > >
>  > > I was discussing the current version of the draft and comments sent on
>  > > the mailing list (e.g less than 24 hours ago, one author commented
>  > > that it does not believe that this document should be changed to
>  > > update RFC 4271: " I believe that Alvaro is wrong in the presumption
>  > > this document updates 4271. ".
>  > > I was not aware of this private repository. Indeed, this candidate
>  > > version is significantly different than the public one.
>  > 
>  > The link to the publicly available private repository was meant as a
>  > convenience to you and the WG. It is a verbatim repetition of Alvaro's
>  > suggestions which were emailed to idr@ on April 18th. I hoped to make
>  > Alvaro's comments easier to read by creating the HTML rfcdiff. Did you
>  > perhaps miss that message?
>  > 
>  >     https://mailarchive.ietf.org/arch/msg/idr/gU6sk8yrC3uF7aLERwnDh2cuFP4
>  
> I had read Alvaro's email.
> What I had missed is the link to the private repository, and then its meaning. I had though (apparently incorrectly, sorry for this) that this were the candidate -06 that authors were working on. i.e. the latest "current" status of the draft. From your above clarification, this is not, and -05 is the latest version.
>  
>  > >  > I'm disappointed that you've taken a CLI example I've provided as
>  > >  > the sole driver behind this effort. I did not mean to offer the CLI
>  > >  > example as an exhaustive list of reasons.
>  > >
>  > > That this incorrect: I've commented on this driver, plus the ones
>  > > indicated in the draft. What's missing has been authors' answer for
>  > > those requests for clarification.  For the third time, could authors
>  > > please document in the draft the drivers and the goal(s) that this
>  > > document aims at achieving. Then we'll be able to take into account
>  > > all drivers, plus authors will get IDR attention to their operational
>  > > feedback. Should be win-win.
>  > 
>  > Please review the Introduction section of draft-ietf-grow-bgp-reject-05.
>  > 
>  > Should you fail to identify drivers and goals in that section, can you
>  > elaborate what it is you do read in that section?
> 
> I had tried in https://mailarchive.ietf.org/arch/msg/idr/9Qn2bHQw1QIruWMCJIoEN0Z-qC4 but can try again below
> 
> 
> "   There are BGP routing security issues that need to be addressed to make the Internet more stable."
> Agreed, but not very specific. At least this does not present the specific points that this document wants to address/solve. (believe me, I wish you would address all BGP routing security issues but we probably do not want to put the bar too high, as it would be too hard to succeed)
> 
> "  Route leaks [RFC7908] are part of the  problem, but software defects or operator misconfigurations can  contribute too."
> - I agree that route leak is an important issue. But they seem to be already worked on by draft-ymbk-idr-bgp-open-policy or draft-ietf-idr-route-leak-detection-mitigation. Plus this document is not a general solution to route leak, so this is also not the point that this document wants to address (because otherwise, it failed)
> - Software defect won't probably be addressed by this proposal.
> - Misconfiguration won't probably be addressed by this proposal. In particular no effort is made to ensure that the export/import policy is good/correct.
> 
> "   Many deployed BGP speakers send and accept any and all route
>    announcements between their BGP neighbors by default.  This practice
>    dates back to the early days of the Internet, where operators were
>    permissive in sending routing information to allow all networks to
>    reach each other.  As the Internet has become more densely
>    interconnected, the risk of a misbehaving BGP speaker poses
>    significant risks to Internet routing."
> 
> Ok, this is a statement of facts. But:
> All BGP speakers requires configuration to establish an EBGP session. When doing this configuration, the operator needs to apply the right policy.
> But this draft is not helping to solve "the right" policy issue. All it requires is an additional configuration key word. This is an improvement but:
> - This does not cover configuration mistakes.
> - An operator is likely to blindly copy paste the new key word (enable policy "no filtering")  as part of configuring the session. In which case the gain would be minimal
>  
> It's also not clear to me if we can assume that the operator is a reasonable guy which wants to do the good thing, but failed because of a mistake or an improper configuration tool; or if this operator just does not give a damn.
> IMHO, given that the guy/company is an operator doing this to get money, I would personally opt for the former. In which case, he could be asked and should be happy to add one single configuration line to enable those new default behaviors. This alone would address my concern. In addition, as this document requires a software upgrade, one could signal this new behavior in the BGP Open, such that you could check by yourself.
> 
> 
> "   This specification intends to improve this situation by requiring the
>    explicit configuration of a BGP import and export policy for any
>    External BGP (EBGP) session such as customers, peers, or
>    confederation boundaries for all enabled address families.  When this
>    solution is implemented, BGP speakers do not accept or send routes
>    without policies configured on EBGP sessions."
> 
> That is not part of the problem statement but a summary of the solution. (yet, a useful summary as part of the Introduction)
> 
>  
>  > I find it hard to believe that the Introduction passed through SECDIR,
>  > RTGDIR, GENART, OPSDIR, and GROW Last Call, and was clear to those
>  > involved, yet you indicate that drivers & goals are not clear, I am not
>  > sure what I can do to further your understanding in that regard.
> 
> I find it equally hard that nobody complains on the impact/cost in term of existing EBGP configuration missing the new required policy, and impact on service provisioning tools (while they are notoriously heavy, expensive and not very flexible).
> Plus I'm not saying that this document has no benefit. I'm saying that it also has cost. And by carefully considering both, we could probably find a tradeoff satisfying all parties (that's my optimistic side, but just like anybody I can be wrong)
> 
> Given my vision of the cost/benefit, in term of solution I think that the below change would be reasonable tradeoff. At least it would address my main concern:
> 
> OLD:  A BGP speaker MAY provide a configuration option to disable the preceding behaviors, but it MUST implement them by default.
> NEW: A BGP speaker MUST provide a configuration option to enable the preceding behaviors. Until network/service provisioning are upgraded, it SHOULD be disabled by default. Such provisioning tools should be upgraded soon is order to prepare for the future new default behavior.

Your comments are helpful. While I think I understand the intent of the
NEW text I have trouble envisioning how this would work for all vendors,
and as such so far the authors have been consistent in leaving out
implementation guidance and implementation specific procedures. I
believe that each vendor will have its own path towards compliance,
should they choose to conform.

However, through this thread it has become clear some representatives of
some vendors lack the creativity to formulate a path towards compliance,
and we'll take this lack of imagination as a plea for help. I will take
this suggestion under advisement and try to improve upon it.

The risk here is that an already compliant implementation, or an
implementation that intends to become compliant through a major version
bump in the release notes, may feel that the suggested path towards
compliance does not conform to their path, and therefor reject the
suggestion. 

BTW, did you mean to use the draft-farrel-soon-05 definition of "soon"
in the NEW text? ;-)

> Optionally, on the solution side:
> - I would also support the addition of a BGP capability to signal
> whether this behavior is enabled or not. This would allow an EBGP peer
> to reject the EBGP session if the configuration is not acceptable to
> them. But I can live without.

Introducing a new capability for this specific seems to impose
additional work on implementations which are already compliant. Perhaps
a more generalised mechanism should be introduced that stands apart from
this draft, one where the BGP speaker signals the version of the
software it is running, or sends a list of all RFCs it is compliant
with. 

> - I would prefer that the BGP session be closed, rather than keeping
> it up and not considering the received routes/not sending routes.

I can see how different people would have different preferences in that
regard, however I'd like to add to the context that a 'session up and
not using received routes / not announcing routes' is a very common
debugging tool in itself. I myself have often times reduced a neighbor's
configuration to the bare minimum to debug issues. If you ask around in
GROW I think you'll find that 'up + reject' is a better starting point
for most operators then 'down'.

Kind regards,

Job


From nobody Fri Apr 21 09:19:27 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1760012954B for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:19:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9gDX3MbSgSqL for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:19:24 -0700 (PDT)
Received: from mail-wm0-x22e.google.com (mail-wm0-x22e.google.com [IPv6:2a00:1450:400c:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35C9A126E3A for <idr@ietf.org>; Fri, 21 Apr 2017 09:19:24 -0700 (PDT)
Received: by mail-wm0-x22e.google.com with SMTP id r190so21260328wme.1 for <idr@ietf.org>; Fri, 21 Apr 2017 09:19:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=M322u1OJoifgJwiMl/eM1IsFjHIhXAS9lXPkCV9U27Q=; b=uJjPYzVb9SM7kWf66+WSMDHmYt2ki9C06vJT6Nk5dmH94PZWn6/h3hQs6e+e+uOqzW L80fIOsShw13QJ8FX9TXBYoGsL0zaQ37YK9r9n4G6RwMIc6p59d9cbMtJrQAvMF1vxfZ vqqLmvgwWq4v0Ann1v0L9NhllEmcGbRfjIo6F4cJi4vB2Jy43nRHccGph5eF4I/f3YHk l0yoA5Od89l3pQ00GYLGrPvgKvzNFyWGRshFePuvn9GT3cQrSgTibsXcp016/K/WsjYr k18vR6pJDh8qw/hMA/5qtA8miXKqP97NEN4BAbyvNz+13YWMyTE9UA3huZvK2bAjUXcY U+Tg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=M322u1OJoifgJwiMl/eM1IsFjHIhXAS9lXPkCV9U27Q=; b=eS3ESx1kP0qm54ALfosGU9DIZw669Ag5/pHVVlLHTIc0ikaEAhKWLE50/bFO37GAg9 8EhCxi1AWA9gvJy27NQv/2FWECRHVymTVJL7oR2lBJmFA3xUO8tiSx0FNKpKAYE4u4oP dKlmEJ8oMDJhHjXd/gTWulxPVnyyjBkbkKT+kcJ52yikT0FOlBpgkDesp4Rb1Gi+hUE3 dN43EU+/DM/UtG1//gc3ddCAZiZEE0IaG53Ub7xsfJLgrTt3MgG+Hk1uShNySgBWhZ5j HiwqEe8yxGOtqaq4o7L6/Kftk6xilVEJNsEuL+ZP0hJUTnpkvBn0CjmV5UCoFy12xG85 KV2g==
X-Gm-Message-State: AN3rC/7SE8s/1PsXHUjk8pcjTtscONPZRgV6+iRKMY0/zzb0c2jPH6G0 b9Mv7BMS5SLLhg==
X-Received: by 10.80.179.148 with SMTP id s20mr68434edd.100.1492791562546; Fri, 21 Apr 2017 09:19:22 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:154d:67d1:53a6:3be]) by smtp.gmail.com with ESMTPSA id c6sm517480eda.15.2017.04.21.09.19.21 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Apr 2017 09:19:21 -0700 (PDT)
Date: Fri, 21 Apr 2017 18:19:20 +0200
From: Job Snijders <job@instituut.net>
To: Eric C Rosen <erosen@juniper.net>
Cc: "John G. Scudder" <jgs@juniper.net>, idr@ietf.org, Hares Susan <shares@ndzh.com>
Message-ID: <20170421161920.jdgrzm6bkrm27xim@Vurt.local>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <76d50f1f-e009-ab24-9c66-abdd41791dc1@juniper.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <76d50f1f-e009-ab24-9c66-abdd41791dc1@juniper.net>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/PScKZRafAy4PR0yVyHhMRZ9kP64>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 16:19:26 -0000

On Fri, Apr 21, 2017 at 11:54:29AM -0400, Eric C Rosen wrote:
> Well, it didn't take long for this thread to reach the point of
> diminishing returns.

As is often the case when people engage in polemic debate.

> FWIW, my take on it is the following.
> 
> The document should not be considered to be an update to 4271, as it
> does not change anything 4271 says, and does not update or extend the
> protocol in any way.  Standards track seems entirely inappropriate, as
> there is no protocol specification in it.

The Area Director and the IDR Chairs believe that the document actually
should update 4271, and the next version of this document will be an
attempt to codify that. Some of the authors expressed concerns, but we
are never the less willing to put in the work.

Should you be interested in how an update to 4271 could be formulated,
please take a look at:

    http://htmlpreview.github.io/?https://github.com/jaredmauch/draft-mauch-bgp-reject/blob/alvaro/draft-ietf-grow-bgp-reject-06-from-5.diff.html

> The document is not really a Best Current Practices document, as it
> advocates a change from current practice.

Eric, you fail to acknowledge that already today, in widely deployed
software, a myriad of behaviours exist in this regard. There is no
"current practice".

> The document is okay as an Informational document representing the
> consensus of the GROW WG.  It would be nice if the document indicated
> that it only considers the use of BGP when providing Internet service,
> and does not consider other uses of BGP.  It would also be nice if the
> document indicated that there may be unintended side-effects of
> changing the defaults, but the authors consider those to be of no
> consequence.

Your concern is noted.

Kind regards,

Job


From nobody Fri Apr 21 09:22:53 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BFC2F12946D for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:22:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iKhuaT-m8mpj for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:22:49 -0700 (PDT)
Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6FB80129A92 for <idr@ietf.org>; Fri, 21 Apr 2017 09:22:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3164; q=dns/txt; s=iport; t=1492791764; x=1494001364; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=dfXS+cMx1Nq/ktD34QDxGmOINIHt/yA0HHW/6tPksXs=; b=DSG/4jxcZ8jnlGEc0Z5mLR+pCOlv8Yu/WwLsvrItnEgqEETFBznaM31y ohQOtdicIWNQ6sTvOpgVot7zvLOQXEEAqIizfULV4Z/9R8eS/MfSNjC2p ndrOnicpBar0b6hxCZlju36p1Xl32ayxOAO8T+w27IUPq7ZZa8oYqg3Lt A=;
X-IronPort-AV: E=Sophos;i="5.37,230,1488844800"; d="scan'208";a="233990791"
Received: from alln-core-5.cisco.com ([173.36.13.138]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 21 Apr 2017 16:22:43 +0000
Received: from [10.82.178.208] ([10.82.178.208]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id v3LGMf2E019826; Fri, 21 Apr 2017 16:22:42 GMT
To: Job Snijders <job@instituut.net>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local>
Cc: bruno.decraene@orange.com, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com>
Date: Fri, 21 Apr 2017 09:22:41 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <20170421095839.sralcy7aos5mzzic@Vurt.local>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/DWFUdNvzrzv60e6NKbcRL2fiJoE>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 16:22:52 -0000

Job,

IMO the most important point from the discussion is that any BGP extension
or behavior change must be backward compatible, which this document is lacking
or even missing.  After more than 20 years of BGP deployment, the world is no
longer "green field" any more.

Regards,  -- Enke

On 4/21/17 2:58 AM, Job Snijders wrote:
> On Fri, Apr 21, 2017 at 09:18:24AM +0000, bruno.decraene@orange.com wrote:
>>  > 
>>  > So, going forward, any IDR proposal that requires a change to any
>>  > provision system is a no-go?
>>  
>> It's not about a no-go. It's about understanding and considering the
>> tradeoffs.
> 
> Bruno, through this thread I have learned:
> 
>     - Release notes are not read, and it is unreasonable to expect
>       people to read them.
>     - Software will not be tested prior to deployment, not even to see
>       whether it boots.
>     - We cannot expected staggered software deployments, people will
>       upgrade all their BGP speakers at the same time (again, without
>       testing the software).
>     - Any change to a provisioning system is an insurmountable
>       imposition.
> 
> I'm sure you appreciate how these new insights will affect all future
> IDR work. I assure you that if such weak rethoric continues to be
> admitted as valid justifications for lethargy, this will affect IDR's
> productivty the coming years.
> 
> If you want to play the game of 'tradeoffs have to be made', I have not
> seen any appreciation in this thread for the cost on the Internet as a
> whole resulting from insecure defaults. Robert Raszuk even went as far
> to argue that we'd be doing the "little guys" (surely that was not meant
> in a belligerent way) a favor by allowing insecure defaults to persist. 
> 
> I theorize that for instance this outage was the result of a 'fail open'
> rather then 'fail closed' (as proposed in bgp-reject) implmentation
> choice. See https://www.theregister.co.uk/2015/06/12/level_3_down_after_routing_through_malaysia_like_idiots/
> or https://bgpmon.net/massive-route-leak-cause-internet-slowdown/
> 
> Outages like these affect everyone, whether they were a directly
> involved party or indirectly involved. Did you notice this event in your
> own network? Or perhaps you did notice it because payment terminals in
> some countries stopped working?
> 
> The BGP Default-Free Zone is composed of roughly 55,000 autonomous
> systems operated by as many organisations, who are densily
> interconnected with each other through milions of EBGP sessions. When DC
> equipment is connected to Internet, or when a CLI-style makes accidents
> easy, or when a lack of education results in a common misconfiguration,
> there should be checks and balances in place to dampen the negative
> effects on the Internet as a whole. The Internet Engineering Task Force
> (notice the 'Internet' in IETF) has a responsiblity to promote and
> define safe and secure default behaviours.
> 
> Kind regards,
> 
> Job
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
> 


From nobody Fri Apr 21 09:28:34 2017
Return-Path: <erosen@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3643F129A91 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:28:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.022
X-Spam-Level: 
X-Spam-Status: No, score=-2.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5MPg6AaIVpDq for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:28:31 -0700 (PDT)
Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0134.outbound.protection.outlook.com [104.47.36.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB66812778D for <idr@ietf.org>; Fri, 21 Apr 2017 09:28:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=2pHYIirhIfSfraobyKZr3PCFS49fnJRRQY1CYjN1JlY=; b=MugqjZAq8atilPBaCr3xFRos0/RRIhtGrpSpbnp5IqxXHwqYmiqDYIU8Q9akbCpECZlvxRwI0gw/KnsLsOS6P6ibB7JkdUZkNsYqlLElmufpKuFam1QQcQ9CI6m0HuwAzk6CVb4AWA9xrURTobbMQKYsBNPEIjjGmyOQYQ4u4sE=
Authentication-Results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.35.36] (66.129.241.12) by SN1PR05MB2190.namprd05.prod.outlook.com (10.169.124.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Fri, 21 Apr 2017 16:28:28 +0000
To: Job Snijders <job@instituut.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <76d50f1f-e009-ab24-9c66-abdd41791dc1@juniper.net> <20170421161920.jdgrzm6bkrm27xim@Vurt.local>
CC: "John G. Scudder" <jgs@juniper.net>, <idr@ietf.org>, Hares Susan <shares@ndzh.com>
From: Eric C Rosen <erosen@juniper.net>
Message-ID: <b8ed9414-0418-d7b2-3894-76474c88d463@juniper.net>
Date: Fri, 21 Apr 2017 12:28:28 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <20170421161920.jdgrzm6bkrm27xim@Vurt.local>
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BN6PR1601CA0022.namprd16.prod.outlook.com (10.172.104.160) To SN1PR05MB2190.namprd05.prod.outlook.com (10.169.124.138)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: a43d5e84-edd0-40fe-1474-08d488d3717f
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:SN1PR05MB2190; 
X-Microsoft-Exchange-Diagnostics: 1; SN1PR05MB2190; 3:WszfFLLWg8Sk4puDmgDKu7FDpWumWjA6yl0MH1fGhKk4So4o2fHYmpU9EllwoDY88KfuDroGijp0qPbg0JAs4xIPX2MvPc8AytPXK7mJXUbeK+h/tN5iXkjvirF9bL8v5gvmiwTNvszr15J7RHVyXBhjvpnY+UXLP2wJ6X1vehvmnTazezUW0xVRq2u7XLuwaLVJnJWr6vlmrKGxA7I7ul//MsfyDBYi3k/g6c+HQ5TYqxnlemgS4yEIpdAEyxKB96/3Xev69BFGOIUwMuv05dw87wfx+5BVRWtPbhH4c1nmWZua5P0UKQXXbYziJv3AKkZeLmPOMsQpoivgmF7ZJacW28AM97EVKa0cphoAGMs=; 25:a3MsMtLepO7OJaAWxOhAersQRr10wzXFJ/V0rUxZ8r3aPvrcs7EXJ8P0pxinG3iFD+oPOA+l1d6sbOK0tCyoi/QDdIuotCstvVHtsnsEMCk3n3Y131QjM8FgrvUj/ziqIROI0FvZiA7wBC8skNHEt5zyv+oO2wVJO58pHN8Etey8fv0Hi1DeRKJ1tglS/TEUd79LQ2sqja4BMhPX5Ui1wjbceIVo1FcWqEVEzm2C63krAyY9YYrlEWvpmoeHjYx3C0MCela/2aab2oyZ6F6vbrrm7aG3gQhcr1P4zpUMeYUJrt5dwFDyXGgTZr0fVRLhQJ6mR5Kgqum9+E6Nhv1VK6QZs/Okgr5CQluvF4JEqwOQBPkuk/rVjXJ/AlnNBmRubg7F8ilumDAhRvVnnTuI5LVGDyO8wW7f1Fn9CKlR1b6h/NbQ0o1wWU58jSaKtMF2J5Jq726ReXzFcd5TmS4eOQ0dQ1tQ+bpeFZ4Ir/qRqN4=
X-Microsoft-Exchange-Diagnostics: 1; SN1PR05MB2190; 31:xJ7EY+RjFtWZCom/U9rqHZ94aXqATKG3PJrTtmd9Zd5YLooIMzJiPjship6WcZxch5/P9C7HtwlGnMBGsDqJe4TFHLiKLXyjIAAnDfR9Mi4Yrd9KB2dJWhhbaAsuaipDP7/6d2lpFe2zNGMX5nAK9vXY4L//Akbhb95NZiqJ1Y0zf1qgOShluegFjwRwriNLybiYg7JF1TFpuQ49swIjry42EQymJGjmqnOl1Io4G+bLHA4WvEXZMf5s2ECqGNJg; 20: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
X-Microsoft-Antispam-PRVS: <SN1PR05MB2190241972D007C52C8C73E7D41A0@SN1PR05MB2190.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(20161123562025)(20161123555025)(20161123560025)(20161123564025)(6072148); SRVR:SN1PR05MB2190; BCL:0; PCL:0; RULEID:; SRVR:SN1PR05MB2190; 
X-Microsoft-Exchange-Diagnostics: 1; SN1PR05MB2190; 4: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
X-Forefront-PRVS: 02843AA9E0
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(39400400002)(39850400002)(39840400002)(39450400003)(39860400002)(39410400002)(24454002)(377454003)(86362001)(2906002)(2950100002)(76176999)(4001350100001)(50986999)(36756003)(54356999)(6486002)(42186005)(6916009)(77096006)(4326008)(558084003)(53936002)(229853002)(6246003)(189998001)(33646002)(38730400002)(66066001)(47776003)(64126003)(110136004)(31686004)(90366009)(53546009)(83506001)(230700001)(31696002)(54906002)(305945005)(25786009)(7736002)(5660300001)(8676002)(3260700006)(50466002)(6116002)(23746002)(3846002)(81166006)(230783001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN1PR05MB2190; H:[172.29.35.36]; FPR:; SPF:None; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?Windows-1252?Q?1; SN1PR05MB2190; 23:dDm+ZS29IH+H3JM2+uqyh100Mo3WSKB1poxsc?= =?Windows-1252?Q?zRSse7bhU9VKeL0jSJV0koAxhXw73DQUmZseTOnZszCHg+y1YTcLjIn0?= =?Windows-1252?Q?1+M45taz1XqQyu2qC/GMpmB3xu9ZsCRuZgoXl7KzMH7T6DBGdYAi4JVd?= =?Windows-1252?Q?h6BSwr9U05s3T1ytsP8HgxeIOKDT8f0h1Mvo4FC/R6mckarizmIvVTJj?= =?Windows-1252?Q?q+YMSa4NVdil+J0btidoHa2TO0VG782QOhbR3LEou+tgTb6iy1wj/D8/?= =?Windows-1252?Q?/J1nK86Cp/KR3sVE6Uf9CiNCfpN4K4QXTGhHjbmvE7d4OsSZoO/j93Ui?= =?Windows-1252?Q?UEdNREtFMYZgQfDqrNFdC0101HCzu0GTvEbcV4lq0bs9oJ3iW9+LGKL6?= =?Windows-1252?Q?ph8uQJIqSLGWIVVGGpP3sUN7m1bsck/BEDDCdziauTZgrFQoiBdqVxP1?= =?Windows-1252?Q?EIsdNayYdT9O6End+XCA9Ym8XhGPVN9oJLLxSUV5lfHsdu5Ng+JJ3Yck?= =?Windows-1252?Q?EFkL9rae8MDPjYlg8tZHhIJz9eLaWpvff0dKNPuYcXyaLqw2hccXZBGj?= =?Windows-1252?Q?/orStDnSHzPbd5/hctDixWdgkOgOyVQe+WDZqldPPa5E2pWIz0mb0x3U?= =?Windows-1252?Q?owQYbC5/+/vTA/rFTququHC2fcSiqxKq67slKf53VLErkHOIxLIBHcP5?= =?Windows-1252?Q?D6b9yDHmudB5aMG97NS0r2J9Zn49AAq91otEuQ8FMy57mdhgoo9DygKA?= =?Windows-1252?Q?2jdNf8U+wANSn34kKzufs2/UNbRUhHIGMObDQ5SHmqTK2+VOShrx31C0?= =?Windows-1252?Q?jQClkhpRN0laNskINVTm6l1A5yKiUYbH7OiunZKxe/0rbhIzIyRsKWMD?= =?Windows-1252?Q?nG0KEB9wJOGVxdi72+sAMTpxF2UZbOZZSU/dgXMaR/UZQD0E9WPGOZmX?= =?Windows-1252?Q?+3Yl5ERbFnFDz96e3UXztdvI9BNVWnuu0eq9zzTJXgUQzrPSog9yX1tg?= =?Windows-1252?Q?Q7JUy/yqFtADPxhVBDpK/01BwrYdxNcKGmVQZWg5kyaAwfPkG/BC8CRK?= =?Windows-1252?Q?aPV5XPlf7k+CXzjKj209OX2dRjwIonIzttoNwdhrsVBTgNpPd71L/0PW?= =?Windows-1252?Q?+uCJ5KaKrpR2YoUS+foeP9VFx3K7ThjCcwQ2lRQwAGF58OQQoY3CbUZF?= =?Windows-1252?Q?hjR82M8ZHJB7jD+PI1g7aH4ucyMMN5l+wp3aGHR2AbncS5wquK5utQgh?= =?Windows-1252?Q?jITTrUe+ZOAo4hg3KysixE+epocblXpPmsgQaaYNzT9jHD3UGgS6uk1U?= =?Windows-1252?Q?+Dzdnnj9BJw64eSP9qgWOSM4C14UgTIC3+OfOFpMztkAaO2ilI8Qn1ye?= =?Windows-1252?Q?jR9IWKvA2ptfTFDtdP/8HBz3twokh9xhqbmgGeCfAZEWMlHPZF6svk+0?= =?Windows-1252?Q?zhmRP9JuPczwaDjW0L1?=
X-Microsoft-Exchange-Diagnostics: 1; SN1PR05MB2190; 6:4qeAn9wukngL2kt7BIUT1tCdXCxq4FZU8bvAyVNbsDSkxUdmRxkRssHXvrCJgB8b5m5/AdiF6DUin3eFWC3c+Dv/WqH7AYiv0MVR5AwO54tCuNHAH8mSQtgC+E0FzjDVFAdfp5fRSlbNw+gWdX7S3Hc01dgd3fuogmowCDxZAa82sGTd3fjhCPwE9JnXokIOvGbn+oedi46Yq5QxhpBhn1RK7wGR8gXZ09ZgFIrRy2NyQ2nF7RnYto0kmy6gwKwRQvZAIjSd2dq9FBbMKLfW7lZHyMkCnhIUwka2uduEzlwFa9+D+tdcPoKpzuIWFOROdntSEk/f7o9EG+DI4GTzctVNCIFD9sHE6+g0Rsl5tAiCZ2W0AwwMogogHQJ2ci79AjLDokkvgzhY2LEHxBDVWqvCYUuxatHRwsh1WYexMRmKFuYxy5OoXPGpARit/sebJHozZ3A91Gfowv7xAioDEPFRImyilRW0BL6Ec1ZBC/RCkNlIlQeBxjCj1+ro1+rJ8kKp9/7TLuUwSPDhjmlxO/YrMqas7AlQaDF5ZFdz/i0=; 5:3a/roL5CXaY2Ha9bXpAwM/FrsCbmex5lqMA+3nDnN7GgEP7ruQP1ekma3B8i1nSHZ3kej+UEhiO+XmKD4Y5/NmaKchmuu+3wxKrElgY9IhGIkDBmUWFUNDvJSWVdlhv4HdsSakIQtu1Wq8PtQFKPFQ==; 24:ZOcdEOLpOxiw8eHLZb3NF2nrdqrRm2ioSyn6PwGle2J3fP3Qcr3MXATtT01G2v4NO2hhqN2q4km1Xqf9TsTnGyaCLwobPr9pBXW8AdGTMDA=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; SN1PR05MB2190; 7:/iSWylXeDfD4u/DnwQsrpSX2v1EJ8BLFysDKJz2EqSQITg+qe1twGkdP+BTpcitndBmHgYeOITsRp5ArjutOeBq4iJrqnvVI5oZxVUw5a7wuiLewXE9ki4xIvVmX5SEpo3i2flaUw9Mbw7hAYQv8TpHQeJ7ygYe5f2BzmxS8bF5L3vceAeMvImZ3vCQ1OeQZqYOyXPkr2os0/ohEL84dmweigvbfMlUJvkArukdX0FH0DiYrflB+VDs2P3VeLGiRXhJjuWvrLGFrbUHXHGeGLOtGl3JsMFVYi8RBAiiVulrTSYDY0cVwIZyRFKF0ASSaaimIQ50wB8y8T/E0RTupQA==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Apr 2017 16:28:28.2157 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR05MB2190
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/1_jIHnOVY7MqSeOSn2TrRCA1MoU>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 16:28:33 -0000

On 4/21/2017 12:19 PM, Job Snijders wrote:
> The Area Director and the IDR Chairs believe that the document actually
> should update 4271,

Perhaps they will take account of the last call comments.



From nobody Fri Apr 21 09:49:18 2017
Return-Path: <jayb@oz.mt.att.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBB06129AA7 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:49:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.399
X-Spam-Level: 
X-Spam-Status: No, score=-5.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eP2WU6pR3Gkm for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 09:49:16 -0700 (PDT)
Received: from mx0a-00191d01.pphosted.com (mx0a-00191d01.pphosted.com [67.231.149.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A0A1128B88 for <idr@ietf.org>; Fri, 21 Apr 2017 09:49:16 -0700 (PDT)
Received: from pps.filterd (m0053301.ppops.net [127.0.0.1]) by mx0a-00191d01.pphosted.com (8.16.0.17/8.16.0.17) with SMTP id v3LGlFdf025366 for <idr@ietf.org>; Fri, 21 Apr 2017 12:49:14 -0400
Received: from alpi154.enaf.aldc.att.com (sbcsmtp6.sbc.com [144.160.229.23]) by mx0a-00191d01.pphosted.com with ESMTP id 29ykyxvmhu-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <idr@ietf.org>; Fri, 21 Apr 2017 12:49:13 -0400
Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi154.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id v3LGnCCc025776 for <idr@ietf.org>; Fri, 21 Apr 2017 12:49:12 -0400
Received: from alpi133.aldc.att.com (alpi133.aldc.att.com [130.8.217.3]) by alpi154.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id v3LGn74D025712 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for <idr@ietf.org>; Fri, 21 Apr 2017 12:49:07 -0400
Received: from alpi153.aldc.att.com (alpi153.aldc.att.com [130.8.42.31]) by alpi133.aldc.att.com (RSA Interceptor) for <idr@ietf.org>; Fri, 21 Apr 2017 16:48:49 GMT
Received: from aldc.att.com (localhost [127.0.0.1]) by alpi153.aldc.att.com (8.14.5/8.14.5) with ESMTP id v3LGmmq2018207 for <idr@ietf.org>; Fri, 21 Apr 2017 12:48:49 -0400
Received: from oz.mt.att.com (oz.mt.att.com [135.16.165.23]) by alpi153.aldc.att.com (8.14.5/8.14.5) with ESMTP id v3LGmenV017296 for <idr@ietf.org>; Fri, 21 Apr 2017 12:48:42 -0400
Received: by oz.mt.att.com (Postfix, from userid 1000) id 35E00A40D37; Fri, 21 Apr 2017 12:48:40 -0400 (EDT)
X-Mailer: emacs 24.3.1 (via feedmail 11-beta-1 I); VM 8.2.0b under 24.3.1 (x86_64-pc-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <22778.14310.306749.180959@oz.mt.att.com>
Date: Fri, 21 Apr 2017 12:48:38 -0400
From: Jay Borkenhagen <jayb@braeburn.org>
To: <idr@ietf.org>
In-Reply-To: <76d50f1f-e009-ab24-9c66-abdd41791dc1@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <76d50f1f-e009-ab24-9c66-abdd41791dc1@juniper.net>
Reply-To: Jay Borkenhagen <jayb@braeburn.org>
X-GPG-Fingerprint: DDDB 542E D988 94D0 82D3  D198 7DED 6648 2308 D3C0 
X-RSA-Inspected: yes
X-RSA-Classifications: public
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-04-21_13:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_policy_notspam policy=outbound_policy score=0 priorityscore=1501 malwarescore=0 suspectscore=4 phishscore=0 bulkscore=0 spamscore=0 clxscore=1034 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1703280000 definitions=main-1704210299
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/VigSkCoAd0_N2Egy_Q99ERS134k>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 16:49:18 -0000

Eric C Rosen writes:
 > [...]  It would also be nice if the 
 > document indicated that there may be unintended side-effects of changing 
 > the defaults, but the authors consider those to be of no consequence.
 > 

I am not one of the authors (although for what it's worth I have been
agreeing with their comments in this thread), but I don't think
they're saying those side-effects are of no consequence.

While such side-effects may be unfortunate, they will be felt only by
those who do not read release notes, do not test, do not slow-start
their code upgrades, etc.  That such folks may exist should not
prevent standardizing the sane and important defaults this draft
proposes.


To those who propose keeping the ebgp session down if no policies are
configured, that's worse.  It would require an implementation to tear
down an established ebgp session when a necessary policy is removed,
violating POLA.  The actions proposed in this draft constitute failing
hard (hard enough). 

Thanks.

						Jay B.



From nobody Fri Apr 21 10:59:56 2017
Return-Path: <ietfc@btconnect.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B049912EABF for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 10:59:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.921
X-Spam-Level: 
X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T45HrckCnAaH for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 10:59:44 -0700 (PDT)
Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0130.outbound.protection.outlook.com [104.47.2.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B6FC128854 for <idr@ietf.org>; Fri, 21 Apr 2017 10:59:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector1-btconnect-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=OvyEvLD9/4O5Ryxx+5TTrjkF463KAKmBy02MKyJ5bPk=; b=OW2tO0Ow/aaYExtsD4UcDkoWcpaP/O6b+oWInLJDHFGF7ZAFCAel8NLYXcV+JHcmaECYQtP+aDglzn9dxzDpgH0GzsfyyZ6K9nhJ0obdlTPUCIjBxbLuj0tDL5JQymHbo9roFo1Z8m/Rvgm7hjaszklXyChFGcO3+Navq6FFWgY=
Authentication-Results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=btconnect.com;
Received: from pc6 (86.169.157.161) by HE1PR0701MB3001.eurprd07.prod.outlook.com (10.168.93.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.6; Fri, 21 Apr 2017 17:59:40 +0000
Message-ID: <037b01d2bac8$bab7d100$4001a8c0@gateway.2wire.net>
From: t.petch <ietfc@btconnect.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>, <idr@ietf.org>
References: <20170419173711.71458B814DA@rfc-editor.org> <88AF5CD0-3DA4-4CD0-877B-39925DC7D5F0@cisco.com>
Date: Fri, 21 Apr 2017 18:44:19 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [86.169.157.161]
X-ClientProxiedBy: DB6P193CA0020.EURP193.PROD.OUTLOOK.COM (10.175.237.30) To HE1PR0701MB3001.eurprd07.prod.outlook.com (10.168.93.135)
X-MS-Office365-Filtering-Correlation-Id: fed56185-20ca-45fb-1f08-08d488e02ef4
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(201703131423075)(201703031133081); SRVR:HE1PR0701MB3001; 
X-Microsoft-Exchange-Diagnostics: 1; HE1PR0701MB3001; 3:SklCOA/dxXKA2UcEwTePRTef2Jh5nvjM7tSFWmORHRMyLZrff80g2bDFeyx8f8V+VEZq03LUFJMOWGb8sPbWPzAsb6oTCW+X7ocjKF7B4w2VA5lJU3EDYKZR5mOAvzhU5Zch434Izo003QJxI9Hry61BsgLHmRG5A6oCQjDl8Ek/0o+g5FLwPdpqmRgO7UyujRgOP/eibhU8Qio5/yCvfmM1MduT+l1C6XooTKlqus27m3Cd0qMJSyZRPKg/Icn5Duiyb0+Eba4QQFs1TO0YQkSTE1sxSUg6CfOXRDVlLzomrLn/htO+4j3HCuUiUTb+OYUXkXbpvAYrIVNnhVUzxg==; 25:2wryDoZni7GgeNFjP/qJqXV154Q/fKORNtuLUdIHGOIm6XIAX87WzRp2AlA3478oDeAy7HowqdzjPIf2NSpk3Z590WjcThBIy/dbHg0xaxONonUmUBwstTG/7addryPRV4A1yAFTohJ80aRbvxDKciPWSNa5dbVs6zlmB+u40/MaV1fgiybSAeQYw7euR+75iTCr7tde9Lo4aljJ80RSZikzYT4JVgMunWitzTiPV+Ucye43O+TXf6utvsPav1Gl/sJ7nC9RuOc6h83Gpl4dlSTU4Z/JzIho59nJq0aEgDau4uGii+bJshE19BTuS0iJ6Wfb0g8SJHS3jbLp0BjQ/W/0TCTbaD+v9YelPHtsyBc3meGYRpNbXZUzyJLcyF7pELQzsdsYpISk9gQAZQl1S7OgwDwsF+UMAza4HqIigaaJptDnjS9H817KGyzn0sXAW3ubff7uagWdXfihbL+ydBPrY3lvmYIRm+uTe9Z+aXo=
X-Microsoft-Exchange-Diagnostics: 1; HE1PR0701MB3001; 31:GWzsgDrRYCVo31aJphImA6IJTRooJi9bBhFBve5uz+0a3qGd+BrjCpJplDiwJH8Ob8Ze1uthwp246bUrJloZeRbUeXmObUQbTAWeLGeeZ+isodHivodFuiXBDmbV3Fy8eZIgKoUqMgsEBzZL5VgjPWIt0pG1KoHIQCjsa85bV6nMDmEZbBFUytrnpqK5+jvtEFdgBE/gqhjKSbuo3B563W0iPe7RhG3JVDe05QDeX38wcaE4yPcT5y5jcd4laz1tAXlWLms+i+q9rz0+gl7EPIH2X84R/DqLQ2lHPtJCZMo=
X-Microsoft-Antispam-PRVS: <HE1PR0701MB3001C30BB6AB5E685F2F2C67A01A0@HE1PR0701MB3001.eurprd07.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(138986009662008)(100405760836317)(95692535739014); 
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(93006095)(93001095)(6041248)(20161123564025)(20161123562025)(20161123555025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(6072148); SRVR:HE1PR0701MB3001; BCL:0; PCL:0; RULEID:; SRVR:HE1PR0701MB3001; 
X-Microsoft-Exchange-Diagnostics: 1; HE1PR0701MB3001; 4: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
X-Forefront-PRVS: 02843AA9E0
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(39410400002)(39450400003)(39400400002)(39840400002)(39860400002)(39850400002)(24454002)(13464003)(377454003)(50944005)(38730400002)(81686999)(42186005)(2870700001)(16799955002)(81816999)(44736005)(6306002)(6486002)(116806002)(53936002)(86362001)(47776003)(66066001)(6496005)(33646002)(189998001)(3846002)(7736002)(50986999)(76176999)(5660300001)(305945005)(6116002)(15188155005)(61296003)(6246003)(4720700003)(9686003)(229853002)(2906002)(1456003)(84392002)(50226002)(23676002)(97736004)(14496001)(62236002)(53546009)(50466002)(1556002)(8676002)(6666003)(81166006)(81156014)(25786009)(966004)(44716002)(74416001)(7726001); DIR:OUT; SFP:1102; SCL:1; SRVR:HE1PR0701MB3001; H:pc6; FPR:; SPF:None; MLV:nov; PTR:InfoNoRecords; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtIRTFQUjA3MDFNQjMwMDE7MjM6d25aQkFLZ1RhRUZETWxvT29scFhkWEwx?= =?utf-8?B?bmhqeS8rZVNiSjJhbkl1NVFQZ0t1Ylh2Zk02elFKWitQazBBc0trZ1NOOXQv?= =?utf-8?B?b3U2MlJ3WTdlZmZxbnNESXNmNW1PVjB4QzhqcFdENjNUZXlmSTYzRjIrd0cr?= =?utf-8?B?MlB6cE0zeVluVlJGczc4cmNIMS9SYzNHc2c1SWtEZUtQNkQ3ZW8zaEtEdzFx?= =?utf-8?B?M2d6eXgxbUxrUTRNMzZHWGJTTEh0RzlraS83OHFjalByUGJXU08wbkdrQ3pH?= =?utf-8?B?REM3UlNhYW1EN3c4T0NrRGROeVVIQW5VQzB4ZER6RWttMjRHTmlOOXZiVThH?= =?utf-8?B?d2J5ay93bHpEVVVTTXI0VGNqMFd4dUNCWXlkM0gxQkVFTURUeUtkTVNDaHdl?= =?utf-8?B?NFM1TFE3L0MrRGxkMVVHa3FZeSt1WnVibytxRVNlM1ZveW52SHgwVVJpUTF3?= =?utf-8?B?a3FNVzAydDg2YnJWb1R1cW1mQitUSGtvNFFjOE9YTVJPQzdHaXVVeWJYYXAr?= =?utf-8?B?RzVGUHBFbWJkVWRFUUdTcFRMY2x1WVdoNGJGNWpWcHdzVFVsakpnUGMxWWc2?= =?utf-8?B?Q25wV3d3ZnEvNnUyZEQyN2UzSlZEd2NLR3lzakVlU3FMOVJlR3VLazQ4TEJW?= =?utf-8?B?cm9mNEJYS2FKNGNHUTZiSmhPWFZ3WFpaemF4MEQzQXlpRkwwUFNROGl5OFUz?= =?utf-8?B?aG1OWTNyT2kxeXJaOVZqY0tYZVVMc2pjV1QwSU9WdGJjNnYwVFF4NEozc1dJ?= =?utf-8?B?N25GTGxLWDYyckhETUp3YW14QWRyMCtPRjZwMEUvYytBVGNGc1E3RmNkK3M1?= =?utf-8?B?WUJBUkc4TkZ4WGhUNittMTVsOXgxbzc0VjZzZVJid0hQa2Zrb0hIYktBQkdw?= =?utf-8?B?cXArRmI1ZUJxMDhrWGx5OWdUK0FxWDh0MGRTeHNvbVF1RG16VkJQTTlCYjd3?= =?utf-8?B?cEd0NWZOV1JHWlpaK1lLYnI1cDR2bHl5SDZGQ2JYZG13RVNsbzN6K3RXWDN6?= =?utf-8?B?aHR3Y2hyTVFuTjNwSXZiUFNZWlFoN04yWm51OVM1QnpYOTdhUS9KR3ZLSmdF?= =?utf-8?B?VDdJdThiNzMwSUNha2lqQ0diaENhNGJtOUpkbnp1WlpRaUJuME5jVEhBRXI3?= =?utf-8?B?TmNNUW5KL2pCb2RoQnhHM2padHdjRXl6YU9rUXgyRTBRaHZpOTI3UEkwYXh1?= =?utf-8?B?ZU9JTUpPNHUwTHFVa3FmYWtlTWZwY2xmMEN1bytIVEN2dGY3bnN1eTJYMlpE?= =?utf-8?B?eEpBTGNvWnlmTk5BOGhzZXZBV1FEYUFJK3ZVWFJDQTVUL0xBM0YvUDlYWmM3?= =?utf-8?B?enp1L28wS204UGw5R2ZuQjl1WlYzZFhtSytWNktEZC9DTGtSZldzdXBaNUlx?= =?utf-8?B?N0psRmx0a2x1dHMrZFlzc2NNWjZZNVRiZW1wbnN2d0I4THhQRlY4UU1yYlNW?= =?utf-8?B?aGRWaEdjZFMwenA5d3NwcDJnWmtuMWhPNmlEUzlwWFFZVzBzTVZQZitEVjMx?= =?utf-8?B?aDUyMkFwRG1KZTVKR1dKVzUreGtQa090eGFjS3R0SXlFSGJJUEtJUDhRckdy?= =?utf-8?B?a0dXUW9MdyswdjBsRjdYeGFac3FBZE1MVTdPbStiZ3lTdHhSR3hDZWdIb3ZJ?= =?utf-8?B?YXFWRWVXcUNDZFFoWk55S2lNUWRJblcyb3dvdFdtdFVBZFR2UEJWRy8zM0VS?= =?utf-8?B?SmlBekFSUDBNUHUwdkNpeUdsNHpQY01qMjNOTW1abXVJdWNRMGQ5NjlacG5x?= =?utf-8?B?R2hsc2xJMkp4VnFCSW1BSnZscEp2emhVQlZpKzNIL3VCNmNLQVlCYlViYjFM?= =?utf-8?B?cE5lME1OWFhWSitEbFpRUGt1NmhlcXJIYzhpT0dYWFpVbGFqTVhLcVg1Nkll?= =?utf-8?B?YVJCTXRDUDhvQUFXYm1vNGZ4TjN3ZFNiRE1ydzdDQkFrbXA1OS9XNVRjblow?= =?utf-8?B?S09ENVdWdkVXUmxFZnZDZDNWSUt3cWkvR3pOaC9INFpJMTViV0g5TGFWMnpI?= =?utf-8?B?dWRzWm1yWEloWEJmUjMvZS9rR3lRbUtpYTlFUG1BPT0=?=
X-Microsoft-Exchange-Diagnostics: 1; HE1PR0701MB3001; 6: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; 5:CYtfLd2XXFfXZjvsgaIF3TsZ1FgQYgJ/3gdf/K5HcqQ1bKHkMKXWeVcDiGanD075QBOaLUE6KiP0JyhXBYlgf2wfXnkTGw3gQV0XFJPKq1Tedl7fjkOe5juLPocI6/3xKVflp10R1Inet3nQI/Df7g==; 24:UxO//kxUQQcwOei/AqhFbXZuWgEuhZSF3PTHgZOlwKtCer/prgy8wCe08peklsDFqa9rIn+kTaXavVJxDacptGNZ8OZRu41sFH3Ye5cfyNA=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; HE1PR0701MB3001; 7:AHk4LklNpj7XCVfNsnnale5ICAPu1hzeslKBKLKFnE+i7Cp91uikl/Bt5tYzK/anJi2vM8cXAwjvNLHfREf9qaKuWs0XxrfC1HHQbkFWrjOCD0QUBkQwGZQ7A8gqqM/sL5ssJRl8BDQnomxXijedkjFtXNTytlDGanCyksZ+kx0dUiGTUkv5RLU/NT9a7knazpFpXVSZGvt0r304q1EErHS/m2EVgXtu51UrTPakm5QO5fUJqeKBc7VYl6HnS1PgHSSbjNjIEEyPmb6ClCnBoVcI5JL76GMGisPhE1qJhmHAisYXuhH5SUMULrr8yaHIH6SYknc1e/zhIBpH4bEtIw==
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Apr 2017 17:59:40.3401 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB3001
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/zTMuOPghF-uEnY_GFNTrvagxslw>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 17:59:47 -0000

----- Original Message -----
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: <idr@ietf.org>
Sent: Wednesday, April 19, 2017 6:56 PM

> idr WG:
>
> As you know, changes to rfc4271 should be handled with care.  And this
case is no exception.
>
> Even if “MAY NOT” is not an rfc2119 keyword as “MAY”, “MUST NOT”, and
others are, it doesn’t give me a great feeling to change it for one that
is – among other things because the meaning of “MAY” and “MUST” is so
different.  Of course, making me feel good is not the purpose of
rfc2119… ;-)
>
> Having said that, it is important that rfc4271 faithfully represent
what the WG intended.  In this case, even though John didn’t say it
explicitly, I would agree with him in considering that implementers may
have already interpreted the text with the intent to not use the routes
further.
>
> I would like to get input from the WG as to the best way to handle
this report.  I would specially like to hear from implementers, but all
input is welcome.
>
> The options are:
>
> a. s/MAY NOT/may not
> b. s/MAY NOT/MUST NOT
> c. Rejecting the report.
> d. Something else…
>
> I will wait at least a week before proceeding.

Looking back, RFC1771 made no mention of ineligible routes as a result
of applying policy.

draft-ietf-idr-bgp4-18.txt has essentially the current wording but with
'may not' as lower case.

Jeff Haas then made a Last Call comment that magic words should be
capitalised and
draft-ietf-idr-bgp4-19.txt
dutifully capitalised 'MAY NOT'.  This is one of the items in
'IssuesList #2' identifying where capitalisation should or should not
happen.

Interesting, the AD review contains, a propos of 9.1.1
"So, AFAIK, the major implementations do not follow this step
(calculating the degree of preference, and then announcing). Instead,
implementations allow setting the LOCAL_PREF value locally, which is
taken into consideration during the best path selection, and is also
reannounced further."

My take was that the consensus of the WG was 'may not'  but then I
thought to look at RFC4276 which says

"3.38.  Phase 1: Calculation of Degree of Preference / Section 9.1.1
       [RFC4271]

   3.38.191.  Ineligible Degree of Preference

       Functionality/Description: The route MAY NOT serve as an input
       to the next phase of route selection

       RFC2119: MAY NOT

       Alcatel Y/N/O/Comments: Y
       Cisco   Y/N/O/Comments: Y
       Laurel  Y/N/O/Comments: Y
       NextHop Y/N/O/Comments: Y"

If Alcatel, Cisco, Laurel and NextHop are all for it, who can be against
it?

Tom Petch

> Thanks!
>
> Alvaro.
>
>
>
> On 4/19/17, 1:37 PM, "RFC Errata System" <rfc-editor@rfc-editor.org>
wrote:
>
> The following errata report has been submitted for RFC4271,
> "A Border Gateway Protocol 4 (BGP-4)".
>
> --------------------------------------
> You may review the report below and at:
> http://www.rfc-editor.org/errata_search.php?rfc=4271&eid=5000
>
> --------------------------------------
> Type: Technical
> Reported by: John Scudder <jgs@juniper.net>
>
> Section: 9.1.1
>
> Original Text
> -------------
>       If the route is learned from an external peer, then the local
BGP
>       speaker computes the degree of preference based on preconfigured
>       policy information.  If the return value indicates the route is
>       ineligible, the route MAY NOT serve as an input to the next
phase
>       of route selection; otherwise, the return value MUST be used as
>       the LOCAL_PREF value in any IBGP readvertisement.
>
>
> Corrected Text
> --------------
>       If the route is learned from an external peer, then the local
BGP
>       speaker computes the degree of preference based on preconfigured
>       policy information.  If the return value indicates the route is
>       ineligible, the route MUST NOT serve as an input to the next
phase
>       of route selection; otherwise, the return value MUST be used as
>       the LOCAL_PREF value in any IBGP readvertisement.
>
>
> Notes
> -----
> The original text uses "MAY NOT" capitalized as if it were an RFC 2119
keyword. However, RFC 2119 does not have any defined meaning for "MAY
NOT". If a reader were to interpret this text as suggesting it is
optional -- meaning, in effect, "the route MAY serve as an input to the
next phase of route selection" -- that would be wrong and potentially
problematic.
>
> The minimal correction would be to use lower-case "may not", which
makes the proper meaning reasonably clear. However, the English
construct "may not" is notoriously ambiguous, therefore the proposed
correction is "MUST NOT".
>
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party
> can log in to change the status and edit the report, if necessary.
>
> --------------------------------------
> RFC4271 (draft-ietf-idr-bgp4-26)
> --------------------------------------
> Title               : A Border Gateway Protocol 4 (BGP-4)
> Publication Date    : January 2006
> Author(s)           : Y. Rekhter, Ed., T. Li, Ed., S. Hares, Ed.
> Category            : DRAFT STANDARD
> Source              : Inter-Domain Routing
> Area                : Routing
> Stream              : IETF
> Verifying Party     : IESG
>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>


From nobody Fri Apr 21 12:05:28 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54A76129B36; Fri, 21 Apr 2017 12:05:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.521
X-Spam-Level: 
X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rsmjfGt34YGK; Fri, 21 Apr 2017 12:05:25 -0700 (PDT)
Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C8BE127286; Fri, 21 Apr 2017 12:05:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=26892; q=dns/txt; s=iport; t=1492801525; x=1494011125; h=from:to:cc:subject:date:message-id:mime-version; bh=KHgHOILfDimpZP78wBgtf7Uyo5ekTFrRcdguxOQV53Q=; b=hRcp5EuBW92kIj2C6lCTdIMbSTa3AkPe+SC5AkU4ttdfLwSUIjgIGOwG 0tZobR4h24OLl0TJQWV+5/BRoCLi+5QWDubTRRvc67FRL42zjV8+w6x/Y TWg6qUZ4xiBTdNHSK694OtClzbSqvDdbELyDOBBE/f91+0MP4rcf3+aqw I=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AJAQBNV/pY/5NdJa1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm47K2GBE4NgihWSWJR0gg8whXQcg3E/GAECAQEBAQEBAWsdC4U?= =?us-ascii?q?/RAsHEgFKAgQwJwQOiiEOqXaCJiuKdQEBAQEBAQEBAQEBAQEBAQEBAQEBARgFh?= =?us-ascii?q?lOBXSuCOoNMgTKDEy6CMQWHBokFhj6GeAGHFoZbhRSCAIUziiSIb4spAR84gQZ?= =?us-ascii?q?jFUQRASuELByBY3qGdoEugQ0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,230,1488844800";  d="scan'208,217";a="238888201"
Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 21 Apr 2017 19:05:23 +0000
Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v3LJ5NOg010083 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 21 Apr 2017 19:05:23 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Fri, 21 Apr 2017 14:05:22 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Fri, 21 Apr 2017 14:05:23 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: "draft-ietf-idr-shutdown@ietf.org" <draft-ietf-idr-shutdown@ietf.org>
CC: "idr-chairs@ietf.org" <idr-chairs@ietf.org>, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: AD Review of draft-ietf-idr-shutdown-07
Thread-Index: AQHSutI62HNkeEG8rUet1MjLuMXn2w==
Date: Fri, 21 Apr 2017 19:05:22 +0000
Message-ID: <010A73B6-A030-483F-8D79-3498D92C3335@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: multipart/alternative; boundary="_000_010A73B6A030483F8D793498D92C3335ciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/zgWKw_Pr3nFTDjdfeHWqkvM0ZeU>
Subject: [Idr] AD Review of draft-ietf-idr-shutdown-07
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 19:05:27 -0000

--_000_010A73B6A030483F8D793498D92C3335ciscocom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_010A73B6A030483F8D793498D92C3335ciscocom_
Content-Type: text/html; charset="utf-8"
Content-ID: <6098873F3A816E42A6111BBE62353CAC@emea.cisco.com>
Content-Transfer-Encoding: base64
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--_000_010A73B6A030483F8D793498D92C3335ciscocom_--


From nobody Fri Apr 21 13:27:20 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 899B5129404 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 13:27:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ERbR9ZOGyar3 for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 13:27:16 -0700 (PDT)
Received: from mail-wm0-x22e.google.com (mail-wm0-x22e.google.com [IPv6:2a00:1450:400c:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2EFA0127B57 for <idr@ietf.org>; Fri, 21 Apr 2017 13:27:16 -0700 (PDT)
Received: by mail-wm0-x22e.google.com with SMTP id m123so25628959wma.0 for <idr@ietf.org>; Fri, 21 Apr 2017 13:27:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=BA5bdcvm6iGnsyzrlbC+4KNivU7FfQBhLMSjw28j65o=; b=0ytFGO2z0Rp57m8z1IY8Odrn47Yvn/87ACbty3rbenHcunHO3qpIuMlc2du1+TkJDY o2I0ns8pJBUvkGv423YHwIr1DfDS19Y/eOnywwliTaypth7AseZSt8zWByksOsW5tqnA H/LZapdUFl6lTISfhTkoHFnCUjIxPRgjaGp7AhtTsnPowTEC35+z+CqJdk9+5/3Bxj6t nKaQ5F4BID7IcwL/qu1UOtFQzPzJleDjUIiSsC2X7bsF1+kRKuwHXMng0yB7AVBW5GIg bpySbaP4Nl6Rjxa/nvKUMtu7eASN8b+vZlE3+w1TJzzWN3lpkHuFgh+lhduRTmbaHDfH uSmA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=BA5bdcvm6iGnsyzrlbC+4KNivU7FfQBhLMSjw28j65o=; b=R+k6eFsfbp18qghkHptegzFaPreabqQROnGYHVKRZAyAqGOrLBxfiiuO61nZ9/ySff 7IVB0eFYBIb3UcFil1fiHJT55YtaGl+h5mCOgyF0sdhd8Znjc1wZp4LcVuaDTaFnXflK Jv2loR1Paq2z1G0JYZ8IRmioCJG8qhjxZV//v/WvIrTETzsLgx++JNRH0au4L2NFHvPk 0ZNuAzXtZFP5YHTdaAf3HTPc5Y1/+7f1NdzINVB0E9MBOOwNcP0V0RUNLcwfOUvJA1dA Wycug+OqAWbEpEwK+bMEPDQqv+pKo5+gKMOX4UcNea/dcuSLmF51GPtvBmpDSZawcXrf H1lQ==
X-Gm-Message-State: AN3rC/7P4hW/EJQx0SB73nLT2sbCGE0wsL3j486zxEtpFvLmLlbVJdzO ESms3IGlMkwXTQ==
X-Received: by 10.80.158.8 with SMTP id z8mr70009ede.50.1492806434507; Fri, 21 Apr 2017 13:27:14 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:bcfb:2ccb:2315:d7d4]) by smtp.gmail.com with ESMTPSA id p47sm684504eda.67.2017.04.21.13.27.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Apr 2017 13:27:13 -0700 (PDT)
Date: Fri, 21 Apr 2017 22:27:11 +0200
From: Job Snijders <job@instituut.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: "bruno.decraene@orange.com" <bruno.decraene@orange.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170421202711.oz67skxxzk6svpeh@Vurt.local>
References: <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <CA+b+ERkw39d3E3wsceVWQAb05peEmt=qgBkYdN5j8T_5XzSZ7Q@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CA+b+ERkw39d3E3wsceVWQAb05peEmt=qgBkYdN5j8T_5XzSZ7Q@mail.gmail.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/TUZO43REDJqpR_53dYcvpeHL1Bk>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 20:27:18 -0000

On Fri, Apr 21, 2017 at 11:35:06AM +0200, Robert Raszuk wrote:
> 
> > Did you review Alvaro's suggested changes which prompted the third IDR
> > consultation on this topic? They are viewable here:
> >
> >     http://htmlpreview.github.io/?https://github.com/jaredmauch/
> > draft-mauch-bgp-reject/blob/alvaro/draft-ietf-grow-bgp-
> > reject-06-from-5.diff.html
> >
> 
> Do we really have consensus among all authors of this document (leave alone
> rest of IETF) that it should apply to all AFI/SAFIs ?
> 
> I personnally would recommend to apply it to only 1/1 and 2/1.

This topic was discussed during the GROW meeting at IETF 97,
subsequently a follow-up action item was defined and executed upon, and
the result passed GROW Last Call

Here is one reference https://www.ietf.org/mail-archive/web/grow/current/msg03718.html

Kind regards,

Job


From nobody Fri Apr 21 13:54:05 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33D4D1270AC for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 13:54:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BBY9Lk7OIPtM for <idr@ietfa.amsl.com>; Fri, 21 Apr 2017 13:54:02 -0700 (PDT)
Received: from mail-io0-x22c.google.com (mail-io0-x22c.google.com [IPv6:2607:f8b0:4001:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48358126C23 for <idr@ietf.org>; Fri, 21 Apr 2017 13:54:02 -0700 (PDT)
Received: by mail-io0-x22c.google.com with SMTP id a103so134241048ioj.1 for <idr@ietf.org>; Fri, 21 Apr 2017 13:54:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=9pHV8m1zWtZme6tVAVYACWQ2ONavYR1qgB+JhbBwGIs=; b=QHPYivMDCiznpGcOtC9Ub1FeazLEyMc4E0JmyCKCMrBaFe4yCIU8mys4kH4cYpwkI/ zIBwNkTyiKzPq7mZ2SKCCePaFZd4rms7EHWyk6gvWYuKND4MIyMEzxKYP5SaBc+pphFF cR2BWXtP9Bb4s58yft5gGzJ29er4wq0l0hTO1vkRhAlSBq1CrCJMQcHxu6cTPGMV8CmN UfjQz1fnq++99HQytJP54LGi2MUFmzK/5qWXbnMDkXmEojkrUtMeD15Mgk4VkstUhwYr 4PxwVVQXWh9qgEH2XNOwe9iL3YnEudL6IpuwHOFu2bYUjX9zfrg67Y9DXz1K9R8F89nP pQwg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=9pHV8m1zWtZme6tVAVYACWQ2ONavYR1qgB+JhbBwGIs=; b=geoNm5pK3PTx/XXiCmxffwI5vamf9WuErDVLa8ro6cxg/62ELQxMLlUUqmls2OSeO8 XMk+57SfR1caks7GnrKJSWjZjYiW6mU3XDligx2wJSkWRizf3bAntbxVE33booU7tGiV w7aL/ifc6xG0sxh0rNtJSSATTBsRVRRCUH2Ph33rNONhM9RNS/LC7u1+83v2M6erIKTr 7Q+CCxZTImdmHpwfIga0j1oAYUKqnawfjaHP7hv6cthtAqEm9417/ObEyeJcAjlqZLuZ QOikZawObHnTeFuMyGYdhmvJVdXCmxLKnT8arXLm4KI1Pwz+Oo+98FaDL2+BZaT+Egd+ wOrA==
X-Gm-Message-State: AN3rC/62PfoTOk35jvr8m9RbNle1q+M24vUxThdTfz39PTKQq3jeWerU ehLbUmlCSDNlyy+nO3Kfy6Z9jPvefglP
X-Received: by 10.107.16.135 with SMTP id 7mr18509115ioq.228.1492808041681; Fri, 21 Apr 2017 13:54:01 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Fri, 21 Apr 2017 13:54:00 -0700 (PDT)
In-Reply-To: <20170421202711.oz67skxxzk6svpeh@Vurt.local>
References: <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <20170420160736.GB15676@puck.nether.net> <75AC1A50-3DF8-4852-8FC6-BC302B121946@cisco.com> <CAH1iCirf=ha1mrw8EUzPp34R-DF=4J+=aFyMwVn2udi1UKNifw@mail.gmail.com> <CA+wi2hMPYcwbNhHtuWKWUXb4Lg3x81p786yLqeNEHFV1okGRvg@mail.gmail.com> <dc04fe80-f844-29b1-2676-8f2bbda0ecbe@juniper.net> <28014_1492762849_58F9C0E0_28014_6541_1_53C29892C857584299CBF5D05346208A31CC3773@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421090145.f5yuhimb4qg7knrf@Vurt.local> <CA+b+ERkw39d3E3wsceVWQAb05peEmt=qgBkYdN5j8T_5XzSZ7Q@mail.gmail.com> <20170421202711.oz67skxxzk6svpeh@Vurt.local>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 21 Apr 2017 22:54:00 +0200
X-Google-Sender-Auth: ozxQnyOPcHQCIE1F6Ddu7uvp8oM
Message-ID: <CA+b+ERkzu2Hv65h4BiJannxiKPXHAPokCth+PqQzTk=LkKcF3g@mail.gmail.com>
To: Job Snijders <job@instituut.net>
Cc: "bruno.decraene@orange.com" <bruno.decraene@orange.com>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a113fe9c20ad9b3054db3755b
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/bQA186KZZSlDIzFtIcfCNDrk4rI>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 20:54:04 -0000

--001a113fe9c20ad9b3054db3755b
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

>
> Here is one reference https://www.ietf.org/mail-arch
> ive/web/grow/current/msg03718.html
>
> Kind regards,
> Job
>

=E2=80=8BOn the list there was three emails on this including Jon's you quo=
te who
was rather for #1 ...
"IPv4/IPv6 unicast AFI/SAFI EBGP only"

=E2=80=8BI do not see any discussion on that which would be anywhere compar=
able to
number of IDR WG members suggesting to limit it only to 1/1 & 2/1.

Thx,
R.

--001a113fe9c20ad9b3054db3755b
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left=
:1px solid rgb(204,204,204);padding-left:1ex">Here is one reference <a href=
=3D"https://www.ietf.org/mail-archive/web/grow/current/msg03718.html" rel=
=3D"noreferrer" target=3D"_blank">https://www.ietf.org/mail-arch<wbr>ive/we=
b/grow/current/msg03718.<wbr>html</a><br>
<br>
Kind regards,<br>Job<br>
</blockquote></div><br></div><div class=3D"gmail_extra"><div class=3D"gmail=
_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">=
=E2=80=8BOn the list there was three emails on this including Jon&#39;s you=
 quote who was rather for #1 ...=C2=A0</div><div class=3D"gmail_default" st=
yle=3D"font-family:arial,helvetica,sans-serif;font-size:small">&quot;<span =
style=3D"color:rgb(0,0,0);font-family:arial,sans-serif">IPv4/IPv6 unicast A=
FI/SAFI EBGP only&quot;=C2=A0</span></div><div class=3D"gmail_default" styl=
e=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div=
 class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fo=
nt-size:small">=E2=80=8BI do not see any discussion on that which would be =
anywhere comparable to number of IDR WG members suggesting to limit it only=
 to 1/1 &amp; 2/1.</div><div class=3D"gmail_default" style=3D"font-family:a=
rial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_de=
fault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">Thx=
,</div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sa=
ns-serif;font-size:small">R.</div><br></div></div>

--001a113fe9c20ad9b3054db3755b--


From nobody Sat Apr 22 00:13:15 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98884128BB7; Sat, 22 Apr 2017 00:13:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Job41BwZXxxH; Sat, 22 Apr 2017 00:13:10 -0700 (PDT)
Received: from mail-it0-x230.google.com (mail-it0-x230.google.com [IPv6:2607:f8b0:4001:c0b::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 959EE126DED; Sat, 22 Apr 2017 00:13:10 -0700 (PDT)
Received: by mail-it0-x230.google.com with SMTP id g66so9814591ite.1; Sat, 22 Apr 2017 00:13:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=JXQzu9XvmEa6Z+M1jdIKfLOmfppdcTbkrzWjGZ99dVg=; b=kgcBd65kNWMVj+C8nFjHv//T+RB9j1XxBND/sJM58hX6C4qthVz1UsAiGAtJtdnURV 6i5Wlw+dK6PCMTSen16u2pJ4OROHBJ5BHn/Syd7mgvZ801rI94rvHeXHKe8zEu8xvRDt 4ut6PtnS3fY2z5BErBKYvy4E7cGH4ovl0kkLu3vTJVJRrMV5WLKHQay/ZdqplA7PEdDf EWqo6hnIz5VvORxlUdALV6rGJ20lU63e1y0rHxXTePa1YIP40emwoKuipCfc+DxJNYpp PbVfS4lc5lgbFiZKy4jRRPwWZUt62LVw9bUoUN7aDnI7c4kC4LgOTOuEXcBfYIBuAaYe zyDA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=JXQzu9XvmEa6Z+M1jdIKfLOmfppdcTbkrzWjGZ99dVg=; b=e515wENv3UFujnFiBoYfny/BM0/gRg4sp3iyCpS8IL5Uxri4otVz3XrFFI+WF/qt3I GncfILjoJXVZ6mHQNzU8svlR4HU/M3sBq1aHFxvqVJ8hyFlO5t09Gp8/clEXFisjf0pc N5DSRzAXEMsY1WSl8VMKOsQSwR7XzOvrIElBr5p+zHKzUr6F7ZF12swbzdhYlE4teb+3 U/rw0hWVbEH1GbNEHiaWb17t7omWLbHsBloBVWjFy6++R50nmcImfrl//03Uogu4Lrfy O4iUX8FqhqGvpdOVbxmM9w6YqZFoH1sHOlXRCM6/HQ9WLBAF6PP9JpMCF8tV044HwoTJ Iqrw==
X-Gm-Message-State: AN3rC/72MCfqyHbKfoltXJ5alZR8ZqBi35ec2bcV5VCFL0cxW89mjdY8 8KsAHNbWG/VR0wmxIXIMFZIy+bseC0ZnCg8=
X-Received: by 10.36.219.195 with SMTP id c186mr2697620itg.25.1492845189854; Sat, 22 Apr 2017 00:13:09 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Sat, 22 Apr 2017 00:13:09 -0700 (PDT)
In-Reply-To: <5679a32841c94228bb210e63948682b2@XCH-RTP-001.cisco.com>
References: <149280328448.6973.7420894007746674977.idtracker@ietfa.amsl.com> <91fa537fc336407d8958f816e8d38502@XCH-RTP-001.cisco.com> <CA+b+ERkCp8qkOrobCWu93pMUOkZV1kHudo0UHr0jRkQG6HrHPg@mail.gmail.com> <5679a32841c94228bb210e63948682b2@XCH-RTP-001.cisco.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Sat, 22 Apr 2017 09:13:09 +0200
X-Google-Sender-Auth: 3kHTd0KynqBPqSyy2Pyye4CadpM
Message-ID: <CA+b+ER=66C_61vrXCpFhOXtjx15bgrsA1TWJHpkbHu=Fkr_5yQ@mail.gmail.com>
To: "Kausik Majumdar (kmajumda)" <kmajumda@cisco.com>, "Krishna Deevi (kdeevi)" <kdeevi@cisco.com>
Cc: "spring@ietf.org" <spring@ietf.org>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114f5cce3f028a054dbc1b29
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/VnjGHIajImaQF-Y07MSU5eC8OG0>
Subject: Re: [Idr] [spring] FW: New Version Notification for draft-deevimajumdar-spring-bgp-feedback-00.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 22 Apr 2017 07:13:13 -0000

--001a114f5cce3f028a054dbc1b29
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hello Kausik & Krishna,

Let me provide few additional comments below regarding your draft.

1. Your draft defines a new BGP message so irrespective on what this new
message is to carry this is within IDR charter not SPRING. Adding IDR WG to
this discussion and I do recommend you rename your draft and repost
accordingly to IETF rules.

2. draft-ietf-idr-operational-message-00 is in expired state but please
keep in mind that it was accepted as IDR WG document. As no money were
behind to implement it by major vendors we stopped refreshing it. However
the objective of former work draft-ietf-idr-advisory as well as
draft-raszuk-bgp-diagnostic-message which after number of discussions in
IDR were both merged into the above operational message document. Note also
that the common goal of all of the above was to provide feedback to eBGP
peers on various BGP propagated data and its state on the receving BGP
speaker.

You state:

"The BGP Feedback message would be a generic purpose message and could

be used for any cases within BGP by defining the required new TLVs

under this message."


This is precisely what BGP OPERATIONAL MESSAGE also defines.


3. You state in your draft that the point of the proposal is to convey the
feedback information to the originator of the message. With that I have
following concerns:

*A*

All information you are proposing to add should already be logged to syslog
and since SR deployments are usually under same administrative umbrella
they can be easily retrieved from it. So effectively you are now defining
new BGP message to carry filtered syslog events in BGP. And while
questionable I am ok with it.

What I am not ok with is that BGP propagates information in p2mp fashion.
It has no provision for p2p messaging even if recently number of attempts
has been made to stretch it that way. So effectively while only originator
of the colliding information needs to get the feedback such feedback will
be propagated to *every bgp speaker* in the AS and beyond the AS (Internet
wide) if new BGP capability has been negotiated with the peer. The draft
even does not bring any form of protection on the intended recipient of the
message and propagation scope. Contrary all it says to define the
propagation rules is this:

   To achieve this a new BGP message type called BGP "Feedback Message"
   is defined in this draft.  The Feedback message type is to provide
   the feedback to the BGP peers.  It would be processed hop by hop like
   update message.


*B*


While I am not questioning use case I do not see that the current
proposal is the right transport for

it. What you need for iBGP side is pub/sub message bus to get syslog
notifications to selected

nodes. For eBGP (when SRv6 goes beying single administrative boundary)
use of Operational

message is something you may reconsider.


*C*


If you however still would like to continue using new message and load
BGP to carry filtered syslog

or effectively selected telemetry data I would recommend to instead
current propagation proposal of

"hop by hop like update message" make it to travel over targeted short
lived TCP sessions directly

between notifier and originator of the information you are proposing
to carry. Is this a good idea to still

call it BGP .. maybe yes .. maybe no. But this is what you really need
here rather then going back

via RRs and hitting 100s of routers which would have to parse new
message only to ignore it and

propagate further. How far .. as indicated above it is currently undefined.


Kind regards,

Robert.



On Sat, Apr 22, 2017 at 2:57 AM, Kausik Majumdar (kmajumda)
<kmajumda@cisco.com> wrote:


>
> Hello Robert,
>
>
>
> Thanks for providing the pointer on the BGP Operation Message Draft. We
> looked through it. In this draft, Operational message is defined to carry
> different types of Operational TLVs like: ADVISE, STATE, DUMP and CONTROL
> and trying to provide network operational data between the BGP nodes.
>
>
>
> The draft we proposed has a different purpose. It doesn=E2=80=99t exchang=
e BGP
> operational data between the BGP nodes. Rather it defines on how to send
> BGP feedback information for a prefix to notify the network inconsistency
> to the BGP originator. The current use cases are in the BGP Segment Routi=
ng
> application as described in the draft.
>
>
>
> Thanks & regards
>
>
>
> *From:* rraszuk@gmail.com [mailto:rraszuk@gmail.com] *On Behalf Of *Rober=
t
> Raszuk
> *Sent:* Friday, April 21, 2017 3:30 PM
> *To:* Kausik Majumdar (kmajumda) <kmajumda@cisco.com>
> *Cc:* spring@ietf.org; Krishna Deevi (kdeevi) <kdeevi@cisco.com>
> *Subject:* Re: [spring] FW: New Version Notification for
> draft-deevimajumdar-spring-bgp-feedback-00.txt
>
>
>
> Hello Kausik,
>
>
>
> Are you aware about similar attempts in the past ?
>
>
>
> For starter can you elaborate if you conisdered to just add SR related
> information to BGP Operational Message as defined before in
> https://tools.ietf.org/html/draft-ietf-idr-operational-message-00 ?
>
>
>
> Kind regards,
>
> Dave, Robert & Rob.
>
>
>
>
>
> On Sat, Apr 22, 2017 at 12:02 AM, Kausik Majumdar (kmajumda) <
> kmajumda@cisco.com> wrote:
>
> Hi,
>
> We have submitted the below draft "draft-deevimajumdar-spring-bgp-feedbac=
k"
> to describe the framework for BGP Feedback message in Segment Routing to
> notify the inconsistency in the network. Please review and provide valuab=
le
> feedback.
>
> Regards
>
> -----Original Message-----
> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]
> Sent: Friday, April 21, 2017 12:35 PM
> To: Kausik Majumdar (kmajumda) <kmajumda@cisco.com>; Krishna Deevi
> (kdeevi) <kdeevi@cisco.com>; Krishna Deevi (kdeevi) <kdeevi@cisco.com>
> Subject: New Version Notification for draft-deevimajumdar-spring-
> bgp-feedback-00.txt
>
>
> A new version of I-D, draft-deevimajumdar-spring-bgp-feedback-00.txt
> has been successfully submitted by Kausik Majumdar and posted to the IETF
> repository.
>
> Name:           draft-deevimajumdar-spring-bgp-feedback
> Revision:       00
> Title:          A Framework for BGP Feedback Message In Segment Routing
> Document date:  2017-04-21
> Group:          Individual Submission
> Pages:          12
> URL:            https://www.ietf.org/internet-drafts/draft-deevimajumdar-
> spring-bgp-feedback-00.txt
> Status:         https://datatracker.ietf.org/doc/draft-deevimajumdar-
> spring-bgp-feedback/
> Htmlized:       https://tools.ietf.org/html/draft-deevimajumdar-spring-
> bgp-feedback-00
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-deevimajumdar=
-
> spring-bgp-feedback-00
>
>
> Abstract:
>    In support of Segment Routing(SR), routing protocols advertise a
>    variety of identifiers used to define the segments that direct packet
>    forwarding.
>
>    In cases where the information advertised by a given protocol
>    instance is either internally inconsistent or conflicts with
>    advertisements from another protocol instance a means of notifying
>    the originator about the inconsistency is required.  This document
>    defines a generic mechanism to notify the BGP originator about the
>    inconsistency in the network.
>
>
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission until the htmlized version and diff are available at
> tools.ietf.org.
>
> The IETF Secretariat
>
> _______________________________________________
> spring mailing list
> spring@ietf.org
> https://www.ietf.org/mailman/listinfo/spring
>
>
>

--001a114f5cce3f028a054dbc1b29
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small">Hello Kausik &amp; Krishna,<br></div><d=
iv class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;=
font-size:small"><br></div><div class=3D"gmail_default" style=3D"font-famil=
y:arial,helvetica,sans-serif;font-size:small">Let me provide few additional=
 comments below regarding your draft.=C2=A0</div><div class=3D"gmail_defaul=
t" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></d=
iv><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-s=
erif;font-size:small">1. Your draft defines a new BGP message so irrespecti=
ve on what this new message is to carry this is within IDR charter not SPRI=
NG. Adding IDR WG to this discussion and I do recommend you rename your dra=
ft and repost accordingly to IETF rules. =C2=A0</div><div class=3D"gmail_de=
fault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br=
></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sa=
ns-serif;font-size:small">2.=C2=A0<span style=3D"font-size:1em;font-weight:=
bold;text-decoration-line:underline;font-family:arial,sans-serif">draft-iet=
f-idr-operational-message-00</span><span style=3D"font-size:1em;font-weight=
:bold;font-family:arial,sans-serif">=C2=A0</span><span style=3D"font-size:1=
em;font-family:arial,sans-serif">is in expired state but please keep in min=
d that it was accepted as IDR WG document. As no money were behind to imple=
ment it by major vendors we stopped refreshing it. However the objective of=
 former work draft-ietf-idr-advisory as well as draft-raszuk-bgp-diagnostic=
-message which after number of discussions in IDR were both merged into the=
 above operational message document. Note also that the common goal of all =
of the above was to provide feedback to eBGP peers on various BGP propagate=
d data and its state on the receving BGP speaker.=C2=A0</span></div><div cl=
ass=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-=
size:small"><span style=3D"font-size:1em;font-family:arial,sans-serif"><br>=
</span></div><div class=3D"gmail_default" style=3D"font-family:arial,helvet=
ica,sans-serif;font-size:small"><span style=3D"font-size:1em;font-family:ar=
ial,sans-serif">You state:=C2=A0</span></div><div class=3D"gmail_default" s=
tyle=3D"font-size:small"><span style=3D"font-size:1em"><font face=3D"monosp=
ace, monospace"><br></font></span></div><div class=3D"gmail_default" style=
=3D"font-size:small"><pre class=3D"gmail-newpage" style=3D"font-size:13.333=
3px;margin-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><font face=3D"monosp=
ace, monospace">&quot;The BGP Feedback message would be a generic purpose m=
essage and could </font></pre><pre class=3D"gmail-newpage" style=3D"font-si=
ze:13.3333px;margin-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><font face=
=3D"monospace, monospace">be used for any cases within BGP by defining the =
required new TLVs </font></pre><pre class=3D"gmail-newpage" style=3D"font-s=
ize:13.3333px;margin-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><font face=
=3D"monospace, monospace">under this message.&quot;</font></pre><pre class=
=3D"gmail-newpage" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:13.3333px;margin-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><br></pre><p=
re class=3D"gmail-newpage" style=3D"font-size:13.3333px;margin-top:0px;marg=
in-bottom:0px;color:rgb(0,0,0)"><font face=3D"arial, helvetica, sans-serif"=
>This is precisely what BGP OPERATIONAL MESSAGE also defines.<br></font></p=
re></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,=
sans-serif;font-size:small"><span style=3D"font-size:1em;font-family:arial,=
sans-serif"><br></span></div><div class=3D"gmail_default" style=3D"font-fam=
ily:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-size:1e=
m;font-family:arial,sans-serif">3. You state in your draft that the point o=
f the proposal is to convey the feedback information to the originator of t=
he message. With that I have following concerns:</span></div><div class=3D"=
gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:sm=
all"><br></div><div class=3D"gmail_default"><span style=3D"font-size:1em">*=
A*=C2=A0</span></div><div class=3D"gmail_default"><span style=3D"font-size:=
1em"><br></span></div><div class=3D"gmail_default"><span style=3D"font-size=
:1em">All information you are proposing to add should already be logged to =
syslog and since SR deployments are usually under same administrative umbre=
lla they can be easily </span>retrieved<span style=3D"font-size:1em">=C2=A0=
from it. So effectively you are now defining new BGP message to carry filte=
red syslog events in BGP. And while questionable I am ok with it.=C2=A0</sp=
an><br></div><div class=3D"gmail_default"><span style=3D"font-size:1em"><br=
></span></div><div class=3D"gmail_default"><span style=3D"font-size:1em">Wh=
at I am not ok with is that BGP propagates information in p2mp fashion. It =
has no provision for p2p messaging even if recently number of attempts has =
been made to stretch it that way. So effectively while only originator of t=
he colliding information needs to get the feedback such feedback will be pr=
opagated to <b>every bgp speaker</b> in the AS and beyond the AS (Internet =
wide) if new BGP capability has been negotiated with the peer. The draft ev=
en does not bring any form of protection on the intended </span>recipient<s=
pan style=3D"font-size:1em">=C2=A0of the message and propagation scope. Con=
trary all it says to define the propagation rules is this:</span></div><div=
 class=3D"gmail_default"><span style=3D"font-size:1em"><br></span></div><di=
v class=3D"gmail_default"><pre class=3D"gmail-newpage" style=3D"font-size:1=
3.3333px;margin-top:0px;margin-bottom:0px;color:rgb(0,0,0)">   To achieve t=
his a new BGP message type called BGP &quot;Feedback Message&quot;
   is defined in this draft.  The Feedback message type is to provide
   the feedback to the BGP peers.  It would be processed hop by hop like
   update message.</pre><pre class=3D"gmail-newpage" style=3D"font-size:13.=
3333px;margin-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><br></pre><pre cl=
ass=3D"gmail-newpage" style=3D"font-size:13.3333px;margin-top:0px;margin-bo=
ttom:0px;color:rgb(0,0,0)"><font face=3D"arial, helvetica, sans-serif">*B* =
</font></pre><pre class=3D"gmail-newpage" style=3D"font-size:13.3333px;marg=
in-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><font face=3D"arial, helveti=
ca, sans-serif"><br></font></pre><pre class=3D"gmail-newpage" style=3D"font=
-size:13.3333px;margin-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><font fa=
ce=3D"arial, helvetica, sans-serif">While I am not questioning use case I d=
o not see that the current proposal is the right transport for </font></pre=
><pre class=3D"gmail-newpage" style=3D"font-size:13.3333px;margin-top:0px;m=
argin-bottom:0px;color:rgb(0,0,0)"><font face=3D"arial, helvetica, sans-ser=
if">it. What you need for iBGP side is pub/sub message bus to get syslog no=
tifications to selected </font></pre><pre class=3D"gmail-newpage" style=3D"=
font-size:13.3333px;margin-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><fon=
t face=3D"arial, helvetica, sans-serif">nodes. For eBGP (when SRv6 goes bey=
ing single administrative boundary) use of Operational </font></pre><pre cl=
ass=3D"gmail-newpage" style=3D"font-size:13.3333px;margin-top:0px;margin-bo=
ttom:0px;color:rgb(0,0,0)"><font face=3D"arial, helvetica, sans-serif">mess=
age is something you may reconsider. </font></pre><pre class=3D"gmail-newpa=
ge" style=3D"font-size:13.3333px;margin-top:0px;margin-bottom:0px;color:rgb=
(0,0,0)"><font face=3D"arial, helvetica, sans-serif"><br></font></pre><pre =
class=3D"gmail-newpage" style=3D"font-size:13.3333px;margin-top:0px;margin-=
bottom:0px;color:rgb(0,0,0)"><font face=3D"arial, helvetica, sans-serif">*C=
* </font></pre><pre class=3D"gmail-newpage" style=3D"font-size:13.3333px;ma=
rgin-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><font face=3D"arial, helve=
tica, sans-serif"><br></font></pre><pre class=3D"gmail-newpage" style=3D"fo=
nt-size:13.3333px;margin-top:0px;margin-bottom:0px;color:rgb(0,0,0)"><font =
face=3D"arial, helvetica, sans-serif">If you however still would like to co=
ntinue using new message and load BGP to carry filtered syslog </font></pre=
><pre class=3D"gmail-newpage" style=3D"margin-top:0px;margin-bottom:0px"><f=
ont face=3D"arial, helvetica, sans-serif" style=3D"color:rgb(0,0,0);font-si=
ze:13.3333px">or effectively selected telemetry data I would recommend to i=
nstead current propagation proposal of </font></pre><pre class=3D"gmail-new=
page" style=3D"margin-top:0px;margin-bottom:0px"><font color=3D"#000000" fa=
ce=3D"arial, helvetica, sans-serif"><span style=3D"font-size:13.3333px">&qu=
ot;hop by hop like update message&quot; make it to travel over targeted sho=
rt lived TCP sessions directly </span></font></pre><pre class=3D"gmail-newp=
age" style=3D"margin-top:0px;margin-bottom:0px"><font face=3D"arial, helvet=
ica, sans-serif"><font color=3D"#000000"><span style=3D"font-size:13.3333px=
">between </span></font>notifier and originator of the information you are =
proposing to carry. Is this a good idea to still </font></pre><pre class=3D=
"gmail-newpage" style=3D"margin-top:0px;margin-bottom:0px"><font face=3D"ar=
ial, helvetica, sans-serif">call it BGP .. maybe yes .. maybe no. But this =
is what you really need here rather then going back </font></pre><pre class=
=3D"gmail-newpage" style=3D"margin-top:0px;margin-bottom:0px"><font face=3D=
"arial, helvetica, sans-serif">via RRs and hitting 100s of routers which wo=
uld have to parse new message only to ignore it and </font></pre><pre class=
=3D"gmail-newpage" style=3D"margin-top:0px;margin-bottom:0px"><font face=3D=
"arial, helvetica, sans-serif">propagate further. How far .. as indicated a=
bove it is currently undefined.  </font></pre><pre class=3D"gmail-newpage" =
style=3D"margin-top:0px;margin-bottom:0px"><br></pre><pre class=3D"gmail-ne=
wpage" style=3D"margin-top:0px;margin-bottom:0px"><font face=3D"arial, helv=
etica, sans-serif">Kind regards,</font></pre><pre class=3D"gmail-newpage" s=
tyle=3D"margin-top:0px;margin-bottom:0px"><font face=3D"arial, helvetica, s=
ans-serif">Robert.</font></pre><pre class=3D"gmail-newpage" style=3D"margin=
-top:0px;margin-bottom:0px"><font color=3D"#000000" face=3D"arial, helvetic=
a, sans-serif"><span style=3D"font-size:13.3333px"><br></span></font></pre>=
<pre class=3D"gmail-newpage" style=3D"margin-top:0px;margin-bottom:0px"><fo=
nt color=3D"#000000" face=3D"arial, helvetica, sans-serif"><span style=3D"f=
ont-size:13.3333px"><br></span></font></pre><pre class=3D"gmail-newpage" st=
yle=3D"margin-top:0px;margin-bottom:0px">On Sat, Apr 22, 2017 at 2:57 AM, K=
ausik Majumdar (kmajumda) <span dir=3D"ltr" style=3D"font-family:arial,sans=
-serif">&lt;<a href=3D"mailto:kmajumda@cisco.com" target=3D"_blank">kmajumd=
a@cisco.com</a>&gt;</span><span style=3D"font-family:arial,sans-serif"> wro=
te:</span><br></pre></div><div class=3D"gmail_extra"><div class=3D"gmail_qu=
ote"><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bo=
rder-left:1px solid rgb(204,204,204);padding-left:1ex">





<div lang=3D"EN-US">
<div class=3D"gmail-m_8784521172464833363WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:calibri,sa=
ns-serif;color:rgb(31,73,125)"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:calibri,sa=
ns-serif;color:rgb(31,73,125)">Hello Robert,<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:calibri,sa=
ns-serif;color:rgb(31,73,125)"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:calibri,sa=
ns-serif;color:rgb(31,73,125)">Thanks for providing the pointer on the BGP =
Operation Message Draft. We looked through it. In this draft, Operational m=
essage is defined to carry different types
 of Operational TLVs like: ADVISE, STATE, DUMP and CONTROL and trying to pr=
ovide network operational data between the BGP nodes.<u></u><u></u></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:calibri,sa=
ns-serif;color:rgb(31,73,125)"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:calibri,sa=
ns-serif;color:rgb(31,73,125)">The draft we proposed has a different purpos=
e. It doesn=E2=80=99t exchange BGP operational data between the BGP nodes. =
Rather it defines on how to send BGP feedback information
 for a prefix to notify the network inconsistency to the BGP originator. Th=
e current use cases are in the BGP Segment Routing application as described=
 in the draft.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:calibri,sa=
ns-serif;color:rgb(31,73,125)"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:calibri,sa=
ns-serif;color:rgb(31,73,125)">Thanks &amp; regards<u></u><u></u></span></p=
>
<p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:calibri,sa=
ns-serif;color:rgb(31,73,125)"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11pt;font-family:calibri=
,sans-serif">From:</span></b><span style=3D"font-size:11pt;font-family:cali=
bri,sans-serif"> <a href=3D"mailto:rraszuk@gmail.com" target=3D"_blank">rra=
szuk@gmail.com</a> [mailto:<a href=3D"mailto:rraszuk@gmail.com" target=3D"_=
blank">rraszuk@gmail.com</a>]
<b>On Behalf Of </b>Robert Raszuk<br>
<b>Sent:</b> Friday, April 21, 2017 3:30 PM<span class=3D"gmail-"><br>
<b>To:</b> Kausik Majumdar (kmajumda) &lt;<a href=3D"mailto:kmajumda@cisco.=
com" target=3D"_blank">kmajumda@cisco.com</a>&gt;<br>
</span><b>Cc:</b> <a href=3D"mailto:spring@ietf.org" target=3D"_blank">spri=
ng@ietf.org</a>; Krishna Deevi (kdeevi) &lt;<a href=3D"mailto:kdeevi@cisco.=
com" target=3D"_blank">kdeevi@cisco.com</a>&gt;<br>
<b>Subject:</b> Re: [spring] FW: New Version Notification for draft-deevima=
jumdar-spring-<wbr>bgp-feedback-00.txt<u></u><u></u></span></p><div><div cl=
ass=3D"gmail-h5">
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:arial,sans-serif">Hello K=
ausik,<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:arial,sans-serif"><u></u>=
=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:arial,sans-serif">Are you=
 aware about similar attempts in the past ?=C2=A0<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:arial,sans-serif"><u></u>=
=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:arial,sans-serif">For sta=
rter can you elaborate if you conisdered to just add SR related information=
 to BGP Operational Message as defined before in=C2=A0<a href=3D"https://to=
ols.ietf.org/html/draft-ietf-idr-operational-message-00" target=3D"_blank">=
https://tools.ietf.org/<wbr>html/draft-ietf-idr-<wbr>operational-message-00=
</a>
 ?<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:arial,sans-serif"><u></u>=
=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:arial,sans-serif">Kind re=
gards,<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:arial,sans-serif">Dave, R=
obert &amp; Rob.<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:arial,sans-serif"><u></u>=
=C2=A0<u></u></span></p>
</div>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<p class=3D"MsoNormal">On Sat, Apr 22, 2017 at 12:02 AM, Kausik Majumdar (k=
majumda) &lt;<a href=3D"mailto:kmajumda@cisco.com" target=3D"_blank">kmajum=
da@cisco.com</a>&gt; wrote:<u></u><u></u></p>
<blockquote style=3D"border-top:none;border-right:none;border-bottom:none;b=
order-left:1pt solid rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4=
.8pt;margin-right:0in">
<p class=3D"MsoNormal">Hi,<br>
<br>
We have submitted the below draft &quot;draft-deevimajumdar-spring-<wbr>bgp=
-feedback&quot; to describe the framework for BGP Feedback message in Segme=
nt Routing to notify the inconsistency in the network. Please review and pr=
ovide valuable feedback.<br>
<br>
Regards<br>
<br>
-----Original Message-----<br>
From: <a href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank">interne=
t-drafts@ietf.org</a> [mailto:<a href=3D"mailto:internet-drafts@ietf.org" t=
arget=3D"_blank">internet-drafts@ietf.<wbr>org</a>]<br>
Sent: Friday, April 21, 2017 12:35 PM<br>
To: Kausik Majumdar (kmajumda) &lt;<a href=3D"mailto:kmajumda@cisco.com" ta=
rget=3D"_blank">kmajumda@cisco.com</a>&gt;; Krishna Deevi (kdeevi) &lt;<a h=
ref=3D"mailto:kdeevi@cisco.com" target=3D"_blank">kdeevi@cisco.com</a>&gt;;=
 Krishna Deevi (kdeevi) &lt;<a href=3D"mailto:kdeevi@cisco.com" target=3D"_=
blank">kdeevi@cisco.com</a>&gt;<br>
Subject: New Version Notification for draft-deevimajumdar-spring-<wbr>bgp-f=
eedback-00.txt<br>
<br>
<br>
A new version of I-D, draft-deevimajumdar-spring-<wbr>bgp-feedback-00.txt<b=
r>
has been successfully submitted by Kausik Majumdar and posted to the IETF r=
epository.<br>
<br>
Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0draft-deevimajumdar-spring-<w=
br>bgp-feedback<br>
Revision:=C2=A0 =C2=A0 =C2=A0 =C2=A000<br>
Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 A Framework for BGP Feedback Messa=
ge In Segment Routing<br>
Document date:=C2=A0 2017-04-21<br>
Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Individual Submission<br>
Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 12<br>
URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"https://www.ietf.o=
rg/internet-drafts/draft-deevimajumdar-spring-bgp-feedback-00.txt" target=
=3D"_blank">
https://www.ietf.org/internet-<wbr>drafts/draft-deevimajumdar-<wbr>spring-b=
gp-feedback-00.txt</a><br>
Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://datatracker.iet=
f.org/doc/draft-deevimajumdar-spring-bgp-feedback/" target=3D"_blank">https=
://datatracker.ietf.org/<wbr>doc/draft-deevimajumdar-<wbr>spring-bgp-feedba=
ck/</a><br>
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://tools.ietf.org/html/=
draft-deevimajumdar-spring-bgp-feedback-00" target=3D"_blank">https://tools=
.ietf.org/html/<wbr>draft-deevimajumdar-spring-<wbr>bgp-feedback-00</a><br>
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://datatracker.ietf.org=
/doc/html/draft-deevimajumdar-spring-bgp-feedback-00" target=3D"_blank">htt=
ps://datatracker.ietf.org/<wbr>doc/html/draft-deevimajumdar-<wbr>spring-bgp=
-feedback-00</a><br>
<br>
<br>
Abstract:<br>
=C2=A0 =C2=A0In support of Segment Routing(SR), routing protocols advertise=
 a<br>
=C2=A0 =C2=A0variety of identifiers used to define the segments that direct=
 packet<br>
=C2=A0 =C2=A0forwarding.<br>
<br>
=C2=A0 =C2=A0In cases where the information advertised by a given protocol<=
br>
=C2=A0 =C2=A0instance is either internally inconsistent or conflicts with<b=
r>
=C2=A0 =C2=A0advertisements from another protocol instance a means of notif=
ying<br>
=C2=A0 =C2=A0the originator about the inconsistency is required.=C2=A0 This=
 document<br>
=C2=A0 =C2=A0defines a generic mechanism to notify the BGP originator about=
 the<br>
=C2=A0 =C2=A0inconsistency in the network.<br>
<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n until the htmlized version and diff are available at
<a href=3D"http://tools.ietf.org" target=3D"_blank">tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
______________________________<wbr>_________________<br>
spring mailing list<br>
<a href=3D"mailto:spring@ietf.org" target=3D"_blank">spring@ietf.org</a><br=
>
<a href=3D"https://www.ietf.org/mailman/listinfo/spring" target=3D"_blank">=
https://www.ietf.org/mailman/<wbr>listinfo/spring</a><u></u><u></u></p>
</blockquote>
</div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
</div></div></div>
</div>

</blockquote></div><br></div></div>

--001a114f5cce3f028a054dbc1b29--


From nobody Sat Apr 22 03:10:27 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66488129476 for <idr@ietfa.amsl.com>; Sat, 22 Apr 2017 03:10:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MUpbrYx2QIGG for <idr@ietfa.amsl.com>; Sat, 22 Apr 2017 03:10:22 -0700 (PDT)
Received: from mail-wm0-x234.google.com (mail-wm0-x234.google.com [IPv6:2a00:1450:400c:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 39189129474 for <idr@ietf.org>; Sat, 22 Apr 2017 03:10:22 -0700 (PDT)
Received: by mail-wm0-x234.google.com with SMTP id o81so31020177wmb.1 for <idr@ietf.org>; Sat, 22 Apr 2017 03:10:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=nlDVYy1/PkRVGVUhjVdvjYsNRa901JpYjx0O8PehJPU=; b=atuDQ5vWOaOn84CQKpzqz4tGQUBg4kC//OwPqjpUDvV7hldWDWSAkfqvmx4veRRieW Cxoq4REC369gFbK3qYQ5eVHw8UMJMe7yxTS3FNmeV/4XriuyMjPO9CNQewCrWrb+eaXM u4RSnua2GXrxxMqXgMqckIL4UCbaW8IysbHJA7xJBU3vX2upHy903OI7fVOz4YcUokgh 7+zjKXw3z/aVh5m0A3vNeBW+qEVoVUqtC8aYEiOYhdktJrwXZM+dahshpkppH37tDiSh 1QgOLxgzzEDJLFnBRLK9RVr/3JzPXSM+Up4g+unmy2k09rzP0buPuXwK3MOpwW/wDXyY MiiQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=nlDVYy1/PkRVGVUhjVdvjYsNRa901JpYjx0O8PehJPU=; b=fdjBuzhbUjMOqLOk5z2qIYoR4nc4cAxdZintCjOxlELkYwB/VSAdm9Kk5bBvRdgVaK N7nZ0H+3nWvKWZ5thkz37F9oLgjMPjQ9Uw+mOMtSXVV+yD2hj5Z084+L3l8nYNIHui9z vCqyz7BAbV1Al93e3tykdmT39z2cDoeEKlGI7ov0E0wAZC8wm8nPY5IBUpRjuPIA3oSe SQt45pbFlziIqhGByoo6teXFiydY9nS+VmpKDCi7BbThgz8/GrXllswLNpVKdO3XtHaA QZHD42oi2uSPPlwW7gy/hN3Hrv3V3iaDwZL1i6ZAvBAZi1wA4UcScmsWp3td56PlopEw uXeg==
X-Gm-Message-State: AN3rC/6mV/dwHjrDi3YenQmyI0IOtUAoUvAgUio27onIyMtuvCGg3gNX IGiVMhHd0o1Nzw==
X-Received: by 10.28.227.4 with SMTP id a4mr2391200wmh.50.1492855820353; Sat, 22 Apr 2017 03:10:20 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:81c5:ceb8:25a1:6cb]) by smtp.gmail.com with ESMTPSA id y60sm8578301wrb.39.2017.04.22.03.10.16 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 22 Apr 2017 03:10:17 -0700 (PDT)
Date: Sat, 22 Apr 2017 12:10:13 +0200
From: Job Snijders <job@instituut.net>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
Cc: "draft-ietf-idr-shutdown@ietf.org" <draft-ietf-idr-shutdown@ietf.org>, "idr-chairs@ietf.org" <idr-chairs@ietf.org>, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170422101013.4unb4a3ulsq2kueg@Vurt.local>
References: <010A73B6-A030-483F-8D79-3498D92C3335@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <010A73B6-A030-483F-8D79-3498D92C3335@cisco.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/tdFskbT21LVKP4uaMkJtqUFeFUE>
Subject: Re: [Idr] AD Review of draft-ietf-idr-shutdown-07
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 22 Apr 2017 10:10:26 -0000

Dear Alvaro,

On Fri, Apr 21, 2017 at 07:05:22PM +0000, Alvaro Retana (aretana) wrote:
> This document partially answers the “why did the session go down?”
> question by adding the ability to send other information as part of a
> Cease NOTIFICATION.  I say “partially” because it does so for only 2
> of the existing subcodes.  Except for the draft’s name, there’s no
> justification or explanation of why all the current (or even future!)
> subcodes are not granted the ability to (optionally) send extra
> information.  Why?  I know that this point was brought up on the list
> [1], and the resolution seems to have simply been “that’s out of
> scope”.  Personally (taking my AD hat off!), I think it’s a shame –
> but I guess it’s also an opportunity to write a 1-line update to this
> document.  BTW, I don’t want to necessarily resurrect this point, I’m
> ok being in the rough…  [Putting my AD hat back on…]  It would be very
> nice if there was some text (a paragraph or two) explaining why just 2
> subcodes, or maybe why not the others – I’m sure (or maybe I hope)
> that others will have similar questions.

Following the documents history it is easy to see that originally we
proposed a new Cease subcode (which would mimic 'shutdown'), but were
encouraged to recycle an existing codepoint since there was an
opportunity for permissionless extension, and subsequently the utility
'shutdown' and 'reset' was defined as belonging to the same group.

The choice to 'just' decorate subcode 2 and 4 was driven out of
operational experience with the various shutdown events. 2 and 4 are
human initiated (or humans program a system to do it on their behalf).
The other sub cease codes are either driven out of existing automation
no immediate need to enrich them was identified ("maximum prefix",
"Connection Rejected")), or are poorly understood ("Other Configuration
Change") or rarely used ("Out of Resources").

We also analysed how the concept would fit in currently established CLI
paradigms, and identified that in most operating systems it would be
trivial to enrich the 'shutdown/down/disable' or 'clear/reset' commands
or configuration directives, but less so for the other types of events.

So in short: we looked at what is commonly used, and enriched those.
This leaves room for others to decorate the the other or future
subcodes, if they identified a need to be addressed.

> Besides that rant, I do have some other comments (please see below)
> aimed mostly at clarifying.  I would like to (at least) see the
> comments about the Security Considerations addressed before starting
> the IETF Last Call.

> [1] https://mailarchive.ietf.org/arch/msg/idr/YJPgIdtZg7DrY4PliefkrPm6Kas/?qid=fb7d4b6fce9500d97f5b7ab25a062d53
> 
> C1. s/This document specifies…/This document updates [RFC4486] by specifying…

done.

> C2. s/Cease NOTIFICATION message [RFC4486]/Cease NOTIFICATION message [RFC4271] – or simply take the reference off.

ok, opted for RFC4271 

> C3. Section 2. (Shutdown Communication)
> 
> OLD>
>    … then the BGP speaker MAY send to the neighbor a
>    NOTIFICATION message with the Error Code "Cease" and Error Subcode
>    "Administrative Shutdown" or "Administrative Reset" followed by a
>    length field and an UTF-8 encoded string.
> 
> NEW>
> …and it sends a NOTIFIATION message with the Error Code "Cease" and
> Error Subcode "Administrative Shutdown" or "Administrative Reset"
> [RFC4486], it MAY include an UTF-8 encoded string.
> 
> Objective: move the MAY to indicate that the extra string is optional,
> and not the whole thing.  I know that a BGP speaker may end up not
> sending the Cease because rfc4486 has a SHOULD in it…but I also wanted
> to avoid confusion between that SHOULD and this MAY.

thank you, accepted.

> C4. Please put a Figure number to go with the encoding.

done

> C5. Section 4. (Error Handling): “Any erroneous or malformed Shutdown
> Communication received SHOULD be logged for the attention of the
> operator and then MAY be discarded.”
> 
> C5.1. What does “erroneous or malformed” mean?  I guess this is beyond
> a bad length, but maybe it refers to invalid UTF-8 sequences, or maybe
> something different.   ??

Yes, section 2 "A receiving BGP speaker MUST NOT interpret invalid UTF-8
sequences." So, what a BGP speaker could do is send a hexdumped version
of the received data to syslog after something like "printf("%02x",
*p++);", rather then present that data through usual ways (as UTF-8).

> C5.2. Does the fact the content is erroneous mean that the
> NOTIFICATION should be ignored?  I would assume not…but the “MAY be
> discarded” part may raise questions.  Do you only discard the
> “Shutdown Communication” part?  Or the whole NOTIFICATION?  Where you
> storing NOTIFICATIONs to start with?  I guess an implementation can
> keep the string around for historical purposes…but that seems an
> implementation detail and nothing like that is specified in the
> document.

Following the Cease NOTIFICATION the TCP session will be torn down, so
even if you ignore the NOTIFICATION, the BGP speaker will have to deal
with a torn down session anyway. But, I'll remove "and then MAY be
discarded". It is indeed up to implementers to decide whether they want
to keep it around. OpenBGPD keeps it around in a 'show bgp
neighbor'-style command, exabgp & pmacct don't.

> C5.3. Section 2 already talks about reporting the contents -- I’m
> assuming the logging requirement here is the same (do whatever you
> want, but syslog SHOULD be used), right?  If so, then how is the
> handling of the “erroneous or malformed” information different than
> that of the one that isn’t?

I envision that in the invalid case one simply logs "received malformed
shutdown communication", with perhaps a hexdump of what was received,
and in the normal situation a bgp speaker decodes the string as UTF-8,
syslogs the result, and perhaps stores it for historic purposes. Do you
have a suggestion how to clarify?

perhaps, NEW:

    """
    If an erroneous or malformed Shutdown Communication is received, a
    message indicating this event SHOULD be logged for the attention of
    the operator.  An erroneous or malformed Shutdown Communication
    itself MAY be logged in a hexdump format.
    """

> C6. Section 5. (IANA Considerations) Why do you want the registry to
> refer to this document?  There’s nothing in this document that
> modifies or affects the registry, the policies or the assignments… I
> think that the Updates tag is enough to show the relationship.

Because 4486 is updated, and 4486 instantiated those entries. I believe
there is benefit in providing this additional way to show the relation.
A developer or debugger might go straight to the registry looking for
just the value mapping, and then be happy to learn that subcode 2 & 4
could be followed by trailing data which is encoded in a specific way.

> C7. Section 6.  (Security Considerations)
> 
> C7.1. REQUIRING is not an rfc2119 keyword.  Please work REQUIRED in
> there instead.

OK, I got that from RFC 5424, so we might need an errata there.

OLD:
    This document guards against the technical issues outlined in UTR36
    by REQUIRING "shortest form" encoding.
NEW:
    UTF-8 "Shortest Form" encoding is REQUIRED to guard against the
    technical issues outlined in UTR36.

> C7.2. I agree on the points about integrity and confidentiality.
> However, neither rfc4486, rfc4271 nor rfc4272 are as specific as
> you’re being here.  I don’t think this is the document where we want
> to have the discussion about explicitly upgrading to TCP-AO, even if
> it’s just mentioned as an example.  Suggestion:  leave the text about
> the potential concern, take both examples out, and point at the
> security considerations in rfc4271/rfc4272.
> 
> NEW>
>    Users of this mechanism should be aware that unless a transport that
>    provides integrity is used for the BGP
>    session in question, a Shutdown Communication message could be
>    forged.  Unless a transport that provides confidentiality
>    is used, a Shutdown Communication message could be
>    snooped by an attacker.  These issues are common to any BGP message
>    but may be of greater interest in the context of this proposal since
>    the information carried in the message is generally expected to be
>    used for human-to-human communication.  Refer to the related considerations
>    in [RFC4271] and [RFC4272].

OK, accepted.

> C7.3. In the Shepherd’s write-up [2], Sue wrote: “The Security-ADs
> will look at the ability to send data which indicates specific details
> regarding an operator or the operator's topology.”  Given that the
> operator can put anything in the string, it would be nice if you
> addressed this concern up front (and not wait for the SEC ADs).  Even
> if the information is being sent to a “trusted” peer, I think Sue
> raises an interesting point as “confidential” information may be
> inadvertently sent out.  One way to address this concern may be with
> guidance to operators and to reaffirm the fact that while the
> information is sent only one hop away (to your peer), it can be used
> as the receiver’s discretion.
> 
> [2] https://datatracker.ietf.org/doc/draft-ietf-idr-shutdown/shepherdwriteup/

Interesting point. Do you think XMPP, SMTP, NNTP, and SYSLOG, include
similar clauses? I personally may want to wait for a security AD to
actually make and argue the point rather then 'preempt' the angle with
text which borders on legalese.

Following your feedback, we'll post an update shortly.

Kind regards,

Job


From nobody Sun Apr 23 05:56:12 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0363127978 for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 05:56:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level: 
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 89zRews7hMNi for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 05:56:09 -0700 (PDT)
Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 095FE126B71 for <idr@ietf.org>; Sun, 23 Apr 2017 05:56:08 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 70D12A5; Sun, 23 Apr 2017 14:56:05 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1492952165; bh=L5obmkARMK2UhO7VxpZaImjDTUy/IqWp2HX9GLBSYAg=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=MpB3pIarf6xz/elOD0pQ78sIV+bcDZY3rdu5jumcH1KdJG5UPNOHyQ9O6627tthQE +BHoBf5jcPhf7i9rZJV3jf4e4drvSJLUdNRCWBN6ci/aGZbEWo7Oz++40ZsOuTTPbw 3iKSWn4FRjRtII86dvxvRwDMiVtqBFp46gQrzEfE=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 6E98BA4; Sun, 23 Apr 2017 14:56:05 +0200 (CEST)
Date: Sun, 23 Apr 2017 14:56:05 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Enke Chen <enkechen@cisco.com>
cc: "idr@ietf.org" <idr@ietf.org>
In-Reply-To: <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com>
Message-ID: <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/vDopN75sGxXXUmmwnwrtiOI_DPc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Apr 2017 12:56:11 -0000

On Fri, 21 Apr 2017, Enke Chen wrote:

> Job,
>
> IMO the most important point from the discussion is that any BGP extension
> or behavior change must be backward compatible, which this document is lacking
> or even missing.  After more than 20 years of BGP deployment, the world is no
> longer "green field" any more.

I have been involved in running core networks since late 90ties. I've 
deployed several vendors gear. Yes, going from IOS to IOS XR with the 
change to XR having default deny if there is no policy, that was a single 
occasion "oh", and then I knew that. The good part here is that it's 
failsafe "close", so that you don't announce anything by accident. In IOS 
you have to basically paste two lines at once, with the first line being 
the creation of the neighbor, the second line being shutdown. Then you can 
configure the rest. Otherwise there is a race condition in the immediacy 
of a per-line, immediate committing operating system such as IOS.

This is just bad design. It's "fail open" default. If you somehow fail to 
paste that second shutdown line, you're now fully-open, announcing and 
accepting all routes.

If IOS would be changing its defaults, the CLI line migration code could 
by default insert a PERMIT-ALL policy statement, or some other means where 
an upgrade would keep the behaviour of the box intact across operating 
system versions.

So I fully support draft-ietf-grow-bgp-reject-05 because it just makes 
more operational sense than the old default that for instance IOS 
implements. We need default fail-close, because it just creates less 
problems than default fail-open.

If this doesn't make sense, why was it chosen for IOS XR back in the early 
00ds?

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Sun Apr 23 06:42:38 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A080B127909 for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 06:42:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rzbqOt9Yy9RQ for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 06:42:35 -0700 (PDT)
Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E293124B0A for <idr@ietf.org>; Sun, 23 Apr 2017 06:42:35 -0700 (PDT)
Received: by mail-io0-x233.google.com with SMTP id r16so151835639ioi.2 for <idr@ietf.org>; Sun, 23 Apr 2017 06:42:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=YubXERoYaqJgs77o7Wkh+fK+FMx2TTLxpQxdwChP/mc=; b=UQTTQXqr00hTZDwVpNo1QeRvkea1212yGqVqkpuNSYxuimW6L2jIfpXyc+YXASc5BV 71SfoMhLdRTAkIxDNPdQdX724RdxOZiiPlxOn2XX6quoarq+OuBzjEnuVlFe1hXy/qVm qx7JLGI7Ua5zGuxNDcF1EzjzsuYkdQSJWQ2IHgR+JzHqDMVBXCiFMSmV+FfZ+H3x9Szu 98sccSXsHO9YiMIxHlHWFftlUsCiYbz54cjvsJHaAEh6UljtOzH9Kva4akNWBBAwzy5J FdZNkrsq//XRkd1mesOycPVHQivL25PqvAjC931jMZMKlhhQq6EYeJoy7MzfQ2lWY1Mv AfIg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=YubXERoYaqJgs77o7Wkh+fK+FMx2TTLxpQxdwChP/mc=; b=N3oYcnAYBmdowq8L05DBXa8694Yu0Ni52tZIW07KXQmzbuh7zdfSgdXhMq0hxsjRdS yzVv8Wb0Z8Yrk0+niEQ3PDhAdRqtvnvYxZzq4w0Eh01Fc/J2Jg779goQXePCM9yQFsZ+ WpoX5llg61L3B0XRCtKNgiMOVbeZ2ehpI9Ysg7dxpCL1Q8ZjhqYkXHakygJSk/ujiFf3 d3IVd26FyzKZYJwTTgMOkKpngTLrTE0CU7BAKNo1UYdzly8ZjQAshYr7+c3P27Pza6n+ LSxI++91LXscHQv0c5e/nDIMTBf0VgyQidPdqEF9X7JKT12iXMeWidSiaFkY5lzWdfhb gxrw==
X-Gm-Message-State: AN3rC/7E/NWE0A3sS4S0amfRSHov+fg85x/U+UXJyfdQ/yIOu5d9exF8 D97sgWgOMSmpP9A/PfCdowYRpYaaDQ==
X-Received: by 10.107.140.10 with SMTP id o10mr2052313iod.139.1492954954501; Sun, 23 Apr 2017 06:42:34 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Sun, 23 Apr 2017 06:42:33 -0700 (PDT)
In-Reply-To: <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se>
From: Robert Raszuk <robert@raszuk.net>
Date: Sun, 23 Apr 2017 15:42:33 +0200
X-Google-Sender-Auth: YrH-LoiQfIyPM68p9B2XoULS068
Message-ID: <CA+b+ER=iuA=bipQJedh7Z=Q-wo6ShjhmgBsHdQ-SYKesEH_C2Q@mail.gmail.com>
To: Mikael Abrahamsson <swmike@swm.pp.se>
Cc: Enke Chen <enkechen@cisco.com>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=94eb2c06084cba9ae5054dd5a9af
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/QP6C9XryCzSbl0iD3zTx_GmX3n8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Apr 2017 13:42:37 -0000

--94eb2c06084cba9ae5054dd5a9af
Content-Type: text/plain; charset=UTF-8

> If this doesn't make sense,

No one said here that it does not make sense. All comments so far are
rather about few points:

-  what real problem does it solve
-  should it apply to all address families or just 1/1 & 2/1 and all
profiles of BGP use
-  if done should it be silent ? (**)
-  should routes still be in BGP Adj_RIB_In and be sent by BMP (further
hiding the issue)


> why was it chosen for IOS XR back in the early 00ds?

Because 3 first major customers of XR said they prefer AF centric BGP
config and to have such policy for eBGP route announcement. As XR was not
deployed anywhere making that default was zero pain for anyone.

** Making route ineligible for best path and local RIB insertion is one
thing. But if you also are using say "add-paths  all" I would not be
surprised if those bgp implementation which care less if the route is
inserted in RIB and FIB before propagation would advertise it anyway to
iBGP peers (**) making even bigger mess in your network.

- - -

Besides to make sure the BGP policy is there before route is annouced or
accepted very is much simpler way. It is not about changing default, mess
with 100s of corner cases in the code. BGP configuration parser may just
not allow to configure "activate" under a given neighbor in selected (or
all) AFs if policy is not there. Done and makes everyone happy ! On upgrade
to new OS optionally you can still run fine with auto-addition of this
proposed "bgp insecure-mode" global bgp config line.


Example:

router bgp 65000

neighbor  192.168.1.1 remote-as 65001
address-family ipv4 unicast

neighbor 192.168.1.1 activate

                                          ^^^^^^^^^

!!! COMMAND NOT ACCEPTED .. ACTIVATE NOT ALLOWED BEFORE POLICY FOR EBGP
PEER IS SET.

//R

On Sun, Apr 23, 2017 at 2:56 PM, Mikael Abrahamsson <swmike@swm.pp.se>
wrote:

> On Fri, 21 Apr 2017, Enke Chen wrote:
>
> Job,
>>
>> IMO the most important point from the discussion is that any BGP extension
>> or behavior change must be backward compatible, which this document is
>> lacking
>> or even missing.  After more than 20 years of BGP deployment, the world
>> is no
>> longer "green field" any more.
>>
>
> I have been involved in running core networks since late 90ties. I've
> deployed several vendors gear. Yes, going from IOS to IOS XR with the
> change to XR having default deny if there is no policy, that was a single
> occasion "oh", and then I knew that. The good part here is that it's
> failsafe "close", so that you don't announce anything by accident. In IOS
> you have to basically paste two lines at once, with the first line being
> the creation of the neighbor, the second line being shutdown. Then you can
> configure the rest. Otherwise there is a race condition in the immediacy of
> a per-line, immediate committing operating system such as IOS.
>
> This is just bad design. It's "fail open" default. If you somehow fail to
> paste that second shutdown line, you're now fully-open, announcing and
> accepting all routes.
>
> If IOS would be changing its defaults, the CLI line migration code could
> by default insert a PERMIT-ALL policy statement, or some other means where
> an upgrade would keep the behaviour of the box intact across operating
> system versions.
>
> So I fully support draft-ietf-grow-bgp-reject-05 because it just makes
> more operational sense than the old default that for instance IOS
> implements. We need default fail-close, because it just creates less
> problems than default fail-open.
>
> If this doesn't make sense, why was it chosen for IOS XR back in the early
> 00ds?
>
> --
> Mikael Abrahamsson    email: swmike@swm.pp.se
>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--94eb2c06084cba9ae5054dd5a9af
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small"><span style=3D"font-family:arial,sans-s=
erif;font-size:12.8px"><br></span></div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"=
font-family:arial,sans-serif;font-size:12.8px">&gt; If this doesn&#39;t mak=
e sense,=C2=A0</span></div><div class=3D"gmail_default" style=3D"font-famil=
y:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:ar=
ial,sans-serif;font-size:12.8px"><br></span></div><div class=3D"gmail_defau=
lt" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span =
style=3D"font-family:arial,sans-serif;font-size:12.8px">No one said here th=
at it does not make sense. All comments so far are rather about few points:=
</span></div><div class=3D"gmail_default" style=3D"font-family:arial,helvet=
ica,sans-serif;font-size:small"><span style=3D"font-family:arial,sans-serif=
;font-size:12.8px"><br></span></div><div class=3D"gmail_default" style=3D"f=
ont-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-=
family:arial,sans-serif;font-size:12.8px">- =C2=A0what real problem does it=
 solve=C2=A0</span></div><div class=3D"gmail_default" style=3D"font-family:=
arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:aria=
l,sans-serif;font-size:12.8px">- =C2=A0should it apply to all address famil=
ies or just 1/1 &amp; 2/1 and all profiles of BGP use=C2=A0</span></div><di=
v class=3D"gmail_default"><span style=3D"font-size:12.8px">- =C2=A0if done =
should it be silent ? (**)=C2=A0</span><br></div><div class=3D"gmail_defaul=
t"><span style=3D"font-size:12.8px">- =C2=A0should routes still be in BGP A=
dj_RIB_In and be sent by BMP (further hiding the issue)=C2=A0</span></div><=
div class=3D"gmail_default"><span style=3D"font-size:12.8px"><br></span></d=
iv><div class=3D"gmail_default"><span style=3D"font-size:12.8px"><br></span=
></div><div class=3D"gmail_default"><span style=3D"font-size:12.8px">&gt; w=
hy was it chosen for IOS XR back in the early 00ds?</span><br></div><div cl=
ass=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-=
size:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px"><=
br></span></div><div class=3D"gmail_default"><span style=3D"font-size:12.8p=
x">Because 3 first major customers of XR said they prefer AF centric BGP co=
nfig and to have such policy for eBGP route announcement. As XR was not dep=
loyed anywhere making that default was zero pain for anyone.=C2=A0</span></=
div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-=
serif;font-size:small"><span style=3D"font-family:arial,sans-serif;font-siz=
e:12.8px"><br></span></div><div class=3D"gmail_default" style=3D"font-famil=
y:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:ar=
ial,sans-serif;font-size:12.8px">** Making route=C2=A0</span><span style=3D=
"font-family:arial,sans-serif;font-size:12.8px">ineligible</span><span styl=
e=3D"font-family:arial,sans-serif;font-size:12.8px">=C2=A0for best path and=
 local RIB insertion is one thing. But if you also are using say &quot;add-=
paths =C2=A0all&quot; I would not be surprised if those bgp implementation =
which care less if the route is inserted in RIB and FIB before propagation =
would advertise it anyway to iBGP peers (**) making even bigger mess in you=
r network.</span></div><div class=3D"gmail_default" style=3D"font-family:ar=
ial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:arial,=
sans-serif;font-size:12.8px"><br></span></div><div class=3D"gmail_default" =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span styl=
e=3D"font-family:arial,sans-serif;font-size:12.8px">- - -=C2=A0</span></div=
><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-ser=
if;font-size:small"><span style=3D"font-family:arial,sans-serif;font-size:1=
2.8px"><br></span></div><div class=3D"gmail_default" style=3D"font-family:a=
rial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:arial=
,sans-serif;font-size:12.8px">Besides to make sure the BGP policy is there =
before route is annouced or accepted very is much simpler way. It is not ab=
out changing default, mess with 100s of corner cases in the code. BGP confi=
guration parser may just not allow to configure &quot;activate&quot; under =
a given neighbor in selected (or all) AFs if policy is not there. Done and =
makes everyone happy ! On upgrade to new OS optionally you can still run fi=
ne with auto-addition of this proposed &quot;bgp insecure-mode&quot; global=
 bgp config line.</span></div><div class=3D"gmail_default" style=3D"font-fa=
mily:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family=
:arial,sans-serif;font-size:12.8px"><br></span></div><div class=3D"gmail_de=
fault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><sp=
an style=3D"font-family:arial,sans-serif;font-size:12.8px"><br></span></div=
><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-ser=
if;font-size:small"><span style=3D"font-family:arial,sans-serif;font-size:1=
2.8px">Example:=C2=A0</span></div><div class=3D"gmail_default" style=3D"fon=
t-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-fa=
mily:arial,sans-serif;font-size:12.8px"><br></span></div><div class=3D"gmai=
l_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"=
><p style=3D"outline:none;margin:0px 0px 1.4em;color:rgb(88,88,91);font-fam=
ily:arial,sans-serif;font-size:14.4px"><span style=3D"outline:none;font-siz=
e:14px"><span style=3D"outline:none;font-family:&quot;courier new&quot;,cou=
rier,monospace">router bgp 65000</span></span></p><p style=3D"outline:none;=
margin:0px 0px 1.4em;color:rgb(88,88,91);font-family:arial,sans-serif;font-=
size:14.4px"><span style=3D"font-family:&quot;courier new&quot;,courier,mon=
ospace;font-size:14px">neighbor =C2=A0192.168.1.1 remote-as 65001</span><br=
></p></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetic=
a,sans-serif;font-size:small"><span style=3D"font-family:&quot;courier new&=
quot;,courier,monospace;font-size:14px;color:rgb(88,88,91)">address-family =
ipv4 unicast</span><br></div><div class=3D"gmail_default" style=3D"font-fam=
ily:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:=
&quot;courier new&quot;,courier,monospace;font-size:14px;color:rgb(88,88,91=
)"><br></span></div><div class=3D"gmail_default" style=3D"font-family:arial=
,helvetica,sans-serif;font-size:small"><span style=3D"font-family:&quot;cou=
rier new&quot;,courier,monospace;font-size:14px;color:rgb(88,88,91)">neighb=
or 192.168.1.1 activate</span><br></div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small"><p style=3D"out=
line:none;margin:0px 0px 1.4em;color:rgb(88,88,91);font-family:arial,sans-s=
erif;font-size:14.4px"><span style=3D"font-size:14.4px">=C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ^^^^^^^^^</span></p=
><p style=3D"outline:none;margin:0px 0px 1.4em;color:rgb(88,88,91);font-fam=
ily:arial,sans-serif;font-size:14.4px"><span style=3D"font-size:14.4px">!!!=
 COMMAND NOT ACCEPTED .. ACTIVATE NOT ALLOWED BEFORE POLICY FOR EBGP PEER I=
S SET.=C2=A0</span><br></p><p style=3D"outline:none;margin:0px 0px 1.4em;co=
lor:rgb(88,88,91);font-family:arial,sans-serif;font-size:14.4px">//R</p></d=
iv></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Sun, =
Apr 23, 2017 at 2:56 PM, Mikael Abrahamsson <span dir=3D"ltr">&lt;<a href=
=3D"mailto:swmike@swm.pp.se" target=3D"_blank">swmike@swm.pp.se</a>&gt;</sp=
an> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;=
border-left:1px #ccc solid;padding-left:1ex"><span class=3D"">On Fri, 21 Ap=
r 2017, Enke Chen wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
Job,<br>
<br>
IMO the most important point from the discussion is that any BGP extension<=
br>
or behavior change must be backward compatible, which this document is lack=
ing<br>
or even missing.=C2=A0 After more than 20 years of BGP deployment, the worl=
d is no<br>
longer &quot;green field&quot; any more.<br>
</blockquote>
<br></span>
I have been involved in running core networks since late 90ties. I&#39;ve d=
eployed several vendors gear. Yes, going from IOS to IOS XR with the change=
 to XR having default deny if there is no policy, that was a single occasio=
n &quot;oh&quot;, and then I knew that. The good part here is that it&#39;s=
 failsafe &quot;close&quot;, so that you don&#39;t announce anything by acc=
ident. In IOS you have to basically paste two lines at once, with the first=
 line being the creation of the neighbor, the second line being shutdown. T=
hen you can configure the rest. Otherwise there is a race condition in the =
immediacy of a per-line, immediate committing operating system such as IOS.=
<br>
<br>
This is just bad design. It&#39;s &quot;fail open&quot; default. If you som=
ehow fail to paste that second shutdown line, you&#39;re now fully-open, an=
nouncing and accepting all routes.<br>
<br>
If IOS would be changing its defaults, the CLI line migration code could by=
 default insert a PERMIT-ALL policy statement, or some other means where an=
 upgrade would keep the behaviour of the box intact across operating system=
 versions.<br>
<br>
So I fully support draft-ietf-grow-bgp-reject-05 because it just makes more=
 operational sense than the old default that for instance IOS implements. W=
e need default fail-close, because it just creates less problems than defau=
lt fail-open.<br>
<br>
If this doesn&#39;t make sense, why was it chosen for IOS XR back in the ea=
rly 00ds?<span class=3D"HOEnZb"><font color=3D"#888888"><br>
<br>
-- <br>
Mikael Abrahamsson=C2=A0 =C2=A0 email: <a href=3D"mailto:swmike@swm.pp.se" =
target=3D"_blank">swmike@swm.pp.se</a></font></span><div class=3D"HOEnZb"><=
div class=3D"h5"><br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/idr</a><br>
</div></div></blockquote></div><br></div>

--94eb2c06084cba9ae5054dd5a9af--


From nobody Sun Apr 23 07:12:55 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 984871273B1 for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 07:12:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level: 
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JmIvF3ht3TiM for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 07:12:51 -0700 (PDT)
Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F585124B0A for <idr@ietf.org>; Sun, 23 Apr 2017 07:12:51 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 7536AA5; Sun, 23 Apr 2017 16:12:49 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1492956769; bh=q1TROB5AkzGL2s1tKJwga6cuuBI518pPf464axxvqgY=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=ttvIX+GC1/3or83bFYs5SGIt+87HNXxpu/JsXyvMQlw4IQML6+qUcyRvcDO11+637 tavpRSb64onp/V7S3WpkHmoIKnklvXMbOK70+qIc/E9JFw/nMu7OKXumzGppalGqYn JOBWuTkTmOUeFKoGH1jIzm2E/QGcBgyR9IJi5pzs=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 5D78AA4; Sun, 23 Apr 2017 16:12:49 +0200 (CEST)
Date: Sun, 23 Apr 2017 16:12:49 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Robert Raszuk <robert@raszuk.net>
cc: "idr@ietf.org" <idr@ietf.org>
In-Reply-To: <CA+b+ER=iuA=bipQJedh7Z=Q-wo6ShjhmgBsHdQ-SYKesEH_C2Q@mail.gmail.com>
Message-ID: <alpine.DEB.2.02.1704231602150.5591@uplift.swm.pp.se>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <CA+b+ER=iuA=bipQJedh7Z=Q-wo6ShjhmgBsHdQ-SYKesEH_C2Q@mail.gmail.com>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/tBornV8z5yy55ih25Kw6xNodNjg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Apr 2017 14:12:54 -0000

On Sun, 23 Apr 2017, Robert Raszuk wrote:

> !!! COMMAND NOT ACCEPTED .. ACTIVATE NOT ALLOWED BEFORE POLICY FOR EBGP 
> PEER IS SET.

I don't have any problems with this way of solving the issue. The document 
might say either this or to default-deny. Both solve the problem at hand 
(neither is default-open).

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Sun Apr 23 09:37:36 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BF0C1274D0 for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 09:37:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VQ3au8LunToV for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 09:37:32 -0700 (PDT)
Received: from mail-io0-x22f.google.com (mail-io0-x22f.google.com [IPv6:2607:f8b0:4001:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 456E5120227 for <idr@ietf.org>; Sun, 23 Apr 2017 09:37:32 -0700 (PDT)
Received: by mail-io0-x22f.google.com with SMTP id k87so161738536ioi.0 for <idr@ietf.org>; Sun, 23 Apr 2017 09:37:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=oOma4bugwAfO/Q0moC3iwRHgtA7/NcUC16l/+VaHgmc=; b=VZb9fNQU/jm+SW6RlLBJ30VktKGVleWzay56uDr3qkrpa+BcUr9DNpsYDvYpaaA23M BZuS8Vp+7hAVzgjfMpSu4NAWLl+/QwnA9Sxwv44xLcOsPC5UWoK69IIQYjjohQzHQjN9 c+WMDzmKb4CEzIqAktnFv4/6MQb2S25eg3gVqdJ+17a4PZXEsOtd/r/K5bg8mxhps6tg ZL+kntVhszwOtmMUxQJdyG64S6JmMPSREMtL5z1nAz4p0zzHAizBlEtK3lVLKSHb4A08 DcK1d6/F/Bjjz/RBpS4Dt16znrIsP7nkoCj/n5Pp6wIYak2kOPqGmKZzQ8WrTwIBqFZF I5fQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=oOma4bugwAfO/Q0moC3iwRHgtA7/NcUC16l/+VaHgmc=; b=Bdf0Rtvdq0I6GojDreWQ+4UYKBO1JhrKE853oA+hM+9LcHgW5h7VNo39wLhEr1J+BS 3Zgmg4NewMtpOS71t7FAdssNyfjPiFaLbj4Ho4VZocJ83lpDyU5trUaJe4UPx8goiP+m ZhHCZBjAnf2P/sMVVSWBLhzM+bTc/0zv6Dlqh/+DnQTZ5vC/TXrjBnKHKKLoqKikWxqM bLnFiwP5sw0+AODreygFWr6upNVKjfiD/r5rXXy86su0omV+xnpXfYj/ckm79PYsLQ54 +N7k16lLzF0zlfzHIGxYnntHgy8KhU3KskCA4l/Yn9fmOKZcVeBmqDk2uf6mk+Be94X6 31Zg==
X-Gm-Message-State: AN3rC/6dF7QpatugtxLnTCs9C5GMYWdw+xfN7QzWY1ZmqX6hOvd/y97V MmckJDR7xojLUpnHfjFqOV/pwqj96A==
X-Received: by 10.107.33.135 with SMTP id h129mr2569653ioh.57.1492965451616; Sun, 23 Apr 2017 09:37:31 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Sun, 23 Apr 2017 09:37:30 -0700 (PDT)
Received: by 10.79.170.4 with HTTP; Sun, 23 Apr 2017 09:37:30 -0700 (PDT)
In-Reply-To: <alpine.DEB.2.02.1704231602150.5591@uplift.swm.pp.se>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <CA+b+ER=iuA=bipQJedh7Z=Q-wo6ShjhmgBsHdQ-SYKesEH_C2Q@mail.gmail.com> <alpine.DEB.2.02.1704231602150.5591@uplift.swm.pp.se>
From: Robert Raszuk <robert@raszuk.net>
Date: Sun, 23 Apr 2017 18:37:30 +0200
X-Google-Sender-Auth: qzDPIiAXSvchfc8R5UcQ72EQkNU
Message-ID: <CA+b+ERnesQ2n6PO+mzX6+Euq7ictwMXgj65UaCV+4cH89yCt+Q@mail.gmail.com>
To: Mikael Abrahamsson <swmike@swm.pp.se>
Cc: idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a1140f5e867ef82054dd81b7c
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/jPezWUFf-8-EnlecwVtlaKd3Kvk>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Apr 2017 16:37:34 -0000

--001a1140f5e867ef82054dd81b7c
Content-Type: text/plain; charset=UTF-8

Ok so we may have a way forward then ;)

The only issue is such option does not work well with forward referencing
however unlike in XR rest of IOS if I recall does not allow forward
referencing.

So only change AF specific neighbor command sequence in config and we are
done ;).

//R.

On Apr 23, 2017 16:13, "Mikael Abrahamsson" <swmike@swm.pp.se> wrote:

> On Sun, 23 Apr 2017, Robert Raszuk wrote:
>
> !!! COMMAND NOT ACCEPTED .. ACTIVATE NOT ALLOWED BEFORE POLICY FOR EBGP
>> PEER IS SET.
>>
>
> I don't have any problems with this way of solving the issue. The document
> might say either this or to default-deny. Both solve the problem at hand
> (neither is default-open).
>
> --
> Mikael Abrahamsson    email: swmike@swm.pp.se
>

--001a1140f5e867ef82054dd81b7c
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Ok so we may have a way forward then ;)<div dir=3D"auto">=
<br></div><div dir=3D"auto">The only issue is such option does not work wel=
l with forward referencing however unlike in XR rest of IOS if I recall doe=
s not allow forward referencing.</div><div dir=3D"auto"><br></div><div dir=
=3D"auto">So only change AF specific neighbor command sequence in config an=
d we are done ;).</div><div dir=3D"auto"><br></div><div dir=3D"auto">//R.</=
div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Apr =
23, 2017 16:13, &quot;Mikael Abrahamsson&quot; &lt;<a href=3D"mailto:swmike=
@swm.pp.se">swmike@swm.pp.se</a>&gt; wrote:<br type=3D"attribution"><blockq=
uote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc =
solid;padding-left:1ex">On Sun, 23 Apr 2017, Robert Raszuk wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
!!! COMMAND NOT ACCEPTED .. ACTIVATE NOT ALLOWED BEFORE POLICY FOR EBGP PEE=
R IS SET.<br>
</blockquote>
<br>
I don&#39;t have any problems with this way of solving the issue. The docum=
ent might say either this or to default-deny. Both solve the problem at han=
d (neither is default-open).<br>
<br>
-- <br>
Mikael Abrahamsson=C2=A0 =C2=A0 email: <a href=3D"mailto:swmike@swm.pp.se" =
target=3D"_blank">swmike@swm.pp.se</a><br>
</blockquote></div></div>

--001a1140f5e867ef82054dd81b7c--


From nobody Sun Apr 23 13:01:27 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 693F6129446 for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 13:01:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.303
X-Spam-Level: 
X-Spam-Status: No, score=-17.303 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OtqQByivcB2P for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 13:01:23 -0700 (PDT)
Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1B32120727 for <idr@ietf.org>; Sun, 23 Apr 2017 13:01:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2260; q=dns/txt; s=iport; t=1492977683; x=1494187283; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=M5/tkrWTQ6W7dSXHlHgsABRu8nUVJjy4dutwsQDgC60=; b=jN9jjCQdmI5UM6pO96nmgAb/aktjxITmjAJw2DZ0S2/gB+ZcJIxufuew ZFAbu7+tVMKGBDMnhv19m6Lo5gfxZVwBtXayRlkH90tcyTutstUY2xrq9 aDF7Z+XtNotlk3QhWBrNbGKI3ptRVqY9R9qXPqlRMeo0LSswtmzHtdqK4 Y=;
X-IronPort-AV: E=Sophos;i="5.37,241,1488844800"; d="scan'208";a="240157042"
Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Apr 2017 20:01:23 +0000
Received: from [10.82.216.221] (rtp-vpn3-221.cisco.com [10.82.216.221]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id v3NK1MV6010172; Sun, 23 Apr 2017 20:01:22 GMT
To: Mikael Abrahamsson <swmike@swm.pp.se>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se>
Cc: "idr@ietf.org" <idr@ietf.org>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com>
Date: Sun, 23 Apr 2017 13:01:21 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/VNxVdACNM5D0kt6-Q42vWgWEPe8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Apr 2017 20:01:25 -0000

Hi, Mikael:

On 4/23/17 5:56 AM, Mikael Abrahamsson wrote:
> On Fri, 21 Apr 2017, Enke Chen wrote:
> 
>> Job,
>>
>> IMO the most important point from the discussion is that any BGP extension
>> or behavior change must be backward compatible, which this document is lacking
>> or even missing.  After more than 20 years of BGP deployment, the world is no
>> longer "green field" any more.
> 
> I have been involved in running core networks since late 90ties. I've deployed
> several vendors gear. Yes, going from IOS to IOS XR with the change to XR having
> default deny if there is no policy, that was a single occasion "oh", and then I
> knew that. The good part here is that it's failsafe "close", so that you don't announce
> anything by accident. In IOS you have to basically paste two lines at once, with
> the first line being the creation of the neighbor, the second line being shutdown. 
> Then you can configure the rest. Otherwise there is a race condition in the immediacy
> of a per-line, immediate committing operating system such as IOS.

I think the premature session bring up is fixable. Your email has been forwarded to
the IOS development team.

> 
> This is just bad design. It's "fail open" default. If you somehow fail to paste that
> second shutdown line, you're now fully-open, announcing and accepting all routes.
> 
> If IOS would be changing its defaults, the CLI line migration code could by default
> insert a PERMIT-ALL policy statement, or some other means where an upgrade would keep 
the behaviour of the box intact across operating system versions.
> 
> So I fully support draft-ietf-grow-bgp-reject-05 because it just makes more operational
> sense than the old default that for instance IOS implements. We need default fail-close,
> because it just creates less problems than default fail-open.
> 

> If this doesn't make sense, why was it chosen for IOS XR back in the early 00ds?

I don't think that folks are saying this "deny all" doe not make sense.  When you
start a *new* software, certainly you are free to choose a default based on the most
up-to-date knowledge.

As I understand, that was the case for IOS XR as a new and separate software release.
 
Regards,  -- Enke


From nobody Sun Apr 23 21:43:13 2017
Return-Path: <brian.peter.dickson@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0791F126BF0 for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 21:43:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cKLCDtZQN3oR for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 21:43:09 -0700 (PDT)
Received: from mail-it0-x235.google.com (mail-it0-x235.google.com [IPv6:2607:f8b0:4001:c0b::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81E61126B6D for <idr@ietf.org>; Sun, 23 Apr 2017 21:43:09 -0700 (PDT)
Received: by mail-it0-x235.google.com with SMTP id b134so4627543iti.1 for <idr@ietf.org>; Sun, 23 Apr 2017 21:43:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=bjefBA2PlOOgwJ5YHM2irFGODzLNfdGXfC86YUxVEFk=; b=WQcpFAos209lI5E7lB3I9Sk2YJM7c3rnwzHp7QGoTp8Vhq9Qu8VLzY7GouJ6hRsXao dnIAbYCYI1X/N9lZphiEiOBIxVYhBb8zpc3cTtv+YysQYPuLzpnjb5Sq45m3r4hj+cvA oE1lGgwECtX8n/4+68vXAUruUWZE0TvonBVnnQjme6I/FeXlP3r31cPjbUcb2TVRMdgZ 6J/clWo/5x6B57aIscGzj8tOAJ4fwOIxn6wp+YHw0zriyBzFlqI6gdnjP3heEEbrTUcc CwHSWCV7cmDOCyGTn2SCj0blvNLPZ9E2NNbWyvQB72ibpwSRvKpRSo2fN+0tfwbQ8Q4a HP8w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=bjefBA2PlOOgwJ5YHM2irFGODzLNfdGXfC86YUxVEFk=; b=nod6vqc++W0LF/IHvWE9jayJWodrEED6OgTADtFr4nEg97GGyu6Nx1GGaUXoixveD4 Vpa0NU3NwylMFeXPvgbluEzVshD1PClBNHvwv3eu8joHthVUebt3QVknx9WZTDAUpAp8 qZbNFNM31o+6ZF+vbzxVTzH8uJ9Yaj4LZJKpWdcHs7SP37oMQ7X7hT/Mno584ss4qPzE xaAEgS0VacQrwdAiTH6Zs8s0q+DTSR3qCgiBQYlQLdPpSrbS1RHjo7/OdN7glXVm4ktM 4BpphUJ87B+7V7+q/w917d6xYU7Ny0mSQwezVlekTpoMWcspdNVfm+V5x7Hfj6SXiK2x 6vaA==
X-Gm-Message-State: AN3rC/5Ga1bD6r6yccXvrC5g8HRZxetzJA1duhUmI55O+opJs6ngOOZz mqqTBhEImLTcOk9utR0G9Jk+4VLheQ==
X-Received: by 10.36.73.155 with SMTP id e27mr11641829itd.6.1493008988908; Sun, 23 Apr 2017 21:43:08 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.36.46.151 with HTTP; Sun, 23 Apr 2017 21:43:08 -0700 (PDT)
In-Reply-To: <CA+b+ER=iuA=bipQJedh7Z=Q-wo6ShjhmgBsHdQ-SYKesEH_C2Q@mail.gmail.com>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <CA+b+ER=iuA=bipQJedh7Z=Q-wo6ShjhmgBsHdQ-SYKesEH_C2Q@mail.gmail.com>
From: Brian Dickson <brian.peter.dickson@gmail.com>
Date: Sun, 23 Apr 2017 21:43:08 -0700
Message-ID: <CAH1iCipQK-odotOJ+TOvJq6i9kDC40-dYgifkkDA4=YSsCGLTQ@mail.gmail.com>
To: Robert Raszuk <robert@raszuk.net>
Cc: Mikael Abrahamsson <swmike@swm.pp.se>, "idr@ietf.org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a11c154966e381d054de23e0d
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/i6vyzVUT8vz5dvVi-1Xl9CSi5Fs>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 04:43:12 -0000

--001a11c154966e381d054de23e0d
Content-Type: text/plain; charset=UTF-8

For those not intimately familiar with non-Internet AFI/SAFI use cases (ie
other than 1/1 and 2/1), could someone explain which ASNs get used?

I am wondering if applying the "new rules" only when global ASNs (those not
reserved for private use) would be a suitable alternative to specific
AFI/SAFI combos?

And, to be clear, IMHO, the difference across AFI/SAFI should probably be
MUST vs SHOULD (or maybe MAY).

Also, don't at least some vendors have different code bases depending on
the use case, in which case the default could differ by code base?
E.g. ISP vs Enterprise vs (whatever other groupings/labels exist).

Plus, IMHO, a global knob to change the default is something that would be
wise to implement; I don't know whether recommending that belongs in the
document

Brian

On Sun, Apr 23, 2017 at 6:42 AM, Robert Raszuk <robert@raszuk.net> wrote:

>
> > If this doesn't make sense,
>
> No one said here that it does not make sense. All comments so far are
> rather about few points:
>
> -  what real problem does it solve
> -  should it apply to all address families or just 1/1 & 2/1 and all
> profiles of BGP use
> -  if done should it be silent ? (**)
> -  should routes still be in BGP Adj_RIB_In and be sent by BMP (further
> hiding the issue)
>
>
> > why was it chosen for IOS XR back in the early 00ds?
>
> Because 3 first major customers of XR said they prefer AF centric BGP
> config and to have such policy for eBGP route announcement. As XR was not
> deployed anywhere making that default was zero pain for anyone.
>
> ** Making route ineligible for best path and local RIB insertion is one
> thing. But if you also are using say "add-paths  all" I would not be
> surprised if those bgp implementation which care less if the route is
> inserted in RIB and FIB before propagation would advertise it anyway to
> iBGP peers (**) making even bigger mess in your network.
>
> - - -
>
> Besides to make sure the BGP policy is there before route is annouced or
> accepted very is much simpler way. It is not about changing default, mess
> with 100s of corner cases in the code. BGP configuration parser may just
> not allow to configure "activate" under a given neighbor in selected (or
> all) AFs if policy is not there. Done and makes everyone happy ! On upgrade
> to new OS optionally you can still run fine with auto-addition of this
> proposed "bgp insecure-mode" global bgp config line.
>
>
> Example:
>
> router bgp 65000
>
> neighbor  192.168.1.1 remote-as 65001
> address-family ipv4 unicast
>
> neighbor 192.168.1.1 activate
>
>                                           ^^^^^^^^^
>
> !!! COMMAND NOT ACCEPTED .. ACTIVATE NOT ALLOWED BEFORE POLICY FOR EBGP
> PEER IS SET.
>
> //R
>
> On Sun, Apr 23, 2017 at 2:56 PM, Mikael Abrahamsson <swmike@swm.pp.se>
> wrote:
>
>> On Fri, 21 Apr 2017, Enke Chen wrote:
>>
>> Job,
>>>
>>> IMO the most important point from the discussion is that any BGP
>>> extension
>>> or behavior change must be backward compatible, which this document is
>>> lacking
>>> or even missing.  After more than 20 years of BGP deployment, the world
>>> is no
>>> longer "green field" any more.
>>>
>>
>> I have been involved in running core networks since late 90ties. I've
>> deployed several vendors gear. Yes, going from IOS to IOS XR with the
>> change to XR having default deny if there is no policy, that was a single
>> occasion "oh", and then I knew that. The good part here is that it's
>> failsafe "close", so that you don't announce anything by accident. In IOS
>> you have to basically paste two lines at once, with the first line being
>> the creation of the neighbor, the second line being shutdown. Then you can
>> configure the rest. Otherwise there is a race condition in the immediacy of
>> a per-line, immediate committing operating system such as IOS.
>>
>> This is just bad design. It's "fail open" default. If you somehow fail to
>> paste that second shutdown line, you're now fully-open, announcing and
>> accepting all routes.
>>
>> If IOS would be changing its defaults, the CLI line migration code could
>> by default insert a PERMIT-ALL policy statement, or some other means where
>> an upgrade would keep the behaviour of the box intact across operating
>> system versions.
>>
>> So I fully support draft-ietf-grow-bgp-reject-05 because it just makes
>> more operational sense than the old default that for instance IOS
>> implements. We need default fail-close, because it just creates less
>> problems than default fail-open.
>>
>> If this doesn't make sense, why was it chosen for IOS XR back in the
>> early 00ds?
>>
>> --
>> Mikael Abrahamsson    email: swmike@swm.pp.se
>>
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>
>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>
>

--001a11c154966e381d054de23e0d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">For those not intimately familiar with non-Internet AFI/SA=
FI use cases (ie other than 1/1 and 2/1), could someone explain which ASNs =
get used?<div><br></div><div>I am wondering if applying the &quot;new rules=
&quot; only when global ASNs (those not reserved for private use) would be =
a suitable alternative to specific AFI/SAFI combos?</div><div><br></div><di=
v>And, to be clear, IMHO, the difference across AFI/SAFI should probably be=
 MUST vs SHOULD (or maybe MAY).</div><div><br></div><div>Also, don&#39;t at=
 least some vendors have different code bases depending on the use case, in=
 which case the default could differ by code base?</div><div>E.g. ISP vs En=
terprise vs (whatever other groupings/labels exist).</div><div><br></div><d=
iv>Plus, IMHO, a global knob to change the default is something that would =
be wise to implement; I don&#39;t know whether recommending that belongs in=
 the document</div><div><br></div><div>Brian<br><div class=3D"gmail_extra">=
<br><div class=3D"gmail_quote">On Sun, Apr 23, 2017 at 6:42 AM, Robert Rasz=
uk <span dir=3D"ltr">&lt;<a href=3D"mailto:robert@raszuk.net" target=3D"_bl=
ank">robert@raszuk.net</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_=
quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1=
ex"><div dir=3D"ltr"><span class=3D""><div style=3D"font-family:arial,helve=
tica,sans-serif;font-size:small"><span style=3D"font-family:arial,sans-seri=
f;font-size:12.8px"><br></span></div><div style=3D"font-family:arial,helvet=
ica,sans-serif;font-size:small"><span style=3D"font-family:arial,sans-serif=
;font-size:12.8px">&gt; If this doesn&#39;t make sense,=C2=A0</span></div><=
div style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span =
style=3D"font-family:arial,sans-serif;font-size:12.8px"><br></span></div></=
span><div style=3D"font-family:arial,helvetica,sans-serif;font-size:small">=
<span style=3D"font-family:arial,sans-serif;font-size:12.8px">No one said h=
ere that it does not make sense. All comments so far are rather about few p=
oints:</span></div><div style=3D"font-family:arial,helvetica,sans-serif;fon=
t-size:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px"=
><br></span></div><div style=3D"font-family:arial,helvetica,sans-serif;font=
-size:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px">=
- =C2=A0what real problem does it solve=C2=A0</span></div><div style=3D"fon=
t-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-fa=
mily:arial,sans-serif;font-size:12.8px">- =C2=A0should it apply to all addr=
ess families or just 1/1 &amp; 2/1 and all profiles of BGP use=C2=A0</span>=
</div><div><span style=3D"font-size:12.8px">- =C2=A0if done should it be si=
lent ? (**)=C2=A0</span><br></div><div><span style=3D"font-size:12.8px">- =
=C2=A0should routes still be in BGP Adj_RIB_In and be sent by BMP (further =
hiding the issue)=C2=A0</span></div><span class=3D""><div><span style=3D"fo=
nt-size:12.8px"><br></span></div><div><span style=3D"font-size:12.8px"><br>=
</span></div><div><span style=3D"font-size:12.8px">&gt; why was it chosen f=
or IOS XR back in the early 00ds?</span><br></div><div style=3D"font-family=
:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:ari=
al,sans-serif;font-size:12.8px"><br></span></div></span><div><span style=3D=
"font-size:12.8px">Because 3 first major customers of XR said they prefer A=
F centric BGP config and to have such policy for eBGP route announcement. A=
s XR was not deployed anywhere making that default was zero pain for anyone=
.=C2=A0</span></div><div style=3D"font-family:arial,helvetica,sans-serif;fo=
nt-size:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px=
"><br></span></div><div style=3D"font-family:arial,helvetica,sans-serif;fon=
t-size:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px"=
>** Making route=C2=A0</span><span style=3D"font-family:arial,sans-serif;fo=
nt-size:12.8px">ineligible</span><span style=3D"font-family:arial,sans-seri=
f;font-size:12.8px">=C2=A0for best path and local RIB insertion is one thin=
g. But if you also are using say &quot;add-paths =C2=A0all&quot; I would no=
t be surprised if those bgp implementation which care less if the route is =
inserted in RIB and FIB before propagation would advertise it anyway to iBG=
P peers (**) making even bigger mess in your network.</span></div><div styl=
e=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span style=3D=
"font-family:arial,sans-serif;font-size:12.8px"><br></span></div><div style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"=
font-family:arial,sans-serif;font-size:12.8px">- - -=C2=A0</span></div><div=
 style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span sty=
le=3D"font-family:arial,sans-serif;font-size:12.8px"><br></span></div><div =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span styl=
e=3D"font-family:arial,sans-serif;font-size:12.8px">Besides to make sure th=
e BGP policy is there before route is annouced or accepted very is much sim=
pler way. It is not about changing default, mess with 100s of corner cases =
in the code. BGP configuration parser may just not allow to configure &quot=
;activate&quot; under a given neighbor in selected (or all) AFs if policy i=
s not there. Done and makes everyone happy ! On upgrade to new OS optionall=
y you can still run fine with auto-addition of this proposed &quot;bgp inse=
cure-mode&quot; global bgp config line.</span></div><div style=3D"font-fami=
ly:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:a=
rial,sans-serif;font-size:12.8px"><br></span></div><div style=3D"font-famil=
y:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:ar=
ial,sans-serif;font-size:12.8px"><br></span></div><div style=3D"font-family=
:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:ari=
al,sans-serif;font-size:12.8px">Example:=C2=A0</span></div><div style=3D"fo=
nt-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-f=
amily:arial,sans-serif;font-size:12.8px"><br></span></div><div style=3D"fon=
t-family:arial,helvetica,sans-serif;font-size:small"><p style=3D"outline:no=
ne;margin:0px 0px 1.4em;color:rgb(88,88,91);font-family:arial,sans-serif;fo=
nt-size:14.4px"><span style=3D"outline:none;font-size:14px"><span style=3D"=
outline:none;font-family:&quot;courier new&quot;,courier,monospace">router =
bgp 65000</span></span></p><p style=3D"outline:none;margin:0px 0px 1.4em;co=
lor:rgb(88,88,91);font-family:arial,sans-serif;font-size:14.4px"><span styl=
e=3D"font-family:&quot;courier new&quot;,courier,monospace;font-size:14px">=
neighbor =C2=A0192.168.1.1 remote-as 65001</span><br></p></div><div style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"=
font-family:&quot;courier new&quot;,courier,monospace;font-size:14px;color:=
rgb(88,88,91)">address-family ipv4 unicast</span><br></div><div style=3D"fo=
nt-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-f=
amily:&quot;courier new&quot;,courier,monospace;font-size:14px;color:rgb(88=
,88,91)"><br></span></div><div style=3D"font-family:arial,helvetica,sans-se=
rif;font-size:small"><span style=3D"font-family:&quot;courier new&quot;,cou=
rier,monospace;font-size:14px;color:rgb(88,88,91)">neighbor 192.168.1.1 act=
ivate</span><br></div><div style=3D"font-family:arial,helvetica,sans-serif;=
font-size:small"><p style=3D"outline:none;margin:0px 0px 1.4em;color:rgb(88=
,88,91);font-family:arial,sans-serif;font-size:14.4px"><span style=3D"font-=
size:14.4px">=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=
 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 ^^^^^^^^^</span></p><p style=3D"outline:none;margin:0px 0px 1.4e=
m;color:rgb(88,88,91);font-family:arial,sans-serif;font-size:14.4px"><span =
style=3D"font-size:14.4px">!!! COMMAND NOT ACCEPTED .. ACTIVATE NOT ALLOWED=
 BEFORE POLICY FOR EBGP PEER IS SET.=C2=A0</span><span class=3D"HOEnZb"><fo=
nt color=3D"#888888"><br></font></span></p><span class=3D"HOEnZb"><font col=
or=3D"#888888"><p style=3D"outline:none;margin:0px 0px 1.4em;color:rgb(88,8=
8,91);font-family:arial,sans-serif;font-size:14.4px">//R</p></font></span><=
/div></div><div class=3D"HOEnZb"><div class=3D"h5"><div class=3D"gmail_extr=
a"><br><div class=3D"gmail_quote">On Sun, Apr 23, 2017 at 2:56 PM, Mikael A=
brahamsson <span dir=3D"ltr">&lt;<a href=3D"mailto:swmike@swm.pp.se" target=
=3D"_blank">swmike@swm.pp.se</a>&gt;</span> wrote:<br><blockquote class=3D"=
gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-=
left:1ex"><span>On Fri, 21 Apr 2017, Enke Chen wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
Job,<br>
<br>
IMO the most important point from the discussion is that any BGP extension<=
br>
or behavior change must be backward compatible, which this document is lack=
ing<br>
or even missing.=C2=A0 After more than 20 years of BGP deployment, the worl=
d is no<br>
longer &quot;green field&quot; any more.<br>
</blockquote>
<br></span>
I have been involved in running core networks since late 90ties. I&#39;ve d=
eployed several vendors gear. Yes, going from IOS to IOS XR with the change=
 to XR having default deny if there is no policy, that was a single occasio=
n &quot;oh&quot;, and then I knew that. The good part here is that it&#39;s=
 failsafe &quot;close&quot;, so that you don&#39;t announce anything by acc=
ident. In IOS you have to basically paste two lines at once, with the first=
 line being the creation of the neighbor, the second line being shutdown. T=
hen you can configure the rest. Otherwise there is a race condition in the =
immediacy of a per-line, immediate committing operating system such as IOS.=
<br>
<br>
This is just bad design. It&#39;s &quot;fail open&quot; default. If you som=
ehow fail to paste that second shutdown line, you&#39;re now fully-open, an=
nouncing and accepting all routes.<br>
<br>
If IOS would be changing its defaults, the CLI line migration code could by=
 default insert a PERMIT-ALL policy statement, or some other means where an=
 upgrade would keep the behaviour of the box intact across operating system=
 versions.<br>
<br>
So I fully support draft-ietf-grow-bgp-reject-05 because it just makes more=
 operational sense than the old default that for instance IOS implements. W=
e need default fail-close, because it just creates less problems than defau=
lt fail-open.<br>
<br>
If this doesn&#39;t make sense, why was it chosen for IOS XR back in the ea=
rly 00ds?<span class=3D"m_6140417210216670400HOEnZb"><font color=3D"#888888=
"><br>
<br>
-- <br>
Mikael Abrahamsson=C2=A0 =C2=A0 email: <a href=3D"mailto:swmike@swm.pp.se" =
target=3D"_blank">swmike@swm.pp.se</a></font></span><div class=3D"m_6140417=
210216670400HOEnZb"><div class=3D"m_6140417210216670400h5"><br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/idr</a><br>
</div></div></blockquote></div><br></div>
</div></div><br>______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
<br></blockquote></div><br></div></div></div>

--001a11c154966e381d054de23e0d--


From nobody Sun Apr 23 23:37:50 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7489D128ACA for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 23:37:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RkFIO219DLCL for <idr@ietfa.amsl.com>; Sun, 23 Apr 2017 23:37:45 -0700 (PDT)
Received: from mail-it0-x236.google.com (mail-it0-x236.google.com [IPv6:2607:f8b0:4001:c0b::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52DD1128AB0 for <idr@ietf.org>; Sun, 23 Apr 2017 23:37:45 -0700 (PDT)
Received: by mail-it0-x236.google.com with SMTP id x188so39518880itb.0 for <idr@ietf.org>; Sun, 23 Apr 2017 23:37:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=4PySh/VlgwuC5R8TahUEM2bAonVrGG+cfm8X6sF6LdU=; b=fkT0/47202/SZJusjinfyPHuiqAw8mMym0fTYY6r1U0pU9dbgt1Lk2VAhcJCiy+S15 gfNJpPHqP4NdJp4HmUvFMUXixOsiXuFLXfYPshxICdYtkBfc/vGxOHUPi1Qpf4gmtkqT JuDVAj8j5p92wN1KDWGGQjOJYemS6fC0ywZeQ8JgpAnP+VFr3vYkQv6CLR6hb69WZ3t+ 1cu0N3ImGyT3kLmRNtGWkXeMKIWtekbCbXv0ampHc5d+g/DswgfZ3zyzboNOd3MTaKsw q/3f/rig1y8LNvfEwkHWaHzoEDz+Jadhdwp1ZK8omUS4wmp7oKixVddl4pqk0O38Md9K s2vw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=4PySh/VlgwuC5R8TahUEM2bAonVrGG+cfm8X6sF6LdU=; b=opVrV0JweuYvt9Lvyec1WfAeITZUtfLpKcQJbzqnujvThf3X54RQaJnzIdGKHZ5K/x yTM41jtvL+HeOpBcXxHZE9cav+6UqdGHqjlIn7qq+K1pgNx8EYWtmSkvYDaYmu7ujViv CDd71frgHFcSgdfdKNJncgwet9ndH/Uw6GWURTXyLKqXeXRNE1KVBHBdSvfhB60lg0+b K9sHqqMuoHUZNxuHM+Lic6Jq6u5H1NoS9j9dtlaLFK98kuFqrrWDWlBS7jCmaA/Sy551 AOzzY8n1PUPe8zo+m+fyqvVjXbmeORKh55nV8f+OEucawMnfxqgimdBNChKo1fjDdlmp AKwA==
X-Gm-Message-State: AN3rC/7BHNiQWbwgcwRsRZA0RPSWIeoH6HStGt1UgXl0Kht7+O/S7CKe 8vlsYA7C9z307BgOxf6XPgFWmc9stg==
X-Received: by 10.36.48.149 with SMTP id q143mr11725493itq.25.1493015864592; Sun, 23 Apr 2017 23:37:44 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.170.4 with HTTP; Sun, 23 Apr 2017 23:37:42 -0700 (PDT)
Received: by 10.79.170.4 with HTTP; Sun, 23 Apr 2017 23:37:42 -0700 (PDT)
In-Reply-To: <CAH1iCipQK-odotOJ+TOvJq6i9kDC40-dYgifkkDA4=YSsCGLTQ@mail.gmail.com>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <CA+b+ER=iuA=bipQJedh7Z=Q-wo6ShjhmgBsHdQ-SYKesEH_C2Q@mail.gmail.com> <CAH1iCipQK-odotOJ+TOvJq6i9kDC40-dYgifkkDA4=YSsCGLTQ@mail.gmail.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Mon, 24 Apr 2017 08:37:42 +0200
X-Google-Sender-Auth: WbcRywLuaeGZI7-fN-7QPiiMDto
Message-ID: <CA+b+ER=_fOCoU7_Q=f_R-ySa+bpJ2xRBh0d-mYpCc9c6WFOJ+g@mail.gmail.com>
To: Brian Dickson <brian.peter.dickson@gmail.com>
Cc: idr wg <idr@ietf.org>, Mikael Abrahamsson <swmike@swm.pp.se>
Content-Type: multipart/alternative; boundary=001a1140b16040e1ed054de3d885
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/pn1IK538o7MAEKkXQWktjr8uWxg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 06:37:48 -0000

--001a1140b16040e1ed054de3d885
Content-Type: text/plain; charset=UTF-8

Hi Brian,

Today global ASN is used for any eBGP session irrespective on address
family. There was few requests in the past to implement per AF ASN but to
the best of my knowledge it was never implemented.

MAY for other AFI/SAFIs works for me .. but let observe that if someone
goes with parser based solution this while accomplishes the goal is clearly
not a Standards Track thing but local implementation.

ISP vs Enterprise images differ in features enabled not different behaviour
of the same feature and everybody tries to still build from same branch. So
that distinction would not work.

//R.





On Apr 24, 2017 06:43, "Brian Dickson" <brian.peter.dickson@gmail.com>
wrote:

For those not intimately familiar with non-Internet AFI/SAFI use cases (ie
other than 1/1 and 2/1), could someone explain which ASNs get used?

I am wondering if applying the "new rules" only when global ASNs (those not
reserved for private use) would be a suitable alternative to specific
AFI/SAFI combos?

And, to be clear, IMHO, the difference across AFI/SAFI should probably be
MUST vs SHOULD (or maybe MAY).

Also, don't at least some vendors have different code bases depending on
the use case, in which case the default could differ by code base?
E.g. ISP vs Enterprise vs (whatever other groupings/labels exist).

Plus, IMHO, a global knob to change the default is something that would be
wise to implement; I don't know whether recommending that belongs in the
document

Brian


On Sun, Apr 23, 2017 at 6:42 AM, Robert Raszuk <robert@raszuk.net> wrote:

>
> > If this doesn't make sense,
>
> No one said here that it does not make sense. All comments so far are
> rather about few points:
>
> -  what real problem does it solve
> -  should it apply to all address families or just 1/1 & 2/1 and all
> profiles of BGP use
> -  if done should it be silent ? (**)
> -  should routes still be in BGP Adj_RIB_In and be sent by BMP (further
> hiding the issue)
>
>
> > why was it chosen for IOS XR back in the early 00ds?
>
> Because 3 first major customers of XR said they prefer AF centric BGP
> config and to have such policy for eBGP route announcement. As XR was not
> deployed anywhere making that default was zero pain for anyone.
>
> ** Making route ineligible for best path and local RIB insertion is one
> thing. But if you also are using say "add-paths  all" I would not be
> surprised if those bgp implementation which care less if the route is
> inserted in RIB and FIB before propagation would advertise it anyway to
> iBGP peers (**) making even bigger mess in your network.
>
> - - -
>
> Besides to make sure the BGP policy is there before route is annouced or
> accepted very is much simpler way. It is not about changing default, mess
> with 100s of corner cases in the code. BGP configuration parser may just
> not allow to configure "activate" under a given neighbor in selected (or
> all) AFs if policy is not there. Done and makes everyone happy ! On upgrade
> to new OS optionally you can still run fine with auto-addition of this
> proposed "bgp insecure-mode" global bgp config line.
>
>
> Example:
>
> router bgp 65000
>
> neighbor  192.168.1.1 remote-as 65001
> address-family ipv4 unicast
>
> neighbor 192.168.1.1 activate
>
>                                           ^^^^^^^^^
>
> !!! COMMAND NOT ACCEPTED .. ACTIVATE NOT ALLOWED BEFORE POLICY FOR EBGP
> PEER IS SET.
>
> //R
>
> On Sun, Apr 23, 2017 at 2:56 PM, Mikael Abrahamsson <swmike@swm.pp.se>
> wrote:
>
>> On Fri, 21 Apr 2017, Enke Chen wrote:
>>
>> Job,
>>>
>>> IMO the most important point from the discussion is that any BGP
>>> extension
>>> or behavior change must be backward compatible, which this document is
>>> lacking
>>> or even missing.  After more than 20 years of BGP deployment, the world
>>> is no
>>> longer "green field" any more.
>>>
>>
>> I have been involved in running core networks since late 90ties. I've
>> deployed several vendors gear. Yes, going from IOS to IOS XR with the
>> change to XR having default deny if there is no policy, that was a single
>> occasion "oh", and then I knew that. The good part here is that it's
>> failsafe "close", so that you don't announce anything by accident. In IOS
>> you have to basically paste two lines at once, with the first line being
>> the creation of the neighbor, the second line being shutdown. Then you can
>> configure the rest. Otherwise there is a race condition in the immediacy of
>> a per-line, immediate committing operating system such as IOS.
>>
>> This is just bad design. It's "fail open" default. If you somehow fail to
>> paste that second shutdown line, you're now fully-open, announcing and
>> accepting all routes.
>>
>> If IOS would be changing its defaults, the CLI line migration code could
>> by default insert a PERMIT-ALL policy statement, or some other means where
>> an upgrade would keep the behaviour of the box intact across operating
>> system versions.
>>
>> So I fully support draft-ietf-grow-bgp-reject-05 because it just makes
>> more operational sense than the old default that for instance IOS
>> implements. We need default fail-close, because it just creates less
>> problems than default fail-open.
>>
>> If this doesn't make sense, why was it chosen for IOS XR back in the
>> early 00ds?
>>
>> --
>> Mikael Abrahamsson    email: swmike@swm.pp.se
>>
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>
>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>
>

--001a1140b16040e1ed054de3d885
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div>Hi Brian,<div dir=3D"auto"><br></div><div dir=3D"aut=
o">Today global ASN is used for any eBGP session irrespective on address fa=
mily. There was few requests in the past to implement per AF ASN but to the=
 best of my knowledge it was never implemented.</div><div dir=3D"auto"><br>=
</div><div dir=3D"auto">MAY for other AFI/SAFIs works for me .. but let obs=
erve that if someone goes with parser based solution this while accomplishe=
s the goal is clearly not a Standards Track thing but local implementation.=
=C2=A0</div><div dir=3D"auto"><br></div><div dir=3D"auto">ISP vs Enterprise=
 images differ in features enabled not different behaviour of the same feat=
ure and everybody tries to still build from same branch. So that distinctio=
n would not work.</div><div dir=3D"auto"><br></div><div dir=3D"auto">//R.</=
div><div dir=3D"auto"><br></div><div dir=3D"auto"><br></div><div dir=3D"aut=
o"><br></div><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">=
On Apr 24, 2017 06:43, &quot;Brian Dickson&quot; &lt;<a href=3D"mailto:bria=
n.peter.dickson@gmail.com">brian.peter.dickson@gmail.com</a>&gt; wrote:<br =
type=3D"attribution"><blockquote class=3D"quote" style=3D"margin:0 0 0 .8ex=
;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr">For those no=
t intimately familiar with non-Internet AFI/SAFI use cases (ie other than 1=
/1 and 2/1), could someone explain which ASNs get used?<div><br></div><div>=
I am wondering if applying the &quot;new rules&quot; only when global ASNs =
(those not reserved for private use) would be a suitable alternative to spe=
cific AFI/SAFI combos?</div><div><br></div><div>And, to be clear, IMHO, the=
 difference across AFI/SAFI should probably be MUST vs SHOULD (or maybe MAY=
).</div><div><br></div><div>Also, don&#39;t at least some vendors have diff=
erent code bases depending on the use case, in which case the default could=
 differ by code base?</div><div>E.g. ISP vs Enterprise vs (whatever other g=
roupings/labels exist).</div><div><br></div><div>Plus, IMHO, a global knob =
to change the default is something that would be wise to implement; I don&#=
39;t know whether recommending that belongs in the document</div><font colo=
r=3D"#888888"><div><br></div></font><div><font color=3D"#888888">Brian</fon=
t><div class=3D"elided-text"><br><div class=3D"gmail_extra"><br><div class=
=3D"gmail_quote">On Sun, Apr 23, 2017 at 6:42 AM, Robert Raszuk <span dir=
=3D"ltr">&lt;<a href=3D"mailto:robert@raszuk.net" target=3D"_blank">robert@=
raszuk.net</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=
=3D"ltr"><span><div style=3D"font-family:arial,helvetica,sans-serif;font-si=
ze:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px"><br=
></span></div><div style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px">&gt;=
 If this doesn&#39;t make sense,=C2=A0</span></div><div style=3D"font-famil=
y:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-family:ar=
ial,sans-serif;font-size:12.8px"><br></span></div></span><div style=3D"font=
-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-fam=
ily:arial,sans-serif;font-size:12.8px">No one said here that it does not ma=
ke sense. All comments so far are rather about few points:</span></div><div=
 style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span sty=
le=3D"font-family:arial,sans-serif;font-size:12.8px"><br></span></div><div =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span styl=
e=3D"font-family:arial,sans-serif;font-size:12.8px">- =C2=A0what real probl=
em does it solve=C2=A0</span></div><div style=3D"font-family:arial,helvetic=
a,sans-serif;font-size:small"><span style=3D"font-family:arial,sans-serif;f=
ont-size:12.8px">- =C2=A0should it apply to all address families or just 1/=
1 &amp; 2/1 and all profiles of BGP use=C2=A0</span></div><div><span style=
=3D"font-size:12.8px">- =C2=A0if done should it be silent ? (**)=C2=A0</spa=
n><br></div><div><span style=3D"font-size:12.8px">- =C2=A0should routes sti=
ll be in BGP Adj_RIB_In and be sent by BMP (further hiding the issue)=C2=A0=
</span></div><span><div><span style=3D"font-size:12.8px"><br></span></div><=
div><span style=3D"font-size:12.8px"><br></span></div><div><span style=3D"f=
ont-size:12.8px">&gt; why was it chosen for IOS XR back in the early 00ds?<=
/span><br></div><div style=3D"font-family:arial,helvetica,sans-serif;font-s=
ize:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px"><b=
r></span></div></span><div><span style=3D"font-size:12.8px">Because 3 first=
 major customers of XR said they prefer AF centric BGP config and to have s=
uch policy for eBGP route announcement. As XR was not deployed anywhere mak=
ing that default was zero pain for anyone.=C2=A0</span></div><div style=3D"=
font-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"font=
-family:arial,sans-serif;font-size:12.8px"><br></span></div><div style=3D"f=
ont-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"font-=
family:arial,sans-serif;font-size:12.8px">** Making route=C2=A0</span><span=
 style=3D"font-family:arial,sans-serif;font-size:12.8px">ineligible</span><=
span style=3D"font-family:arial,sans-serif;font-size:12.8px">=C2=A0for best=
 path and local RIB insertion is one thing. But if you also are using say &=
quot;add-paths =C2=A0all&quot; I would not be surprised if those bgp implem=
entation which care less if the route is inserted in RIB and FIB before pro=
pagation would advertise it anyway to iBGP peers (**) making even bigger me=
ss in your network.</span></div><div style=3D"font-family:arial,helvetica,s=
ans-serif;font-size:small"><span style=3D"font-family:arial,sans-serif;font=
-size:12.8px"><br></span></div><div style=3D"font-family:arial,helvetica,sa=
ns-serif;font-size:small"><span style=3D"font-family:arial,sans-serif;font-=
size:12.8px">- - -=C2=A0</span></div><div style=3D"font-family:arial,helvet=
ica,sans-serif;font-size:small"><span style=3D"font-family:arial,sans-serif=
;font-size:12.8px"><br></span></div><div style=3D"font-family:arial,helveti=
ca,sans-serif;font-size:small"><span style=3D"font-family:arial,sans-serif;=
font-size:12.8px">Besides to make sure the BGP policy is there before route=
 is annouced or accepted very is much simpler way. It is not about changing=
 default, mess with 100s of corner cases in the code. BGP configuration par=
ser may just not allow to configure &quot;activate&quot; under a given neig=
hbor in selected (or all) AFs if policy is not there. Done and makes everyo=
ne happy ! On upgrade to new OS optionally you can still run fine with auto=
-addition of this proposed &quot;bgp insecure-mode&quot; global bgp config =
line.</span></div><div style=3D"font-family:arial,helvetica,sans-serif;font=
-size:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px">=
<br></span></div><div style=3D"font-family:arial,helvetica,sans-serif;font-=
size:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px"><=
br></span></div><div style=3D"font-family:arial,helvetica,sans-serif;font-s=
ize:small"><span style=3D"font-family:arial,sans-serif;font-size:12.8px">Ex=
ample:=C2=A0</span></div><div style=3D"font-family:arial,helvetica,sans-ser=
if;font-size:small"><span style=3D"font-family:arial,sans-serif;font-size:1=
2.8px"><br></span></div><div style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small"><p style=3D"outline:none;margin:0px 0px 1.4em;color:rgb(=
88,88,91);font-family:arial,sans-serif;font-size:14.4px"><span style=3D"out=
line:none;font-size:14px"><span style=3D"outline:none;font-family:&quot;cou=
rier new&quot;,courier,monospace">router bgp 65000</span></span></p><p styl=
e=3D"outline:none;margin:0px 0px 1.4em;color:rgb(88,88,91);font-family:aria=
l,sans-serif;font-size:14.4px"><span style=3D"font-family:&quot;courier new=
&quot;,courier,monospace;font-size:14px">neighbor =C2=A0192.168.1.1 remote-=
as 65001</span><br></p></div><div style=3D"font-family:arial,helvetica,sans=
-serif;font-size:small"><span style=3D"font-family:&quot;courier new&quot;,=
courier,monospace;font-size:14px;color:rgb(88,88,91)">address-family ipv4 u=
nicast</span><br></div><div style=3D"font-family:arial,helvetica,sans-serif=
;font-size:small"><span style=3D"font-family:&quot;courier new&quot;,courie=
r,monospace;font-size:14px;color:rgb(88,88,91)"><br></span></div><div style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small"><span style=3D"=
font-family:&quot;courier new&quot;,courier,monospace;font-size:14px;color:=
rgb(88,88,91)">neighbor 192.168.1.1 activate</span><br></div><div style=3D"=
font-family:arial,helvetica,sans-serif;font-size:small"><p style=3D"outline=
:none;margin:0px 0px 1.4em;color:rgb(88,88,91);font-family:arial,sans-serif=
;font-size:14.4px"><span style=3D"font-size:14.4px">=C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ^^^^^^^^^</span></p><p=
 style=3D"outline:none;margin:0px 0px 1.4em;color:rgb(88,88,91);font-family=
:arial,sans-serif;font-size:14.4px"><span style=3D"font-size:14.4px">!!! CO=
MMAND NOT ACCEPTED .. ACTIVATE NOT ALLOWED BEFORE POLICY FOR EBGP PEER IS S=
ET.=C2=A0</span><span class=3D"m_8745922798739059566HOEnZb"><font color=3D"=
#888888"><br></font></span></p><span class=3D"m_8745922798739059566HOEnZb">=
<font color=3D"#888888"><p style=3D"outline:none;margin:0px 0px 1.4em;color=
:rgb(88,88,91);font-family:arial,sans-serif;font-size:14.4px">//R</p></font=
></span></div></div><div class=3D"m_8745922798739059566HOEnZb"><div class=
=3D"m_8745922798739059566h5"><div class=3D"gmail_extra"><br><div class=3D"g=
mail_quote">On Sun, Apr 23, 2017 at 2:56 PM, Mikael Abrahamsson <span dir=
=3D"ltr">&lt;<a href=3D"mailto:swmike@swm.pp.se" target=3D"_blank">swmike@s=
wm.pp.se</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On=
 Fri, 21 Apr 2017, Enke Chen wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
Job,<br>
<br>
IMO the most important point from the discussion is that any BGP extension<=
br>
or behavior change must be backward compatible, which this document is lack=
ing<br>
or even missing.=C2=A0 After more than 20 years of BGP deployment, the worl=
d is no<br>
longer &quot;green field&quot; any more.<br>
</blockquote>
<br></span>
I have been involved in running core networks since late 90ties. I&#39;ve d=
eployed several vendors gear. Yes, going from IOS to IOS XR with the change=
 to XR having default deny if there is no policy, that was a single occasio=
n &quot;oh&quot;, and then I knew that. The good part here is that it&#39;s=
 failsafe &quot;close&quot;, so that you don&#39;t announce anything by acc=
ident. In IOS you have to basically paste two lines at once, with the first=
 line being the creation of the neighbor, the second line being shutdown. T=
hen you can configure the rest. Otherwise there is a race condition in the =
immediacy of a per-line, immediate committing operating system such as IOS.=
<br>
<br>
This is just bad design. It&#39;s &quot;fail open&quot; default. If you som=
ehow fail to paste that second shutdown line, you&#39;re now fully-open, an=
nouncing and accepting all routes.<br>
<br>
If IOS would be changing its defaults, the CLI line migration code could by=
 default insert a PERMIT-ALL policy statement, or some other means where an=
 upgrade would keep the behaviour of the box intact across operating system=
 versions.<br>
<br>
So I fully support draft-ietf-grow-bgp-reject-05 because it just makes more=
 operational sense than the old default that for instance IOS implements. W=
e need default fail-close, because it just creates less problems than defau=
lt fail-open.<br>
<br>
If this doesn&#39;t make sense, why was it chosen for IOS XR back in the ea=
rly 00ds?<span class=3D"m_8745922798739059566m_6140417210216670400HOEnZb"><=
font color=3D"#888888"><br>
<br>
-- <br>
Mikael Abrahamsson=C2=A0 =C2=A0 email: <a href=3D"mailto:swmike@swm.pp.se" =
target=3D"_blank">swmike@swm.pp.se</a></font></span><div class=3D"m_8745922=
798739059566m_6140417210216670400HOEnZb"><div class=3D"m_874592279873905956=
6m_6140417210216670400h5"><br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/idr</a><br>
</div></div></blockquote></div><br></div>
</div></div><br>______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/idr</a><br>
<br></blockquote></div><br></div></div></div></div>
</blockquote></div><br></div></div></div>

--001a1140b16040e1ed054de3d885--


From nobody Mon Apr 24 00:36:19 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19E251274D2 for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 00:36:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level: 
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xgUIXRE3-AQM for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 00:36:16 -0700 (PDT)
Received: from uplift.swm.pp.se (ipv6.swm.pp.se [IPv6:2a00:801::f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3EAD4128CB9 for <idr@ietf.org>; Mon, 24 Apr 2017 00:36:16 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 3E344A5; Mon, 24 Apr 2017 09:36:13 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493019373; bh=2eWtXGLncqRuGpsCBzFABRA+7j13ukYxL5AdXC0xK2E=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=D/ZFV6uJo7YeRH+bhi30uaF6HJja0gGAvC5eILSc8yoHHae8YgxfagevC69sKt0zR jryWSxlG8r7f1xt2wu2m4aBKj0oc89HwlAjLpq13pFdrkOs+u2fuvPOTgZqUK1BJzh B/hrBHxpa/vBweOZMUhZUVEYerXQrRXoQmUUKf/o=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 37D85A4; Mon, 24 Apr 2017 09:36:13 +0200 (CEST)
Date: Mon, 24 Apr 2017 09:36:13 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Enke Chen <enkechen@cisco.com>
cc: "idr@ietf.org" <idr@ietf.org>
In-Reply-To: <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com>
Message-ID: <alpine.DEB.2.02.1704240928120.5591@uplift.swm.pp.se>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/_U-zO_WHCHez_7q6z6riXLJhJJw>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 07:36:18 -0000

On Sun, 23 Apr 2017, Enke Chen wrote:

> I don't think that folks are saying this "deny all" doe not make sense. 
> When you start a *new* software, certainly you are free to choose a 
> default based on the most up-to-date knowledge.

There is no reason a new version of IOS couldn't have changed defaults, 
but CLI migration can fix this to keep the old default by adding a line 
when software is upgraded from an older default-open version.

If the new versio with default-deny has a command that gives syntax error 
in the old IOS, then this can be added to all neighbor configuring 
templates and will work identically on both the new and old version.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Mon Apr 24 06:07:39 2017
Return-Path: <internet-drafts@ietf.org>
X-Original-To: idr@ietf.org
Delivered-To: idr@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 515CB12944D; Mon, 24 Apr 2017 06:07:32 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: idr@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.50.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <149303925228.25786.2125245133778054351@ietfa.amsl.com>
Date: Mon, 24 Apr 2017 06:07:32 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/8kZWZstWIhCQWpSNOHIE9jFZotk>
Subject: [Idr] I-D Action: draft-ietf-idr-te-pm-bgp-05.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 13:07:32 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Inter-Domain Routing of the IETF.

        Title           : BGP-LS Advertisement of IGP Traffic Engineering Performance Metric Extensions
        Authors         : Stefano Previdi
                          Qin Wu
                          Hannes Gredler
                          Saikat Ray
                          Jeff Tantsura
                          Clarence Filsfils
                          Les Ginsberg
	Filename        : draft-ietf-idr-te-pm-bgp-05.txt
	Pages           : 9
	Date            : 2017-04-24

Abstract:
   This document defines new BGP-LS TLVs in order to carry the IGP
   Traffic Engineering Extensions defined in IS-IS and OSPF protocols.



The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-idr-te-pm-bgp/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-idr-te-pm-bgp-05
https://datatracker.ietf.org/doc/html/draft-ietf-idr-te-pm-bgp-05

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-idr-te-pm-bgp-05


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Mon Apr 24 11:02:51 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6010F129418 for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:02:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sXKkUbeerXho for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:02:48 -0700 (PDT)
Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E87E126CE8 for <idr@ietf.org>; Mon, 24 Apr 2017 11:02:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=951; q=dns/txt; s=iport; t=1493056968; x=1494266568; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=wzQak0DAELNJSsp/Tfbr64KP8pSQHjnZ1/e/8Xbae7s=; b=PG4jAic0AtwezYcD5F1PqufdfdOeVWezMsSmruc4/qUie7/EtdrpagZ/ CaYg2svKIrU/N8mfIpN2RXVIpKtoOZ4cnVOp+4HEFEkvd2t2he2uy8CbX 6iJqv2arEsYqBg49td6zFGYKHhYY9JukN0rOoWIcWVhtpcxguA1+32AMt U=;
X-IronPort-AV: E=Sophos;i="5.37,245,1488844800"; d="scan'208";a="236944292"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Apr 2017 18:02:47 +0000
Received: from [10.82.216.254] (rtp-vpn3-254.cisco.com [10.82.216.254]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v3OI2jtN024720; Mon, 24 Apr 2017 18:02:46 GMT
To: Mikael Abrahamsson <swmike@swm.pp.se>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com> <alpine.DEB.2.02.1704240928120.5591@uplift.swm.pp.se>
Cc: "idr@ietf.org" <idr@ietf.org>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <09173019-86ee-4f81-d57f-f664d642f633@cisco.com>
Date: Mon, 24 Apr 2017 11:02:45 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <alpine.DEB.2.02.1704240928120.5591@uplift.swm.pp.se>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/U6IxROshvp0VBdaWrUOaoogrv9U>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 18:02:49 -0000

It appears that you have missed a bunch of discussions in the thread.

The CLI migration falls apart when a customer skips releases and jumps
from one release ("permit all") to another ("deny all").

-- Enke

On 4/24/17 12:36 AM, Mikael Abrahamsson wrote:
> On Sun, 23 Apr 2017, Enke Chen wrote:
> 
>> I don't think that folks are saying this "deny all" doe not make sense. When you start a *new*
>> software, certainly you are free to choose a default based on the most up-to-date knowledge.
> 
> There is no reason a new version of IOS couldn't have changed defaults, but CLI migration can
> fix this to keep the old default by adding a line when software is upgraded from an older
> default-open version.
> 
> If the new versio with default-deny has a command that gives syntax error in the old IOS,
> then this can be added to all neighbor configuring templates and will work identically on
> both the new and old version.
> 


From nobody Mon Apr 24 11:09:22 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6D76131905 for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:09:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ifNTa3afPFyb for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:09:19 -0700 (PDT)
Received: from mail-qk0-x22c.google.com (mail-qk0-x22c.google.com [IPv6:2607:f8b0:400d:c09::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 33FD5129418 for <idr@ietf.org>; Mon, 24 Apr 2017 11:09:18 -0700 (PDT)
Received: by mail-qk0-x22c.google.com with SMTP id f76so44798077qke.2 for <idr@ietf.org>; Mon, 24 Apr 2017 11:09:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=vvjYCC5MHgimIoDQdrm07xliNgOJG7GX3OqxO4Dt2mY=; b=0aHK2BA7CI8S1cUsOz8gD0ZsgV1axiqk3ljIuRFRpZJevU+ebhDgJzFuPTIJX5IkGf BcjVQMBd+Plaviqr0nZfo1gEkmJ0I4siCRD5jVk391URrnV9qA6AreLBiFeRYBcfpsGc LC+LO2c4gdzvXsrIJ+dvk63HmJpDekACYVyeSZVMBR/+xKuKbZl0ORxFxr/kHS9SC7Dx 4njm/JG98Xxb5YbprEUiA29coskgXIEnkestuIrEtZkDkjqkB3yqcNnZ6qc4PYGVw/Ch 4iatS9+KEdvcs1wi/C+p0T4c22VlEohWrE4SR/2Hoc8lHsmPxe98as5loJug1sXY11QB /5kw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=vvjYCC5MHgimIoDQdrm07xliNgOJG7GX3OqxO4Dt2mY=; b=Ix9McZjUh2DDjCw+JS7faiEKBssxl39SIIs01R4GXMXKly/gCL48g4offFc2YHXsJf u8HGVRsbgLlha6v1K7cQEGChdLZQB+HxV3cq5cHYH+FU/ABNeAnNl4r26TLvBwS/oYzk rPJ7cmcAIZTaRrU627uxIOMPBnIVryxK6MjIQnZENQUBxCTrT9qHFwd0+EFA25ER7UyY B00YdlQhyasmyQAyOiLSyvaHWoe9NuIwFq8TStaHhGcdBMfNsQ0W347oVCpPp21U9eSc qB74Z1EG/599uL9QA0QivdAjkJBg7Tvbq/ceU2wVFKSUlxIy8PL6/tewIXHnTlov9kI0 Wkng==
X-Gm-Message-State: AN3rC/4Zb9kmVbPeF0nO8qWp6eB/s3XoOINQvY27YHA+HsPnuVOungnY U2CDRS92OpqjbA==
X-Received: by 10.55.141.67 with SMTP id p64mr14251314qkd.195.1493057358104; Mon, 24 Apr 2017 11:09:18 -0700 (PDT)
Received: from localhost ([76.8.75.174]) by smtp.gmail.com with ESMTPSA id n22sm2525908qkn.8.2017.04.24.11.09.16 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 24 Apr 2017 11:09:16 -0700 (PDT)
Date: Mon, 24 Apr 2017 14:09:15 -0400
From: Job Snijders <job@instituut.net>
To: Enke Chen <enkechen@cisco.com>
Cc: Mikael Abrahamsson <swmike@swm.pp.se>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170424180915.daq42kw74cayeewv@Vurt.local>
References: <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com> <alpine.DEB.2.02.1704240928120.5591@uplift.swm.pp.se> <09173019-86ee-4f81-d57f-f664d642f633@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <09173019-86ee-4f81-d57f-f664d642f633@cisco.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/mMpqAlVGOCCkQXo3oexPysYpCiY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 18:09:21 -0000

On Mon, Apr 24, 2017 at 11:02:45AM -0700, Enke Chen wrote:
> It appears that you have missed a bunch of discussions in the thread.
> 
> The CLI migration falls apart when a customer skips releases and jumps
> from one release ("permit all") to another ("deny all").

Only if they don't read release notes, do not perform any testing, do
not use a staggered deploy, missed the announcements through the NOGs,
missed the customer briefings.

Kind regards,

Job


From nobody Mon Apr 24 11:14:43 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6149B13190F for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:14:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2wSq0kXb4hlh for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:14:40 -0700 (PDT)
Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44191131917 for <idr@ietf.org>; Mon, 24 Apr 2017 11:14:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=590; q=dns/txt; s=iport; t=1493057680; x=1494267280; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=nutTxQuPhro/OEZUD/OAVA7CXnMZBRL/cYuut9gi8uc=; b=EF5s17r5E21bQktPGkj6uNjJ2Pv9pGfmcec3DoySJmbIzkCi97uapgyv AdJIUIKs3J0sM1H9Ytca3Eq9fsIQQAjjX+u1bNq7q3sXUOT3zxEo3G7/F wYZ22jW3Bl0PqRDbkcFb9pMfYYds3fDe/T4t99ayj5sopFYkOZOm1UoTk w=;
X-IronPort-AV: E=Sophos;i="5.37,245,1488844800"; d="scan'208";a="235118100"
Received: from alln-core-6.cisco.com ([173.36.13.139]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 24 Apr 2017 18:12:38 +0000
Received: from [10.82.216.254] (rtp-vpn3-254.cisco.com [10.82.216.254]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id v3OICb1o005755; Mon, 24 Apr 2017 18:12:38 GMT
To: Job Snijders <job@instituut.net>
References: <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com> <alpine.DEB.2.02.1704240928120.5591@uplift.swm.pp.se> <09173019-86ee-4f81-d57f-f664d642f633@cisco.com> <20170424180915.daq42kw74cayeewv@Vurt.local>
Cc: Mikael Abrahamsson <swmike@swm.pp.se>, "idr@ietf.org" <idr@ietf.org>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <deb16a3a-56fb-02da-a11d-8e9a5d54642e@cisco.com>
Date: Mon, 24 Apr 2017 11:12:37 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <20170424180915.daq42kw74cayeewv@Vurt.local>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Ir4VCftgCaXlEGBIGrARuLeumYw>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 18:14:41 -0000

On 4/24/17 11:09 AM, Job Snijders wrote:
> On Mon, Apr 24, 2017 at 11:02:45AM -0700, Enke Chen wrote:
>> It appears that you have missed a bunch of discussions in the thread.
>>
>> The CLI migration falls apart when a customer skips releases and jumps
>> from one release ("permit all") to another ("deny all").
> 
> Only if they don't read release notes, do not perform any testing, do
> not use a staggered deploy, missed the announcements through the NOGs,
> missed the customer briefings.

Unfortunately, yes, especially in the enterprise market ...

Regards,  -- Enke
 


From nobody Mon Apr 24 11:19:28 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13854131901 for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:19:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level: 
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yhVSqqEOLpN8 for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:19:15 -0700 (PDT)
Received: from uplift.swm.pp.se (ipv6.swm.pp.se [IPv6:2a00:801::f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BAD81318D0 for <idr@ietf.org>; Mon, 24 Apr 2017 11:19:15 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id E412AA5; Mon, 24 Apr 2017 20:19:12 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493057952; bh=Nf0OqEWIltoKQBG8ntIjuqrytkiLmv5nEdF2CiRhtD0=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=VSH7O/gZveIaP3uc6CppM6DM1huGd4ZQemv5TPBceLNhVZvPokNfRzFvL1o2pQLPk 0aOyrkSKKbI5MnA8RYx3yprdvJgbOM5xfLYSDPTSvsno4atSrJQ5GTlUC4fQIP276X 8zxADLA0RPTPAswm+s4N0rMsyWQS+i2PegyOL3/s=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id CC55EA4; Mon, 24 Apr 2017 20:19:12 +0200 (CEST)
Date: Mon, 24 Apr 2017 20:19:12 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Enke Chen <enkechen@cisco.com>
cc: "idr@ietf.org" <idr@ietf.org>
In-Reply-To: <09173019-86ee-4f81-d57f-f664d642f633@cisco.com>
Message-ID: <alpine.DEB.2.02.1704242018130.5591@uplift.swm.pp.se>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com> <alpine.DEB.2.02.1704240928120.5591@uplift.swm.pp.se> <09173019-86ee-4f81-d57f-f664d642f633@cisco.com>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/PB--r5s9Pcmv1WpjgEP1PlAtJ54>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 18:19:20 -0000

On Mon, 24 Apr 2017, Enke Chen wrote:

> The CLI migration falls apart when a customer skips releases and jumps 
> from one release ("permit all") to another ("deny all").

I thought this was exactly what the CLI migration code was supposed to do?

Keep track of what versions some default changed in, and fix it when 
migrating the config?

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Mon Apr 24 11:20:40 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB459131918 for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:20:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F6q1b6WS0XGW for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:20:32 -0700 (PDT)
Received: from mail-qt0-x22e.google.com (mail-qt0-x22e.google.com [IPv6:2607:f8b0:400d:c0d::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64919131917 for <idr@ietf.org>; Mon, 24 Apr 2017 11:20:32 -0700 (PDT)
Received: by mail-qt0-x22e.google.com with SMTP id m36so121061054qtb.0 for <idr@ietf.org>; Mon, 24 Apr 2017 11:20:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=C3zIso/Gg3vc3kEa/wx+M0cezt0p0HVDfYsUKDTIt00=; b=1Dr4IyXujMEfy683RMC8CmnSmIizmP2UleVROGTP5Oz0Q7fdG50Y66l5ZQW+MrOYWP II7d5f7YtuuNVTgpFFDqlDZvCJLD0UereXlHYcIkEP76pBrHp6D4NCP0tD0aYDv3PSDA 4HjtXwaCG2ozUdPa5fPxl8/5SWnV8+NC3crhQE+HCTBYe5ZmAps0wwKKus9BtNv1PT7W +MHtpdLmlNxsW1BLK+2jVENFM+NGD8IOI4PrB3lW65EXe80q90+TzByTTwMe5f81+19p 1W5yG4irEYaIbiIQ3dvF7sI5IqddoZDGGedmgKJWmF8QKkvXmJpoZ+hnycqPXOjK93rb sHaA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=C3zIso/Gg3vc3kEa/wx+M0cezt0p0HVDfYsUKDTIt00=; b=DVAIN7ZioXiaduvyq88xlkFVl0Evkj0RtAw0MmTUWiBrawgsuRtjlY1exkQN+f/aza 4WVMV5dB0n13xy4Vdohtkr5hW7vfgAqmSQQneuhnqlldLh1KkypyO4eBBieWLUAjQbGc aFvE0oSEeXmfskZeNeSep8Ron5vOuGpvtI/YaxbYIBC9rw/hUIGtxfCch1fLxEFWGQyi u/9yFMQyIyQnXlWcSvYKLDWGqNio8rPO7u0IoC64NtFYfrwYck8WtLs7/9pykvkHaMrB WQMJHztNV07PIu1rKZj/6HtXTL+4CcKGV42du7uIem+hdwgaSzZ++ViCvuwwExrBR7uN Kw/w==
X-Gm-Message-State: AN3rC/5x2Tv6H+M8gnovimKvT61Fz+GBDDl68tmHYg+vH/7UOTAHV1NN Uz4XpC0eOl3UTw==
X-Received: by 10.200.35.80 with SMTP id b16mr25707236qtb.205.1493058031581; Mon, 24 Apr 2017 11:20:31 -0700 (PDT)
Received: from localhost ([76.8.75.174]) by smtp.gmail.com with ESMTPSA id 36sm7295354qtz.16.2017.04.24.11.20.29 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 24 Apr 2017 11:20:30 -0700 (PDT)
Date: Mon, 24 Apr 2017 14:20:29 -0400
From: Job Snijders <job@instituut.net>
To: Enke Chen <enkechen@cisco.com>
Cc: Mikael Abrahamsson <swmike@swm.pp.se>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170424182029.rl3qg3j7wojuil5a@Vurt.local>
References: <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com> <alpine.DEB.2.02.1704240928120.5591@uplift.swm.pp.se> <09173019-86ee-4f81-d57f-f664d642f633@cisco.com> <20170424180915.daq42kw74cayeewv@Vurt.local> <deb16a3a-56fb-02da-a11d-8e9a5d54642e@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <deb16a3a-56fb-02da-a11d-8e9a5d54642e@cisco.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/wmbRO_BMlJm7PXZyjEgfKZ7LB1E>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 18:20:34 -0000

On Mon, Apr 24, 2017 at 11:12:37AM -0700, Enke Chen wrote:
> On 4/24/17 11:09 AM, Job Snijders wrote:
> > On Mon, Apr 24, 2017 at 11:02:45AM -0700, Enke Chen wrote:
> >> It appears that you have missed a bunch of discussions in the thread.
> >>
> >> The CLI migration falls apart when a customer skips releases and jumps
> >> from one release ("permit all") to another ("deny all").
> > 
> > Only if they don't read release notes, do not perform any testing, do
> > not use a staggered deploy, missed the announcements through the NOGs,
> > missed the customer briefings.
> 
> Unfortunately, yes, especially in the enterprise market ...

You can even tie this to the depreciation cylce, if it takes multiple
years to get there that is fine.

Kind regards,

Job


From nobody Mon Apr 24 11:55:42 2017
Return-Path: <christopher.morrow@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A86C12946C for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:55:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2_enOLhI7uP5 for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:55:37 -0700 (PDT)
Received: from mail-qk0-x22f.google.com (mail-qk0-x22f.google.com [IPv6:2607:f8b0:400d:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CC1812778D for <idr@ietf.org>; Mon, 24 Apr 2017 11:55:37 -0700 (PDT)
Received: by mail-qk0-x22f.google.com with SMTP id y63so96508806qkd.1 for <idr@ietf.org>; Mon, 24 Apr 2017 11:55:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=o6gZDQPLOdhw79PJN2NbgVFUcpOoWf3QqSL431MZ7Xs=; b=cgjxmZeohiW9J7tBhFC2vyMdDWM4krp466CqHCHYFauZK49rfescLcEYMyRXpewucQ xfYe7JjdHUxzbf6rHF0XtTqFz7sgNT5RAxVEOVK/LaGc5gKEP0K8Tx6WEgEOuIGTXeqz lHLempyO0rvVBnX7r6V0JddXbGdjeNyvlfwOA8WqA5Uf04oUxxz4pAXVZkr80NAtSrpH e887EzOgxpFQko5cI8YPqzAJyHeph+GxJWAyMzsuvre368NG8OtY4E6omhbw0AEPuDTp Evjo0SEa9iO91g3XGyG+myGXKXWEHFHuSHC4uqi8QTqNSpqtSYjvsqk8lQcIu7pXIqHT VMfA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=o6gZDQPLOdhw79PJN2NbgVFUcpOoWf3QqSL431MZ7Xs=; b=T28spIZNOFKvr5v1wgXPg6fFsUH5delIJQ8iO0wJNd0Km/mk+PX7QlS5qLlhpxJKP5 8P7NrwjQD8DF121IX+EJDo+KP85KWpeORqifrBs9f6/K4rtG69xSgRPpRs29ZETbi9F3 9en42PAbkN5XR6ues1dPjONEXeX41VCrIA3bw5ZBhwjSjyfMRR6HyQjqA86FVdJ+rQSs W0dC4ub+CaF6bjpQ+tCQvUWQJP4kUILTTHx4rgCPG7N2twnOlNHSwbIcvWjIDEqWEgWU aZmtVbsYcJMunTD9CoB+lVkeoeibcfYsXcM2tpfSMZMnQX+Gp51vFKcLi4+gGYQBeGJL IkLA==
X-Gm-Message-State: AN3rC/7cl7li9AecB2pZzsYi9EPKS4xGETkUOVP5phhVzk/fXszfHFwG ROUOpvFsztyDgWCgb90jmQXdqz6qTqyg
X-Received: by 10.55.148.194 with SMTP id w185mr24917921qkd.58.1493060136585;  Mon, 24 Apr 2017 11:55:36 -0700 (PDT)
MIME-Version: 1.0
Sender: christopher.morrow@gmail.com
Received: by 10.140.93.5 with HTTP; Mon, 24 Apr 2017 11:55:35 -0700 (PDT)
In-Reply-To: <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com>
From: Christopher Morrow <morrowc.lists@gmail.com>
Date: Mon, 24 Apr 2017 14:55:35 -0400
X-Google-Sender-Auth: 1KYq073eMFc-6j0VpO35xDYdPHg
Message-ID: <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com>
To: Robert Raszuk <robert@raszuk.net>
Cc: Keyur Patel <keyur@arrcus.com>, "idr@ietf.org" <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Type: multipart/alternative; boundary=94eb2c08503c11d564054dee27aa
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/NCHlIfk7sbuW829qGVnXrKdhPWQ>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 18:55:40 -0000

--94eb2c08503c11d564054dee27aa
Content-Type: text/plain; charset=UTF-8

(catching up from ... not reading a 100 message thread)

On Wed, Apr 19, 2017 at 6:26 PM, Robert Raszuk <robert@raszuk.net> wrote:

> Keyur,
>
> You can not set "insecure mode" before you reload the OS as current OS
> does not have such knob. Unless you delay the deployment across N releases
> and enforce sequenced upgrade.
>
>
isn't this a well known, common practice for software upgrades though?

1) is this software fixing something broken? (or necessary for some feature
we need)
2) does the OS boot/load on a lab/test device (don't laugh, often this
fails!)
3) does the current golden config for this sort of device load on new OS?
4) does expected behavior for device continue to be in effect?
5) are there configuration changes required to get back to the proper
operating state?

I think for a bunch of software upgrades 'make configlet changes' is
required, so ... this doesn't seem out of scope for normal ops work.


> The only way to prevent massive reachability failure upon reload due to
> complete silent bgp prefix drop is to configure inbound policy for all EBGP
> sessions before the reload and run with new image.
>
> Of course this is all assuming that someone will read carefully the
> release notes :)
>
>
and test before loading on their whole network of revenue relevant
infrastructure.


> If they do not the troubleshooting of this will be really painful ! CE
> will see EBGP session as UP, will get all the routes and will send his
> routes. CE will have no clue if PE dropped or accepted his routes. Likewise
> on the other end .. Only imagine a network which has 10s of thousands of
> VPN CEs as Bruno mentioned and their provider not following all releases
> CEs are running.
>
>
it's concerning that people have networks with no
filtering/conditioning/etc on their bgp sessions...


> At least doing it as part of OPEN msg will be immediately indicated to
> both ends.
>
> //R
>
>
> On Thu, Apr 20, 2017 at 12:16 AM, Keyur Patel <keyur@arrcus.com> wrote:
>
>> And that would be good enough if that would allow exemptions of DC
>> networks and any other networks that may need exemption.
>>
>> In that case I support the publication.
>>
>> Regards,
>> Keyur
>>
>> On 4/19/17, 2:08 PM, "Jared Mauch" <jared@puck.nether.net> wrote:
>>
>>     If someone sets insecure mode they can  e as promiscuous as they want.
>>
>>     That mode can have a very low bar IMO.
>>
>>     Jared Mauch
>>
>>     > On Apr 19, 2017, at 4:58 PM, Acee Lindem (acee) <acee@cisco.com>
>> wrote:
>>     >
>>     > I would agree with Keyur, For better or worse, our Cisco NX-OS BGP
>>     > implementation does not require configuration of a peer policy.
>>     >
>>     > In fact, this requirement is contrary to some of the auto-discovery
>>     > mechanisms we are exploring where only knowledge of the mutual
>> address
>>     > families is required.
>>     >
>>     > Thanks,
>>     > Acee
>>     >
>>     > On 4/19/17, 4:43 PM, "Idr on behalf of Keyur Patel" <
>> idr-bounces@ietf.org
>>     > on behalf of keyur@arrcus.com> wrote:
>>     >
>>     >> Thank you John for bringing it on IDR.
>>     >>
>>     >> As an update to RFC4271, I am not sure if I agree with the EBGP
>> policy
>>     >> configuration. There are lot of DC networks (for example) that use
>> EBGP
>>     >> within their CLOS. This extension may not be applicable in such
>> networks.
>>     >>
>>     >> I would request authors to consider refining text to include
>> appropriate
>>     >> EBGP use cases and not make it generic for EBGP sessions (defined
>> in
>>     >> 4271).
>>     >>
>>     >> Regards,
>>     >> Keyur
>>     >>
>>     >>
>>     >> On 4/19/17, 9:49 AM, "Idr on behalf of John G. Scudder"
>>     >> <idr-bounces@ietf.org on behalf of jgs@juniper.net> wrote:
>>     >>
>>     >>   IDR folks,
>>     >>
>>     >>   As many of you have already noticed,
>> draft-ietf-grow-bgp-reject-05
>>     >> has completed GROW WGLC and is now in IETF LC.
>>     >>
>>     >>   As nobody other than Alvaro noticed (thank you for noticing,
>> Alvaro!)
>>     >> draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in
>> that
>>     >> it mandates what a BGP implementation MUST do. See section 2 of
>> the draft
>>     >> for the details. It's short and easy to read.
>>     >>
>>     >>   If we had noticed this earlier, we would have either chosen to
>> home
>>     >> the document in IDR, or explicitly made an exception to have GROW
>> do the
>>     >> work. Given that we didn't, though, the plan is to continue
>> progressing
>>     >> the draft as a GROW document. However:
>>     >>
>>     >>   - As I understand it, the authors will add the Updates: 4271
>> header
>>     >> in addition to potentially taking in other comments from AD review.
>>     >>   - If anyone has a strong objection to the unusual procedure,
>> please
>>     >> say so (either on-list, or to the chairs + AD).
>>     >>   - Please send any last call comments to the IETF LC (see below)
>>     >> although it's also OK to discuss here on the IDR list of course.
>>     >>
>>     >>   Many IDR participants are also active in GROW and have had their
>> say,
>>     >> but if you haven't, now's your chance.
>>     >>
>>     >>   Thanks,
>>     >>
>>     >>   --John
>>     >>
>>     >>> Begin forwarded message:
>>     >>>
>>     >>> From: The IESG <iesg-secretary@ietf.org>
>>     >>> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default
>>     >> EBGP Route Propagation Behavior Without Policies) to Proposed
>> Standard
>>     >>> Date: April 18, 2017 at 5:16:05 PM EDT
>>     >>> To: "IETF-Announce" <ietf-announce@ietf.org>
>>     >>> Cc: grow-chairs@ietf.org, grow@ietf.org,
>>     >> draft-ietf-grow-bgp-reject@ietf.org, christopher.morrow@gmail.com
>>     >>> Reply-To: ietf@ietf.org
>>     >>>
>>     >>>
>>     >>> The IESG has received a request from the Global Routing Operations
>>     >> WG
>>     >>> (grow) to consider the following document:
>>     >>> - 'Default EBGP Route Propagation Behavior Without Policies'
>>     >>> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>>     >>>
>>     >>> The IESG plans to make a decision in the next few weeks, and
>>     >> solicits
>>     >>> final comments on this action. Please send substantive comments to
>>     >> the
>>     >>> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally,
>> comments
>>     >> may be
>>     >>> sent to iesg@ietf.org instead. In either case, please retain the
>>     >>> beginning of the Subject line to allow automated sorting.
>>     >>>
>>     >>> Abstract
>>     >>>
>>     >>> This document defines the default behavior of a BGP speaker when
>>     >>> there is no import or export policy associated with an External
>> BGP
>>     >>> session.
>>     >>>
>>     >>>
>>     >>> The file can be obtained via
>>     >>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>>     >>>
>>     >>> IESG discussion can be tracked via
>>     >>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>> ballot/
>>     >>>
>>     >>> This IETF LC, which originally concluded on 2017-04-18, is being
>>     >>> extended to allow for additional input to be provided. Ops AD (for
>>     >> GROW)
>>     >>> and Routing AD (for IDR) wish to ensure that cross WG discussions
>>     >> have
>>     >>> had a chance to occur.
>>     >>>
>>     >>> No IPR declarations have been submitted directly on this I-D.
>>     >>
>>     >>   _______________________________________________
>>     >>   Idr mailing list
>>     >>   Idr@ietf.org
>>     >>   https://www.ietf.org/mailman/listinfo/idr
>>     >>
>>     >>
>>     >> _______________________________________________
>>     >> Idr mailing list
>>     >> Idr@ietf.org
>>     >> https://www.ietf.org/mailman/listinfo/idr
>>     >
>>     > _______________________________________________
>>     > Idr mailing list
>>     > Idr@ietf.org
>>     > https://www.ietf.org/mailman/listinfo/idr
>>
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>
>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>
>

--94eb2c08503c11d564054dee27aa
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">(catching up from ... not reading a 100 message thread)<di=
v class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Wed, Apr 19, 2017=
 at 6:26 PM, Robert Raszuk <span dir=3D"ltr">&lt;<a href=3D"mailto:robert@r=
aszuk.net" target=3D"_blank">robert@raszuk.net</a>&gt;</span> wrote:<br><bl=
ockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #=
ccc solid;padding-left:1ex"><div dir=3D"ltr"><div style=3D"font-family:aria=
l,helvetica,sans-serif;font-size:small">Keyur,</div><div style=3D"font-fami=
ly:arial,helvetica,sans-serif;font-size:small"><br></div><div style=3D"font=
-family:arial,helvetica,sans-serif;font-size:small">You can not set &quot;i=
nsecure mode&quot; before you reload the OS as current OS does not have suc=
h knob. Unless you delay the deployment across N releases and enforce seque=
nced upgrade.</div><div style=3D"font-family:arial,helvetica,sans-serif;fon=
t-size:small"><br></div></div></blockquote><div><br></div><div>isn&#39;t th=
is a well known, common practice for software upgrades though?</div><div><b=
r></div><div>1) is this software fixing something broken? (or necessary for=
 some feature we need)</div><div>2) does the OS boot/load on a lab/test dev=
ice (don&#39;t laugh, often this fails!)</div><div>3) does the current gold=
en config for this sort of device load on new OS?</div><div>4) does expecte=
d behavior for device continue to be in effect?</div><div>5) are there conf=
iguration changes required to get back to the proper operating state?</div>=
<div><br></div><div>I think for a bunch of software upgrades &#39;make conf=
iglet changes&#39; is required, so ... this doesn&#39;t seem out of scope f=
or normal ops work.</div><div>=C2=A0</div><blockquote class=3D"gmail_quote"=
 style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><d=
iv dir=3D"ltr"><div style=3D"font-family:arial,helvetica,sans-serif;font-si=
ze:small"></div><div style=3D"font-family:arial,helvetica,sans-serif;font-s=
ize:small">The only way to prevent massive reachability failure upon reload=
 due to complete silent bgp prefix drop is to configure inbound policy for =
all EBGP sessions before the reload and run with new image.=C2=A0</div><div=
 style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div=
><div style=3D"font-family:arial,helvetica,sans-serif;font-size:small">Of c=
ourse this is all assuming that someone will read carefully the release not=
es :)=C2=A0</div><div style=3D"font-family:arial,helvetica,sans-serif;font-=
size:small"><br></div></div></blockquote><div><br></div><div>and test befor=
e loading on their whole network of revenue relevant infrastructure.</div><=
div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8e=
x;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small"></div><div styl=
e=3D"font-family:arial,helvetica,sans-serif;font-size:small">If they do not=
 the troubleshooting of this will be really painful ! CE will see EBGP sess=
ion as UP, will get all the routes and will send his routes. CE will have n=
o clue if PE dropped or accepted his routes. Likewise on the other end .. O=
nly imagine a network which has 10s of thousands of VPN CEs as Bruno mentio=
ned and their provider not following all releases CEs are running.=C2=A0</d=
iv><div style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><b=
r></div></div></blockquote><div><br></div><div>it&#39;s concerning that peo=
ple have networks with no filtering/conditioning/etc on their bgp sessions.=
..=C2=A0</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"m=
argin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"l=
tr"><div style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><=
/div><div style=3D"font-family:arial,helvetica,sans-serif;font-size:small">=
At least doing it as part of OPEN msg will be immediately indicated to both=
 ends.=C2=A0</div><span class=3D"HOEnZb"><font color=3D"#888888"><div style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div =
style=3D"font-family:arial,helvetica,sans-serif;font-size:small">//R</div><=
div style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></=
div></font></span></div><div class=3D"HOEnZb"><div class=3D"h5"><div class=
=3D"gmail_extra"><br><div class=3D"gmail_quote">On Thu, Apr 20, 2017 at 12:=
16 AM, Keyur Patel <span dir=3D"ltr">&lt;<a href=3D"mailto:keyur@arrcus.com=
" target=3D"_blank">keyur@arrcus.com</a>&gt;</span> wrote:<br><blockquote c=
lass=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;=
padding-left:1ex">And that would be good enough if that would allow exempti=
ons of DC networks and any other networks that may need exemption.<br>
<br>
In that case I support the publication.<br>
<br>
Regards,<br>
Keyur<br>
<div class=3D"m_-1213506335477067821HOEnZb"><div class=3D"m_-12135063354770=
67821h5"><br>
On 4/19/17, 2:08 PM, &quot;Jared Mauch&quot; &lt;<a href=3D"mailto:jared@pu=
ck.nether.net" target=3D"_blank">jared@puck.nether.net</a>&gt; wrote:<br>
<br>
=C2=A0 =C2=A0 If someone sets insecure mode they can=C2=A0 e as promiscuous=
 as they want.<br>
<br>
=C2=A0 =C2=A0 That mode can have a very low bar IMO.<br>
<br>
=C2=A0 =C2=A0 Jared Mauch<br>
<br>
=C2=A0 =C2=A0 &gt; On Apr 19, 2017, at 4:58 PM, Acee Lindem (acee) &lt;<a h=
ref=3D"mailto:acee@cisco.com" target=3D"_blank">acee@cisco.com</a>&gt; wrot=
e:<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; I would agree with Keyur, For better or worse, our Cisco=
 NX-OS BGP<br>
=C2=A0 =C2=A0 &gt; implementation does not require configuration of a peer =
policy.<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; In fact, this requirement is contrary to some of the aut=
o-discovery<br>
=C2=A0 =C2=A0 &gt; mechanisms we are exploring where only knowledge of the =
mutual address<br>
=C2=A0 =C2=A0 &gt; families is required.<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; Thanks,<br>
=C2=A0 =C2=A0 &gt; Acee<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; On 4/19/17, 4:43 PM, &quot;Idr on behalf of Keyur Patel&=
quot; &lt;<a href=3D"mailto:idr-bounces@ietf.org" target=3D"_blank">idr-bou=
nces@ietf.org</a><br>
=C2=A0 =C2=A0 &gt; on behalf of <a href=3D"mailto:keyur@arrcus.com" target=
=3D"_blank">keyur@arrcus.com</a>&gt; wrote:<br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt;&gt; Thank you John for bringing it on IDR.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt; As an update to RFC4271, I am not sure if I agree wi=
th the EBGP policy<br>
=C2=A0 =C2=A0 &gt;&gt; configuration. There are lot of DC networks (for exa=
mple) that use EBGP<br>
=C2=A0 =C2=A0 &gt;&gt; within their CLOS. This extension may not be applica=
ble in such networks.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt; I would request authors to consider refining text to=
 include appropriate<br>
=C2=A0 =C2=A0 &gt;&gt; EBGP use cases and not make it generic for EBGP sess=
ions (defined in<br>
=C2=A0 =C2=A0 &gt;&gt; 4271).<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt; Regards,<br>
=C2=A0 =C2=A0 &gt;&gt; Keyur<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt; On 4/19/17, 9:49 AM, &quot;Idr on behalf of John G. =
Scudder&quot;<br>
=C2=A0 =C2=A0 &gt;&gt; &lt;<a href=3D"mailto:idr-bounces@ietf.org" target=
=3D"_blank">idr-bounces@ietf.org</a> on behalf of <a href=3D"mailto:jgs@jun=
iper.net" target=3D"_blank">jgs@juniper.net</a>&gt; wrote:<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0IDR folks,<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0As many of you have already noticed, dra=
ft-ietf-grow-bgp-reject-05<br>
=C2=A0 =C2=A0 &gt;&gt; has completed GROW WGLC and is now in IETF LC.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0As nobody other than Alvaro noticed (tha=
nk you for noticing, Alvaro!)<br>
=C2=A0 =C2=A0 &gt;&gt; draft-ietf-grow-bgp-reject-05 represents an update t=
o RFC 4271, in that<br>
=C2=A0 =C2=A0 &gt;&gt; it mandates what a BGP implementation MUST do. See s=
ection 2 of the draft<br>
=C2=A0 =C2=A0 &gt;&gt; for the details. It&#39;s short and easy to read.<br=
>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0If we had noticed this earlier, we would=
 have either chosen to home<br>
=C2=A0 =C2=A0 &gt;&gt; the document in IDR, or explicitly made an exception=
 to have GROW do the<br>
=C2=A0 =C2=A0 &gt;&gt; work. Given that we didn&#39;t, though, the plan is =
to continue progressing<br>
=C2=A0 =C2=A0 &gt;&gt; the draft as a GROW document. However:<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0- As I understand it, the authors will a=
dd the Updates: 4271 header<br>
=C2=A0 =C2=A0 &gt;&gt; in addition to potentially taking in other comments =
from AD review.<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0- If anyone has a strong objection to th=
e unusual procedure, please<br>
=C2=A0 =C2=A0 &gt;&gt; say so (either on-list, or to the chairs + AD).<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0- Please send any last call comments to =
the IETF LC (see below)<br>
=C2=A0 =C2=A0 &gt;&gt; although it&#39;s also OK to discuss here on the IDR=
 list of course.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0Many IDR participants are also active in=
 GROW and have had their say,<br>
=C2=A0 =C2=A0 &gt;&gt; but if you haven&#39;t, now&#39;s your chance.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0Thanks,<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0--John<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Begin forwarded message:<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; From: The IESG &lt;<a href=3D"mailto:iesg-secret=
ary@ietf.org" target=3D"_blank">iesg-secretary@ietf.org</a>&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Subject: Last Call: &lt;draft-ietf-grow-bgp-reje=
ct-05<wbr>.txt&gt; (Default<br>
=C2=A0 =C2=A0 &gt;&gt; EBGP Route Propagation Behavior Without Policies) to=
 Proposed Standard<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Date: April 18, 2017 at 5:16:05 PM EDT<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; To: &quot;IETF-Announce&quot; &lt;<a href=3D"mai=
lto:ietf-announce@ietf.org" target=3D"_blank">ietf-announce@ietf.org</a>&gt=
;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Cc: <a href=3D"mailto:grow-chairs@ietf.org" targ=
et=3D"_blank">grow-chairs@ietf.org</a>, <a href=3D"mailto:grow@ietf.org" ta=
rget=3D"_blank">grow@ietf.org</a>,<br>
=C2=A0 =C2=A0 &gt;&gt; <a href=3D"mailto:draft-ietf-grow-bgp-reject@ietf.or=
g" target=3D"_blank">draft-ietf-grow-bgp-reject@iet<wbr>f.org</a>, <a href=
=3D"mailto:christopher.morrow@gmail.com" target=3D"_blank">christopher.morr=
ow@gmail.com</a><br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Reply-To: <a href=3D"mailto:ietf@ietf.org" targe=
t=3D"_blank">ietf@ietf.org</a><br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; The IESG has received a request from the Global =
Routing Operations<br>
=C2=A0 =C2=A0 &gt;&gt; WG<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; (grow) to consider the following document:<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; - &#39;Default EBGP Route Propagation Behavior W=
ithout Policies&#39;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; &lt;draft-ietf-grow-bgp-reject-05<wbr>.txt&gt; a=
s Proposed Standard<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; The IESG plans to make a decision in the next fe=
w weeks, and<br>
=C2=A0 =C2=A0 &gt;&gt; solicits<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; final comments on this action. Please send subst=
antive comments to<br>
=C2=A0 =C2=A0 &gt;&gt; the<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; <a href=3D"mailto:ietf@ietf.org" target=3D"_blan=
k">ietf@ietf.org</a> mailing lists by 2017-05-02. Exceptionally, comments<b=
r>
=C2=A0 =C2=A0 &gt;&gt; may be<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; sent to <a href=3D"mailto:iesg@ietf.org" target=
=3D"_blank">iesg@ietf.org</a> instead. In either case, please retain the<br=
>
=C2=A0 =C2=A0 &gt;&gt;&gt; beginning of the Subject line to allow automated=
 sorting.<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; Abstract<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; This document defines the default behavior of a =
BGP speaker when<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; there is no import or export policy associated w=
ith an External BGP<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; session.<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; The file can be obtained via<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; <a href=3D"https://datatracker.ietf.org/doc/draf=
t-ietf-grow-bgp-reject/" rel=3D"noreferrer" target=3D"_blank">https://datat=
racker.ietf.org/d<wbr>oc/draft-ietf-grow-bgp-reject/</a><br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; IESG discussion can be tracked via<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; <a href=3D"https://datatracker.ietf.org/doc/draf=
t-ietf-grow-bgp-reject/ballot/" rel=3D"noreferrer" target=3D"_blank">https:=
//datatracker.ietf.org/d<wbr>oc/draft-ietf-grow-bgp-reject/<wbr>ballot/</a>=
<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; This IETF LC, which originally concluded on 2017=
-04-18, is being<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; extended to allow for additional input to be pro=
vided. Ops AD (for<br>
=C2=A0 =C2=A0 &gt;&gt; GROW)<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; and Routing AD (for IDR) wish to ensure that cro=
ss WG discussions<br>
=C2=A0 =C2=A0 &gt;&gt; have<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; had a chance to occur.<br>
=C2=A0 =C2=A0 &gt;&gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;&gt; No IPR declarations have been submitted directly=
 on this I-D.<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0_____________________________<wbr>______=
____________<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0Idr mailing list<br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0<a href=3D"mailto:Idr@ietf.org" target=
=3D"_blank">Idr@ietf.org</a><br>
=C2=A0 =C2=A0 &gt;&gt;=C2=A0 =C2=A0<a href=3D"https://www.ietf.org/mailman/=
listinfo/idr" rel=3D"noreferrer" target=3D"_blank">https://www.ietf.org/mai=
lman/<wbr>listinfo/idr</a><br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt;<br>
=C2=A0 =C2=A0 &gt;&gt; ______________________________<wbr>_________________=
<br>
=C2=A0 =C2=A0 &gt;&gt; Idr mailing list<br>
=C2=A0 =C2=A0 &gt;&gt; <a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Id=
r@ietf.org</a><br>
=C2=A0 =C2=A0 &gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/idr=
" rel=3D"noreferrer" target=3D"_blank">https://www.ietf.org/mailman/l<wbr>i=
stinfo/idr</a><br>
=C2=A0 =C2=A0 &gt;<br>
=C2=A0 =C2=A0 &gt; ______________________________<wbr>_________________<br>
=C2=A0 =C2=A0 &gt; Idr mailing list<br>
=C2=A0 =C2=A0 &gt; <a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ie=
tf.org</a><br>
=C2=A0 =C2=A0 &gt; <a href=3D"https://www.ietf.org/mailman/listinfo/idr" re=
l=3D"noreferrer" target=3D"_blank">https://www.ietf.org/mailman/l<wbr>istin=
fo/idr</a><br>
<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/idr</a><br>
</div></div></blockquote></div><br></div>
</div></div><br>______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
<br></blockquote></div><br></div></div>

--94eb2c08503c11d564054dee27aa--


From nobody Mon Apr 24 11:59:03 2017
Return-Path: <christopher.morrow@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8B4712946C for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:59:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id olCTslmSzt0d for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 11:59:00 -0700 (PDT)
Received: from mail-qt0-x22c.google.com (mail-qt0-x22c.google.com [IPv6:2607:f8b0:400d:c0d::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52F67127342 for <idr@ietf.org>; Mon, 24 Apr 2017 11:59:00 -0700 (PDT)
Received: by mail-qt0-x22c.google.com with SMTP id c45so121975056qtb.1 for <idr@ietf.org>; Mon, 24 Apr 2017 11:59:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=zah7CKV3ZvUkfkvtKqHo509MyLwn9ph77mKK6KViZ7w=; b=vWKYVPY7A4OxncVSxsLN63J1c/I5w6ZGsOxum7oYz3aUJ5X5CSHGk9kTPslT1v4Uw8 eyrsEKkE+Mt9Dz7pDfWXRRmnP8SMdRBM+raYK/3b2sqDOVu/C0w974Cd9CVPTPIKu8xR G1qBWwqgv43VoG2NaiqAEzScZ7sUMhZqenCZEaSvadP/ReSbfPYc0IPmH3o8FfuhSK+E 1x/JiaIf0saDK0Ru/Elr6RNA75LjLnrmQ4/SRZgtxOFY9e039rNVtRVuilFNK8n4+8tD k0NSBy1OAvb9NnwZ5uA7XE6lMSFMBoOxTMqCLkXh9pXDmzBVCSafKI5igdxUVIdsnswT dFQg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=zah7CKV3ZvUkfkvtKqHo509MyLwn9ph77mKK6KViZ7w=; b=LDWY7i3Z835ndBHPOm/KsSUP8Bsj5PoJjgM1f5q9XTC/U7N8KGExUn+vnBmI4kFuP4 a9mmrmx9k4CECVagJk4oLFsmQn5A8xlP5QKU6VtJ8EwuHkcmNjL1nJZjk4d5V6T+OKwR 4M8yO/YVXmgzTEVkf7kt2yTGvx1VLkWh/yGZLpprzK6zfGz7o1a2g6PClmRCGulC9ZoI YBbzio4PLeuouVTuyMJBToOqrxoEhOf8oEomsG/T/Gj/Amm/TE0tYCJlXlCExYP6ZV8C VkiYYWB5jshY22Az2Dtkiws4q78c7roSLpZIvGb0QHsTXoPL3l8+9yD2QZvB1vG/RR1M HNjA==
X-Gm-Message-State: AN3rC/68KxqN0AWw3G2/PyIwOeVgVAq4EY1/EP4Ydtcrbc09QPj6yGi2 2G+xqMU14yjPRojCKbf4jmUTgv3h/Q==
X-Received: by 10.200.48.14 with SMTP id f14mr27417905qte.201.1493060339520; Mon, 24 Apr 2017 11:58:59 -0700 (PDT)
MIME-Version: 1.0
Sender: christopher.morrow@gmail.com
Received: by 10.140.93.5 with HTTP; Mon, 24 Apr 2017 11:58:58 -0700 (PDT)
In-Reply-To: <D51D6AD2.A9795%acee@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com>
From: Christopher Morrow <morrowc.lists@gmail.com>
Date: Mon, 24 Apr 2017 14:58:58 -0400
X-Google-Sender-Auth: G2-GoxgpWpGvUaiBBp4TnyDNOlk
Message-ID: <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com>
To: "Acee Lindem (acee)" <acee@cisco.com>
Cc: John Scudder <jgs@juniper.net>, idr wg <idr@ietf.org>, Hares Susan <shares@ndzh.com>
Content-Type: multipart/alternative; boundary=001a1149c5f22a6216054dee33c2
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/KLkgpNNmMgbQ8ymGKiyX2tQZ-xk>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 18:59:02 -0000

--001a1149c5f22a6216054dee33c2
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Wed, Apr 19, 2017 at 7:30 PM, Acee Lindem (acee) <acee@cisco.com> wrote:

>
>
> On 4/19/17, 7:25 PM, "John Scudder" <jgs@juniper.net> wrote:
>
> >(As an individual contributor)
> >
> >On Apr 19, 2017, at 7:18 PM, Acee Lindem (acee) <acee@cisco.com> wrote:
> >> the draft is conspicuously missing a =E2=80=9CBackwards Compatibility=
=E2=80=9D section.
> >
> >Seriously? "Backwards compatibility" in this case is "configure your
> >router to do what it used to", right? We need a section to say that?
>
> Anytime one proposes to change the default behavior of a decades old
> protocol to be more restrictive, I would expect this to be discussed.
>

a few times in this discussion people say: "the protocol", but the draft
doesn't propose changing the protocol, it proposes that implementations
stop being wide-open with respect to send/receive conditioning/filtering.

There's no default behavior change in the protocol (which I think doesn't
really talk about filtering prefixes at all, not in the sense of
'prefix-list foo in' anyway).

--001a1149c5f22a6216054dee33c2
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Wed, Apr 19, 2017 at 7:30 PM, Acee Lindem (acee) <span dir=3D"ltr">&=
lt;<a href=3D"mailto:acee@cisco.com" target=3D"_blank">acee@cisco.com</a>&g=
t;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0=
 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=3D""><br>
<br>
On 4/19/17, 7:25 PM, &quot;John Scudder&quot; &lt;<a href=3D"mailto:jgs@jun=
iper.net">jgs@juniper.net</a>&gt; wrote:<br>
<br>
&gt;(As an individual contributor)<br>
&gt;<br>
&gt;On Apr 19, 2017, at 7:18 PM, Acee Lindem (acee) &lt;<a href=3D"mailto:a=
cee@cisco.com">acee@cisco.com</a>&gt; wrote:<br>
&gt;&gt; the draft is conspicuously missing a =E2=80=9CBackwards Compatibil=
ity=E2=80=9D section.<br>
&gt;<br>
&gt;Seriously? &quot;Backwards compatibility&quot; in this case is &quot;co=
nfigure your<br>
&gt;router to do what it used to&quot;, right? We need a section to say tha=
t?<br>
<br>
</span>Anytime one proposes to change the default behavior of a decades old=
<br>
protocol to be more restrictive, I would expect this to be discussed.<br></=
blockquote><div><br></div><div>a few times in this discussion people say: &=
quot;the protocol&quot;, but the draft doesn&#39;t propose changing the pro=
tocol, it proposes that implementations stop being wide-open with respect t=
o send/receive conditioning/filtering.</div><div><br></div><div>There&#39;s=
 no default behavior change in the protocol (which I think doesn&#39;t real=
ly talk about filtering prefixes at all, not in the sense of &#39;prefix-li=
st foo in&#39; anyway).=C2=A0</div></div></div></div>

--001a1149c5f22a6216054dee33c2--


From nobody Mon Apr 24 12:01:35 2017
Return-Path: <christopher.morrow@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8316212946C for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 12:01:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n0bi2GGvpGoI for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 12:01:31 -0700 (PDT)
Received: from mail-qk0-x229.google.com (mail-qk0-x229.google.com [IPv6:2607:f8b0:400d:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFD77131932 for <idr@ietf.org>; Mon, 24 Apr 2017 12:01:24 -0700 (PDT)
Received: by mail-qk0-x229.google.com with SMTP id u75so28937635qka.3 for <idr@ietf.org>; Mon, 24 Apr 2017 12:01:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=QnWj+ggAAkgKOlmk7HaRWc4RgZVEXmeJaLun781Itto=; b=BiwqRJIYNiTnnuKmS+UwB0OtU5VyH0pYKRJzr5nAHBmDxuoOX7U43hd13FiIMNZ2o/ FrFHbsIQylsD9FjtW2fR3vekWvxk8fn9TzsyDI2WhDfcwPPrhg97k5a561BZ2od3N23t DxrTkzcsjpOIkU98niaoULynSD4RoX8Lg5LSNCZFBpM3DFdDZWDBtyvvqY++9tBS2eXC Dz9/DqqbV8Gbb3FXGOnqQRlPGk0JrxZixXnFymMLKtsQxOhnpsMzrCK+5pzEA2qpL7Um 4ler/SiUjMhl8RarzsyuJaWWcG4grWUy6rJkmRPFG5AK8u8Ti7yMiaPd51BbMdiBLwEb 3Acg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=QnWj+ggAAkgKOlmk7HaRWc4RgZVEXmeJaLun781Itto=; b=EqRW6/Xkvz42pwafxnNkAMNhmym9h6wD93GkFq4Epu8eNvdjQW/Yv6p/odEg7RT2s8 dLRWQ5YUrW2D94mP6EDJgjeg9xkud1sac8HRD9aLvY3L8NpvmNQcCo8o5mv676L0i3J1 7HJcVWNOWCbAJL3jjR9T6ovH8lEW6PG2DhQ2MyywsSVp4i/kd+OBELoSxW3zEi4w216o zmiO/chV4qMQ8EhjXSTLfaUA+CY8vm0KM/vnXrOVvuJRpqYTE7Op62Ag7T+it7X+Ce2i siLsoZABuGNnQRx3zL/y7BpD+g+RCal+nSH+B8uqtMYiY834g31ANLbIRNRDOTP51O88 CFTw==
X-Gm-Message-State: AN3rC/6dgXcMX4MazudwJgQjGznW85rKbC9pb5wg45B7Sc1ISy8N6hmC ukL6fMglmSjsZ2DG1lfI8/Z+IiJ+cA==
X-Received: by 10.55.19.205 with SMTP id 74mr24820674qkt.220.1493060483865; Mon, 24 Apr 2017 12:01:23 -0700 (PDT)
MIME-Version: 1.0
Sender: christopher.morrow@gmail.com
Received: by 10.140.93.5 with HTTP; Mon, 24 Apr 2017 12:01:22 -0700 (PDT)
In-Reply-To: <8a242116-e17b-9c3f-00d4-a2e606a0c5b4@cisco.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <2b8a94bb-4f40-6c1d-05ff-9cf11ad93646@cisco.com> <CAH1iCirFhb3HuREBDuuDbC-fuiinSFW6UuSk61MrEj9GEaHtsw@mail.gmail.com> <8a242116-e17b-9c3f-00d4-a2e606a0c5b4@cisco.com>
From: Christopher Morrow <morrowc.lists@gmail.com>
Date: Mon, 24 Apr 2017 15:01:22 -0400
X-Google-Sender-Auth: utnvw_BMdrmUKc_mp2d6BCBDPng
Message-ID: <CAL9jLaZ3RQ_Lw=e_5Y80Bg2VXxM08bKA-bgAW5AhFKz1V0--0g@mail.gmail.com>
To: Enke Chen <enkechen@cisco.com>
Cc: Brian Dickson <brian.peter.dickson@gmail.com>, Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a1140177ac4fb1b054dee3b7c
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/VI11mf37wzwe-F7oT0QeUT8NYps>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 19:01:32 -0000

--001a1140177ac4fb1b054dee3b7c
Content-Type: text/plain; charset=UTF-8

On Wed, Apr 19, 2017 at 11:36 PM, Enke Chen <enkechen@cisco.com> wrote:

> Assume in the new code the default behavior is changed to drop updates from
> a neighbor without an inbound policy.  Then as soon as the new software
> is deployed on that router, the updates from the provider would be dropped
> without any config changes.
>

surely people test said code before updating... if they don't then 'there
be dragons' suffices for any upgrade they perform.

--001a1140177ac4fb1b054dee3b7c
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">=
On Wed, Apr 19, 2017 at 11:36 PM, Enke Chen <span dir=3D"ltr">&lt;<a href=
=3D"mailto:enkechen@cisco.com" target=3D"_blank">enkechen@cisco.com</a>&gt;=
</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .=
8ex;border-left:1px #ccc solid;padding-left:1ex"><div id=3D":1g4" class=3D"=
a3s aXjCH m15b896f207fcf027">Assume in the new code the default behavior is=
 changed to drop updates from<br>
a neighbor without an inbound policy.=C2=A0 Then as soon as the new softwar=
e<br>
is deployed on that router, the updates from the provider would be dropped<=
br>
without any config changes.</div></blockquote></div><br>surely people test =
said code before updating... if they don&#39;t then &#39;there be dragons&#=
39; suffices for any upgrade they perform.</div></div>

--001a1140177ac4fb1b054dee3b7c--


From nobody Mon Apr 24 12:08:03 2017
Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B3A51294A5 for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 12:08:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id reAYtZwSSMTQ for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 12:07:59 -0700 (PDT)
Received: from mail-wm0-x229.google.com (mail-wm0-x229.google.com [IPv6:2a00:1450:400c:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A12D127275 for <idr@ietf.org>; Mon, 24 Apr 2017 12:07:58 -0700 (PDT)
Received: by mail-wm0-x229.google.com with SMTP id r190so77111246wme.1 for <idr@ietf.org>; Mon, 24 Apr 2017 12:07:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=UrdhdxghilaB7n/rZV20m+w1DMc775jOg1DS0dL8sEU=; b=nYMJHGA9q+YT8VKbEQVumCcrMMKD92rdM5UrQs/RQ123s030zyT4chrJci87EorvSI sFWdPvYLA4xZh+hm2uZMfEHpjfd2QRrhVu1utNng9/r0CkPkmxFXSSfupfbRdTjD8Huy /BhbZj3xpmCY8bjIVlrCyJ3j9kdC3JRAR8DNTQ96lxpm0tFQwORBntqUcH9dTt+soiyZ TC5x8SRnRyoT8YKoiqD3aXrxFgzvbLsqg09Rdgn3hlVnNc0xFEtHSrrZmfdV3+g8UAWl 7fzrTm7JAmSlBZq8L0bEQcWzDY6K5Q7Ui96s80nFQXYPhi3pRRoIcCulZykXZv4zK4K+ KGnA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=UrdhdxghilaB7n/rZV20m+w1DMc775jOg1DS0dL8sEU=; b=J77CZLzk3DJinBy0TY4T53NpbqjnLRaO90QTwUNKotquOePGh1hatjWM+gVJL1kta9 2Bca/gm4fdYENS7TYrRn/IIn4bFk1BI2ldadA0wCY3j5JpYPRXAyz3jR71ccYHvjkvlL gh0yCFEsogD/vfLKSpHVg4kb4uw/3MCNKyrsKULz3efSV0t9Xey+evMCbdBdzD6q80ic Oejjs8+5wr1VnAVbC8hMWkJ8RkBQGhMXiaYa7ttj9PdJAfgEeP+svvL8TmqM4X40PFw2 ZPiTLf9rM7pvUmrKAolkQkUMH7Jij05+urOorKNqtmCZY6cf2cMr2T5eXapgU/3xEeTE HcoA==
X-Gm-Message-State: AN3rC/74/RsciDP2pcXwQ0zY2QlTsTggVRTaJXWFCa8K2VRj+Yx0PpfA D8wLdkK63jqgsg==
X-Received: by 10.80.179.209 with SMTP id t17mr2225055edd.62.1493060877496; Mon, 24 Apr 2017 12:07:57 -0700 (PDT)
Received: from localhost ([188.206.99.208]) by smtp.gmail.com with ESMTPSA id z16sm4120281edb.26.2017.04.24.12.07.55 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 24 Apr 2017 12:07:56 -0700 (PDT)
Date: Mon, 24 Apr 2017 15:07:53 -0400
From: Job Snijders <job@instituut.net>
To: Christopher Morrow <morrowc.lists@gmail.com>
Cc: "Acee Lindem (acee)" <acee@cisco.com>, Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Message-ID: <20170424190753.632y3wz37p32s6uh@Vurt.local>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170306 (1.8.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/2VWD0bE87B8KtA1ZQlHj48-f4Z4>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 19:08:01 -0000

On Mon, Apr 24, 2017 at 02:58:58PM -0400, Christopher Morrow wrote:
> On Wed, Apr 19, 2017 at 7:30 PM, Acee Lindem (acee) <acee@cisco.com> wrote:
> > On 4/19/17, 7:25 PM, "John Scudder" <jgs@juniper.net> wrote:
> >
> > >(As an individual contributor)
> > >
> > >On Apr 19, 2017, at 7:18 PM, Acee Lindem (acee) <acee@cisco.com> wrote:
> > >> the draft is conspicuously missing a “Backwards Compatibility” section.
> > >
> > >Seriously? "Backwards compatibility" in this case is "configure your
> > >router to do what it used to", right? We need a section to say that?
> >
> > Anytime one proposes to change the default behavior of a decades old
> > protocol to be more restrictive, I would expect this to be discussed.
> >
> 
> a few times in this discussion people say: "the protocol", but the draft
> doesn't propose changing the protocol, it proposes that implementations
> stop being wide-open with respect to send/receive conditioning/filtering.
> 
> There's no default behavior change in the protocol (which I think doesn't
> really talk about filtering prefixes at all, not in the sense of
> 'prefix-list foo in' anyway).

Alvaro suggested to update the 4271 text to give clear guidance to
implementors on how this works.

A preview of the forth coming new version of the document is available
here:

    http://htmlpreview.github.io/?https://github.com/jaredmauch/draft-mauch-bgp-reject/blob/alvaro/draft-ietf-grow-bgp-reject-06-from-5.diff.html

We'll be posting a new version tomorrow or so.

Kind regards,

Job


From nobody Mon Apr 24 12:09:21 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1FFE8129466 for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 12:09:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r5WEBgTfGkSg for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 12:09:18 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id AE2CF127275 for <idr@ietf.org>; Mon, 24 Apr 2017 12:09:18 -0700 (PDT)
Received: by puck.nether.net (Postfix, from userid 162) id 6704B5409BF; Mon, 24 Apr 2017 15:09:18 -0400 (EDT)
Date: Mon, 24 Apr 2017 15:09:18 -0400
From: Jared Mauch <jared@puck.Nether.net>
To: Mikael Abrahamsson <swmike@swm.pp.se>
Cc: Enke Chen <enkechen@cisco.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170424190918.GB23552@puck.nether.net>
References: <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com> <alpine.DEB.2.02.1704240928120.5591@uplift.swm.pp.se> <09173019-86ee-4f81-d57f-f664d642f633@cisco.com> <alpine.DEB.2.02.1704242018130.5591@uplift.swm.pp.se>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <alpine.DEB.2.02.1704242018130.5591@uplift.swm.pp.se>
User-Agent: Mutt/1.8.0 (2017-02-23)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/0NUW9S61nQyorKMEkVoq6fyuihU>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 19:09:20 -0000

On Mon, Apr 24, 2017 at 08:19:12PM +0200, Mikael Abrahamsson wrote:
> On Mon, 24 Apr 2017, Enke Chen wrote:
> 
> > The CLI migration falls apart when a customer skips releases and jumps
> > from one release ("permit all") to another ("deny all").
> 
> I thought this was exactly what the CLI migration code was supposed to do?
> 
> Keep track of what versions some default changed in, and fix it when
> migrating the config?

	Vendors have never wanted to publish this, nor have they been
willing to truly document it.

	It seems like this is just an excuse to let their whim of the day
be further propogated.

	As someone who actually reads the diffs from the nvgen
ecosystem in platforms like Cisco IOS, it's clear nobody really
reads the full system diffs.
	
	Claiming otherwise is clouding the discussion.  Once again, this is
"We will never ever secure our BGP implementation".  To that, I will
respond accordingly with my account team.

	I also question those who think customers can't easily figure out
how to turn a knob on.  You must really not think highly of your customers.

	- Jared

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


From nobody Mon Apr 24 12:59:20 2017
Return-Path: <nick@foobar.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0599129502 for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 12:59:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jOGSkIQW38it for <idr@ietfa.amsl.com>; Mon, 24 Apr 2017 12:59:17 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA8A6129442 for <idr@ietf.org>; Mon, 24 Apr 2017 12:59:16 -0700 (PDT)
X-Envelope-To: idr@ietf.org
Received: from crumpet.local (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id v3OJx7oG033347 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 24 Apr 2017 20:59:07 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.local
Message-ID: <58FE590A.9050302@foobar.org>
Date: Mon, 24 Apr 2017 20:59:06 +0100
From: Nick Hilliard <nick@foobar.org>
User-Agent: Postbox 5.0.12 (Macintosh/20170323)
MIME-Version: 1.0
To: Enke Chen <enkechen@cisco.com>
CC: Mikael Abrahamsson <swmike@swm.pp.se>, "idr@ietf.org" <idr@ietf.org>
References: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net> <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com> <20170420154142.lacvtplusepy3qcf@hanna.meerval.net> <b57162ec-f806-6e86-7713-58608f72c468@cisco.com> <32C0B4EE-6241-49F9-97F2-7107AC68678D@juniper.net> <e513849d-f895-0499-7bf4-5ecb24cadab7@cisco.com> <4CE4AF1E-0C80-423E-B19D-5750FCAFAD89@juniper.net> <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com> <alpine.DEB.2.02.1704240928120.5591@uplift.swm.pp.se> <09173019-86ee-4f81-d57f-f664d642f633@cisco.com>
In-Reply-To: <09173019-86ee-4f81-d57f-f664d642f633@cisco.com>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/9kdn0nsbib0YrCXNXufwFOKESIE>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 19:59:19 -0000

Enke Chen wrote:
> The CLI migration falls apart when a customer skips releases and jumps
> from one release ("permit all") to another ("deny all").

Enke,

config downgrading is why the "downward-compatible-config" IOS
configuration command exists.  Config upgrading is relatively
straightforward, although it takes years to implement.

Changing defaults and commands is something which has happened on many
occasions over the lifetime of IOS, from radical config breaking "ip
classless", or my personal favourite, "mop enabled" in the interface
config mode, which changed default backwards and forwards on several
occasions, not just once (I'd love to hear the back-story about how and
why that happened, btw).  Other well known examples include the modular
QoS config mechanism which removed the older qos config mechanisms.

Just because a large vendor doesn't like changing defaults, that doesn't
mean it's not a sensible thing to standardise.

No-one is under any illusion that there is a cost to vendors
implementing this but right now, the cost of not doing it is borne by
other people, and we're tired of it.

Nick


From nobody Mon Apr 24 14:59:53 2017
Return-Path: <aretana@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 293E6131949; Mon, 24 Apr 2017 14:59:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GIHSJAdc0_W0; Mon, 24 Apr 2017 14:59:49 -0700 (PDT)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C2C48120227; Mon, 24 Apr 2017 14:59:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6388; q=dns/txt; s=iport; t=1493071189; x=1494280789; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=uVMD2P8RDeF8gutqMRNf1xr7/0+jqMbaVUo9crb9L88=; b=ktghEM+VA/ePkPKcamunG7WxVa/zy8uNtAONP2Bd/Gczmf9J0r8R2/lT +syNppVofLWQ4vum3xAxWzdT4kxm3J/ix61DU880rZjsThrbg7HrqyhRi QVSs/Wnw6lJWeLcUpyuCR6owLWVwrP/ozYYspJZANZtIF1l7DKx6M3NUw 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C3AQA2dP5Y/4UNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1RhgQwHg2CKFZFLIZVlgg8uhXYCGoN6PxgBAgEBAQEBAQFrKIU?= =?us-ascii?q?WAQMBASMRPgcFCwIBCBoCJgICAjAVEAIEDgWKFAgOq0GCJosdAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBGAWBC4VIgV0rC4JjhFeDBi6CMQWHBo9DhngBhxaGW4UUggC?= =?us-ascii?q?FM4okiG+LKQEfOIEGYxVVAYRXHIFjdYgpgQ0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,246,1488844800"; d="scan'208";a="237034100"
Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 24 Apr 2017 21:59:47 +0000
Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v3OLxl4W020575 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 24 Apr 2017 21:59:47 GMT
Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 24 Apr 2017 16:59:46 -0500
Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Mon, 24 Apr 2017 16:59:47 -0500
From: "Alvaro Retana (aretana)" <aretana@cisco.com>
To: Job Snijders <job@instituut.net>
CC: "draft-ietf-idr-shutdown@ietf.org" <draft-ietf-idr-shutdown@ietf.org>, "idr-chairs@ietf.org" <idr-chairs@ietf.org>, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] AD Review of draft-ietf-idr-shutdown-07
Thread-Index: AQHSutI62HNkeEG8rUet1MjLuMXn26HRf3CAgAOn2YA=
Date: Mon, 24 Apr 2017 21:59:47 +0000
Message-ID: <D0660551-9116-40F2-BBBF-0DEC12A80B54@cisco.com>
References: <010A73B6-A030-483F-8D79-3498D92C3335@cisco.com> <20170422101013.4unb4a3ulsq2kueg@Vurt.local>
In-Reply-To: <20170422101013.4unb4a3ulsq2kueg@Vurt.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/f.1f.0.170216
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.117.15.6]
Content-Type: text/plain; charset="utf-8"
Content-ID: <64B0AA1D3C43044F8FBC5B265C974C0D@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/jngJiNpgUslMInx3-Q4fTrb2Q1Y>
Subject: Re: [Idr] AD Review of draft-ietf-idr-shutdown-07
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Apr 2017 21:59:51 -0000
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=


From nobody Tue Apr 25 00:20:52 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DAD6128768 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 00:20:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.618
X-Spam-Level: 
X-Spam-Status: No, score=-2.618 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qz0JmdmXO6cj for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 00:20:45 -0700 (PDT)
Received: from relais-inet.orange.com (mta239.mail.business.static.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3198812708C for <idr@ietf.org>; Tue, 25 Apr 2017 00:20:45 -0700 (PDT)
Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id AB2EC602A5; Tue, 25 Apr 2017 09:20:43 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.42]) by opfedar06.francetelecom.fr (ESMTP service) with ESMTP id 7955780072; Tue, 25 Apr 2017 09:20:43 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM41.corporate.adroot.infra.ftgroup ([fe80::c845:f762:8997:ec86%19]) with mapi id 14.03.0319.002; Tue, 25 Apr 2017 09:20:43 +0200
From: <bruno.decraene@orange.com>
To: Christopher Morrow <morrowc.lists@gmail.com>
CC: Keyur Patel <keyur@arrcus.com>, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>, Robert Raszuk <robert@raszuk.net>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSvSxa7FfrXgMKmU+OEgrGuKcw4aHVq/nQ
Date: Tue, 25 Apr 2017 07:20:42 +0000
Message-ID: <6081_1493104843_58FEF8CB_6081_2377_1_53C29892C857584299CBF5D05346208A31CCAC9C@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com>
In-Reply-To: <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: multipart/alternative; boundary="_000_53C29892C857584299CBF5D05346208A31CCAC9COPEXCLILM21corp_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/JKI7lKwws8Gx8_4KH2CYFWldx9s>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 07:20:49 -0000

--_000_53C29892C857584299CBF5D05346208A31CCAC9COPEXCLILM21corp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_53C29892C857584299CBF5D05346208A31CCAC9COPEXCLILM21corp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_53C29892C857584299CBF5D05346208A31CCAC9COPEXCLILM21corp_--


From nobody Tue Apr 25 00:25:46 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 286381289B0 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 00:25:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.398
X-Spam-Level: 
X-Spam-Status: No, score=-5.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XbA321tWq781 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 00:25:42 -0700 (PDT)
Received: from relais-inet.orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 790F612896F for <idr@ietf.org>; Tue, 25 Apr 2017 00:25:42 -0700 (PDT)
Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr23.francetelecom.fr (ESMTP service) with ESMTP id CE2AAC009F; Tue, 25 Apr 2017 09:25:40 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.24]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id 98CC5120089; Tue, 25 Apr 2017 09:25:40 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM7D.corporate.adroot.infra.ftgroup ([fe80::9044:c5ee:4dd2:4f16%19]) with mapi id 14.03.0319.002; Tue, 25 Apr 2017 09:25:40 +0200
From: <bruno.decraene@orange.com>
To: Christopher Morrow <morrowc.lists@gmail.com>, "Acee Lindem (acee)" <acee@cisco.com>
CC: Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSvSzT7FfrXgMKmU+OEgrGuKcw4aHVrpgg
Date: Tue, 25 Apr 2017 07:25:40 +0000
Message-ID: <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com>
In-Reply-To: <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: multipart/alternative; boundary="_000_53C29892C857584299CBF5D05346208A31CCAD43OPEXCLILM21corp_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Nu2I44E-B0Pa3LU7XyHu5kgfKxc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 07:25:45 -0000

--_000_53C29892C857584299CBF5D05346208A31CCAD43OPEXCLILM21corp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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==

--_000_53C29892C857584299CBF5D05346208A31CCAD43OPEXCLILM21corp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_53C29892C857584299CBF5D05346208A31CCAD43OPEXCLILM21corp_--


From nobody Tue Apr 25 00:32:50 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D619128AB0 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 00:32:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level: 
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ve7v2rTZFdzY for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 00:32:46 -0700 (PDT)
Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8E22128896 for <idr@ietf.org>; Tue, 25 Apr 2017 00:32:46 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 4839AA5; Tue, 25 Apr 2017 09:32:44 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493105564; bh=HpR5d0escbibyONWBZ5tlj6w8294gtKjVao/99ZjgwQ=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=q1ro+cuGeQ96XisXCbVZc1gkJ6bfMdUp6po7AbVGFqpBzXazBuA3D4U2BhsUXq0P4 GzZxjTXf0zFm20faycmEILPIEpgQYDvV/Q2bz5EKoWIyA50+8zn9PQ+TalN3KFUsrV i0tRWWYueAfiJ7txV/iJ6q31fZvLy6sd+eJpAiGI=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 4591FA4; Tue, 25 Apr 2017 09:32:44 +0200 (CEST)
Date: Tue, 25 Apr 2017 09:32:44 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: bruno.decraene@orange.com
cc: Christopher Morrow <morrowc.lists@gmail.com>,  "Acee Lindem (acee)" <acee@cisco.com>, idr wg <idr@ietf.org>,  Hares Susan <shares@ndzh.com>
In-Reply-To: <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Message-ID: <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/haPxCyG7XmkouAawna31w8CsJmQ>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 07:32:49 -0000

On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:

> If this is indeed the goal to make no protocol change, including no 
> default behavior change in the protocol, could the document be updated 
> to state this. In which case, Standard Track may be required.

I re-read https://tools.ietf.org/html/draft-ietf-grow-bgp-reject-05

As far as I can see, it doesn't do any protocol change. It changes the 
default behaviour a router comes with when it comes to treating routes 
sent/received when there is no policy map applied on the neighbor.

So it suggest a behavioural change, not a protocol change.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Tue Apr 25 00:46:41 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C60F128B90 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 00:46:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.618
X-Spam-Level: 
X-Spam-Status: No, score=-2.618 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oAmgN0ahWSaD for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 00:46:36 -0700 (PDT)
Received: from relais-inet.orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D04D8128B93 for <idr@ietf.org>; Tue, 25 Apr 2017 00:46:35 -0700 (PDT)
Received: from opfedar03.francetelecom.fr (unknown [xx.xx.xx.5]) by opfedar23.francetelecom.fr (ESMTP service) with ESMTP id 2CA141605C3; Tue, 25 Apr 2017 09:46:34 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.59]) by opfedar03.francetelecom.fr (ESMTP service) with ESMTP id 0152C180066; Tue, 25 Apr 2017 09:46:34 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM43.corporate.adroot.infra.ftgroup ([fe80::ec23:902:c31f:731c%19]) with mapi id 14.03.0319.002; Tue, 25 Apr 2017 09:46:33 +0200
From: <bruno.decraene@orange.com>
To: Christopher Morrow <morrowc.lists@gmail.com>, "Acee Lindem (acee)" <acee@cisco.com>
CC: Hares Susan <shares@ndzh.com>, idr wg <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSvSzT/UOdCRuRk06fXrEppErHB6HVrpgggAAGwVA=
Date: Tue, 25 Apr 2017 07:46:32 +0000
Message-ID: <1250_1493106394_58FEFEDA_1250_2544_1_53C29892C857584299CBF5D05346208A31CCAE1C@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> 
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: multipart/alternative; boundary="_000_53C29892C857584299CBF5D05346208A31CCAE1COPEXCLILM21corp_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/mzYxg9ieGdEnxc7OR_4ADSGzXsg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 07:46:39 -0000

--_000_53C29892C857584299CBF5D05346208A31CCAE1COPEXCLILM21corp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_53C29892C857584299CBF5D05346208A31CCAE1COPEXCLILM21corp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_53C29892C857584299CBF5D05346208A31CCAE1COPEXCLILM21corp_--


From nobody Tue Apr 25 00:55:52 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E3B01319B1 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 00:54:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.399
X-Spam-Level: 
X-Spam-Status: No, score=-5.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TKZxLPIu0D7u for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 00:54:44 -0700 (PDT)
Received: from relais-inet.orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4D62127698 for <idr@ietf.org>; Tue, 25 Apr 2017 00:54:43 -0700 (PDT)
Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 0909E1004F5; Tue, 25 Apr 2017 09:54:42 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.63]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id DFEC040068; Tue, 25 Apr 2017 09:54:41 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM6E.corporate.adroot.infra.ftgroup ([fe80::f5a7:eab1:c095:d9ec%18]) with mapi id 14.03.0319.002; Tue, 25 Apr 2017 09:54:41 +0200
From: <bruno.decraene@orange.com>
To: idr wg <idr@ietf.org>
CC: Christopher Morrow <morrowc.lists@gmail.com>, Hares Susan <shares@ndzh.com>, Mikael Abrahamsson <swmike@swm.pp.se>, "Acee Lindem (acee)" <acee@cisco.com>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSvZYi/UOdCRuRk06fXrEppErHB6HVtTMA
Date: Tue, 25 Apr 2017 07:54:40 +0000
Message-ID: <20393_1493106881_58FF00C1_20393_19903_1_53C29892C857584299CBF5D05346208A31CCAEB1@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se>
In-Reply-To: <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/QhFajL5kosBfujKYsnPs_IxYYLg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 07:54:46 -0000

 > From: Mikael Abrahamsson [mailto:swmike@swm.pp.se]  > Sent: Tuesday, Apr=
il 25, 2017 9:33 AM
> On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:
 >=20
 > > If this is indeed the goal to make no protocol change, including no
 > > default behavior change in the protocol, could the document be updated
 > > to state this. In which case, Standard Track may be required.
 >=20
 > I re-read https://tools.ietf.org/html/draft-ietf-grow-bgp-reject-05
 >=20
 > As far as I can see, it doesn't do any protocol change. It changes the
 > default behaviour a router comes with when it comes to treating routes
 > sent/received when there is no policy map applied on the neighbor.
 >=20
 > So it suggest a behavioural change, not a protocol change.

So we now have 3 readings:
- protocol change updating RFC 4271 (base BGP spec)
- a behavioural change, not a protocol change
- no default behavior change in the protocol
=20
 > --
 > Mikael Abrahamsson    email: swmike@swm.pp.se

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Tue Apr 25 01:06:05 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4060131A01 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 01:06:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level: 
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7KiT-poCiDCG for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 01:06:02 -0700 (PDT)
Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F3A0131A02 for <idr@ietf.org>; Tue, 25 Apr 2017 01:06:02 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id E812BA5; Tue, 25 Apr 2017 10:05:59 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493107559; bh=Dbk9PWWecBjIfJArKSRC21lZd0Cd2hlO45aPosxnSZI=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=ekEjWL+CqOxb3xlt+cPci3hONNSt8R9Mzs+lW8mJK8EHgOEaHzrzvIm0ybF2oxqeR piGbbml4RCabGz0MtzfSF6kCWNzSphf1g+awR2buANIvRfyRx0C2mEyjOTU0eC0/Uu CmU/rvrb/IRMqfvD/5bKyLGHJ0WPhWHVPSUOjjxY=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 8E5D6A4; Tue, 25 Apr 2017 10:05:59 +0200 (CEST)
Date: Tue, 25 Apr 2017 10:05:59 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: bruno.decraene@orange.com
cc: idr wg <idr@ietf.org>
In-Reply-To: <20393_1493106881_58FF00C1_20393_19903_1_53C29892C857584299CBF5D05346208A31CCAEB1@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Message-ID: <alpine.DEB.2.02.1704251000070.5591@uplift.swm.pp.se>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se> <20393_1493106881_58FF00C1_20393_19903_1_53C29892C857584299CBF5D05346208A31CCAEB1@OPEXCLILM21.corporate.adroot.infra.ftgroup>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/wLy87aCV5Ud5GespW2Yv8eyLvN4>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 08:06:04 -0000

On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:

> > From: Mikael Abrahamsson [mailto:swmike@swm.pp.se]  > Sent: Tuesday, April 25, 2017 9:33 AM
>> On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:
> >
> > > If this is indeed the goal to make no protocol change, including no
> > > default behavior change in the protocol, could the document be updated
> > > to state this. In which case, Standard Track may be required.
> >
> > I re-read https://tools.ietf.org/html/draft-ietf-grow-bgp-reject-05
> >
> > As far as I can see, it doesn't do any protocol change. It changes the
> > default behaviour a router comes with when it comes to treating routes
> > sent/received when there is no policy map applied on the neighbor.
> >
> > So it suggest a behavioural change, not a protocol change.
>
> So we now have 3 readings:
> - protocol change updating RFC 4271 (base BGP spec)

Change? As far as I can see, 4271 has nothing on route-policy (just 
reading the TOC). So it seems to me that this would be an addition, not a 
change. Or am I mistaken? So this doesn't seem correct.

> - a behavioural change, not a protocol change

I agree with this.

> - no default behavior change in the protocol

Protocol, no. For me protocol is what goes on-wire, what goes into the 
statemachine, route selection etc.

This is a change in what is the default policy when none is explicitly 
configured. I can't find anything in 4271 that talks about this. So it's 
not a change per se, it's an addition and it's more operational than 
protocol change of behaviour.

So really, this is GROW stuff. It's not necessarily touching core BGP 
protocol documents, unless we absolutely want to.

https://datatracker.ietf.org/wg/grow/about/

"(v). Document the operational aspects of securing the Internet routing 
system, and provide recommendations to other WGs."

So this is exactly what's happening as far as I can tell.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Tue Apr 25 01:32:10 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 199E7128DE5 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 01:32:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.399
X-Spam-Level: 
X-Spam-Status: No, score=-5.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FdQDBUB-qqls for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 01:32:07 -0700 (PDT)
Received: from relais-inet.orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D80231293D8 for <idr@ietf.org>; Tue, 25 Apr 2017 01:32:06 -0700 (PDT)
Received: from opfednr01.francetelecom.fr (unknown [xx.xx.xx.65]) by opfednr21.francetelecom.fr (ESMTP service) with ESMTP id 621C8C053F; Tue, 25 Apr 2017 10:32:05 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.62]) by opfednr01.francetelecom.fr (ESMTP service) with ESMTP id 38AB71A0064; Tue, 25 Apr 2017 10:32:05 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM5E.corporate.adroot.infra.ftgroup ([fe80::2912:bfa5:91d3:bf63%18]) with mapi id 14.03.0319.002; Tue, 25 Apr 2017 10:32:04 +0200
From: <bruno.decraene@orange.com>
To: Mikael Abrahamsson <swmike@swm.pp.se>
CC: idr wg <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSvZrF/UOdCRuRk06fXrEppErHB6HVu5PA
Date: Tue, 25 Apr 2017 08:32:04 +0000
Message-ID: <9917_1493109125_58FF0985_9917_13726_10_53C29892C857584299CBF5D05346208A31CCB014@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se> <20393_1493106881_58FF00C1_20393_19903_1_53C29892C857584299CBF5D05346208A31CCAEB1@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704251000070.5591@uplift.swm.pp.se>
In-Reply-To: <alpine.DEB.2.02.1704251000070.5591@uplift.swm.pp.se>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/DcpaCY68UU-QoWwz75FEdF5qbZM>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 08:32:09 -0000

> From: Mikael Abrahamsson [mailto:swmike@swm.pp.se]  > Sent: Tuesday, Apri=
l 25, 2017 10:06 AM
>=20
 > On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:
 >=20
 > > > From: Mikael Abrahamsson [mailto:swmike@swm.pp.se]  > Sent: Tuesday,=
 April 25,
 > 2017 9:33 AM
 > >> On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:
 > > >
 > > > > If this is indeed the goal to make no protocol change, including no
 > > > > default behavior change in the protocol, could the document be upd=
ated
 > > > > to state this. In which case, Standard Track may be required.
 > > >
 > > > I re-read https://tools.ietf.org/html/draft-ietf-grow-bgp-reject-05
 > > >
 > > > As far as I can see, it doesn't do any protocol change. It changes t=
he
 > > > default behaviour a router comes with when it comes to treating rout=
es
 > > > sent/received when there is no policy map applied on the neighbor.
 > > >
 > > > So it suggest a behavioural change, not a protocol change.
 > >
 > > So we now have 3 readings:
 > > - protocol change updating RFC 4271 (base BGP spec)
 >=20
 > Change? As far as I can see, 4271 has nothing on route-policy (just
 > reading the TOC). So it seems to me that this would be an addition, not a
 > change. Or am I mistaken? So this doesn't seem correct.
 >=20
 > > - a behavioural change, not a protocol change
 >=20
 > I agree with this.
 >=20
 > > - no default behavior change in the protocol
 >=20
 > Protocol, no. For me protocol is what goes on-wire, what goes into the
 > statemachine, route selection etc.
 >=20
 > This is a change in what is the default policy when none is explicitly
 > configured. I can't find anything in 4271 that talks about this. So it's
 > not a change per se, it's an addition and it's more operational than
 > protocol change of behaviour.
 >=20
 > So really, this is GROW stuff. It's not necessarily touching core BGP
 > protocol documents, unless we absolutely want to.
 >=20
 > https://datatracker.ietf.org/wg/grow/about/
 >=20
 > "(v). Document the operational aspects of securing the Internet routing
 > system, and provide recommendations to other WGs."

Looks good.
But this seems that this would call for an Informational document (vs STD t=
rack currently), providing _recommendations_ (i.e. not directly any protoco=
l change) to IDR, and/or vendors, and/or operational community.=20

e.g.
1) documenting the operational issues.
My reading would be "Implementations which by default advertise all their B=
GP routes over an EBGP session plus have a CLI not allowing the EBGP sessio=
n and its associated policy to be configured atomically create frequent inv=
oluntary route leaks in the Internet, including in the absence of any confi=
guration error.
Possibly, this may be only one part of the problem, but here would be a goo=
d document to explicit those operational issues. (rather than complying tha=
t IDR do not listen to operational feedback)

2) propose recommendations
(e.g.=20
- Implementations should support a mode where BGP routes are not advertised=
 unless explicitly required by a route policy.
- As some configurations tasks may require multiple lines, Implementations =
should support a mode where multiple configurations items are configured at=
omically
- network operator operating on the Internet routing system should use/enab=
le those 2 features.

 > So this is exactly what's happening as far as I can tell.
 >=20
 > --
 > Mikael Abrahamsson    email: swmike@swm.pp.se

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Tue Apr 25 02:42:21 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C714129C1B for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 02:42:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L5GdR1X8bS3x for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 02:42:18 -0700 (PDT)
Received: from uplift.swm.pp.se (ipv6.swm.pp.se [IPv6:2a00:801::f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51FBA129BA8 for <idr@ietf.org>; Tue, 25 Apr 2017 02:42:18 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id EF1F6A5; Tue, 25 Apr 2017 11:42:14 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493113334; bh=C3JM7vcCcTYSM/M5LKEa7xQtdci6lqNYKSQjE+4Ceng=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=lKqn4vWSUPMyYrR6/bPWnAg16AGpho5nunwPy0k26FkxSnLqMxf1NGyUMISPKxOxr SVxU9dJVYHBpDxb80KQqjSyT+u3RsU1xRaT8jAMAv+oG6NelBT6gMhRz6vRUL/LLCW YedMA69i3b2QzwH9601oOhqYytbP0613khUL+NRc=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id EBAFEA4; Tue, 25 Apr 2017 11:42:14 +0200 (CEST)
Date: Tue, 25 Apr 2017 11:42:14 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: bruno.decraene@orange.com
cc: idr wg <idr@ietf.org>
In-Reply-To: <9917_1493109125_58FF0985_9917_13726_10_53C29892C857584299CBF5D05346208A31CCB014@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Message-ID: <alpine.DEB.2.02.1704251137160.5591@uplift.swm.pp.se>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se> <20393_1493106881_58FF00C1_20393_19903_1_53C29892C857584299CBF5D05346208A31CCAEB1@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704251000070.5591@uplift.swm.pp.se> <9917_1493109125_58FF0985_9917_13726_10_53C29892C857584299CBF5D05346208A31CCB014@OPEXCLILM21.corporate.adroot.infra.ftgroup>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/jcG5-9je57eMW0fFsn0bty1esoY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 09:42:20 -0000

On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:

> My reading would be "Implementations which by default advertise all 
> their BGP routes over an EBGP session plus have a CLI not allowing the 
> EBGP session and its associated policy to be configured atomically 
> create frequent involuntary route leaks in the Internet, including in 
> the absence of any configuration error. Possibly, this may be only one 
> part of the problem, but here would be a good document to explicit those 
> operational issues. (rather than complying that IDR do not listen to 
> operational feedback)

https://tools.ietf.org/html/rfc7908 already documents the problem with 
"route leaks". What you're asking for is as far as I can tell already 
documented there.

Perhaps not the *WHY* (as in operator error in configuring things 
correctly), but that's exactly what draft-ietf-grow-bgp-reject is about.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Tue Apr 25 03:10:05 2017
Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFA0F12EACB for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 03:10:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.619
X-Spam-Level: 
X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cFSZKzXgsXRJ for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 03:10:01 -0700 (PDT)
Received: from relais-inet.orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDE85129C1B for <idr@ietf.org>; Tue, 25 Apr 2017 03:10:00 -0700 (PDT)
Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr24.francetelecom.fr (ESMTP service) with ESMTP id 6B1CE4033C; Tue, 25 Apr 2017 12:09:59 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.72]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id 38F5212007B; Tue, 25 Apr 2017 12:09:59 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541%19]) with mapi id 14.03.0319.002; Tue, 25 Apr 2017 12:09:58 +0200
From: <bruno.decraene@orange.com>
To: Mikael Abrahamsson <swmike@swm.pp.se>, idr wg <idr@ietf.org>
Thread-Topic: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
Thread-Index: AQHSvag4/UOdCRuRk06fXrEppErHB6HV1uUg
Date: Tue, 25 Apr 2017 10:09:58 +0000
Message-ID: <6721_1493114999_58FF2077_6721_1006_8_53C29892C857584299CBF5D05346208A31CCB44F@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se> <20393_1493106881_58FF00C1_20393_19903_1_53C29892C857584299CBF5D05346208A31CCAEB1@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704251000070.5591@uplift.swm.pp.se> <9917_1493109125_58FF0985_9917_13726_10_53C29892C857584299CBF5D05346208A31CCB014@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704251137160.5591@uplift.swm.pp.se>
In-Reply-To: <alpine.DEB.2.02.1704251137160.5591@uplift.swm.pp.se>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.5]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/RUqQJ7JLl-I74hfzJMuSmaUIfX8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 10:10:04 -0000

> From: Mikael Abrahamsson [mailto:swmike@swm.pp.se]  > Sent: Tuesday, Apri=
l 25, 2017 11:42 AM
>=20
 > On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:
 >=20
 > > My reading would be "Implementations which by default advertise all
 > > their BGP routes over an EBGP session plus have a CLI not allowing the
 > > EBGP session and its associated policy to be configured atomically
 > > create frequent involuntary route leaks in the Internet, including in
 > > the absence of any configuration error. Possibly, this may be only one
 > > part of the problem, but here would be a good document to explicit tho=
se
 > > operational issues. (rather than complying that IDR do not listen to
 > > operational feedback)
 >=20
 > https://tools.ietf.org/html/rfc7908 already documents the problem with
 > "route leaks". What you're asking for is as far as I can tell already
 > documented there.

If the problem is route leak (which is indeed a problem to solve):
- draft-ietf-grow-bgp-reject is unfortunately not a solution to route leak.=
 There is nothing to check/unsure that the route advertised/received are th=
e "right" ones.
-  IDR is already working on solutions which seem to have a better coverage=
. e.g. latest IDR meeting:

     2) Route Leak Prevention using Roles in Update and Open messages [Alex=
ander Azimov/Randy Bush] (10)=20
     https://datatracker.ietf.org/doc/draft-ymbk-idr-bgp-open-policy/
=20=20=20=20=20
     3) Route Leak Detection and Mitigation [Sriram] (10)
     https://tools.ietf.org/html/draft-ietf-idr-route-leak-detection-mitiga=
tion-06=20=20=20


So if the problem is route leak, draft-ymbk-idr-bgp-open-policy seems a bet=
ter solution to me.
Eventually, it could include some idea from draft-ietf-grow-bgp-reject. .e.=
g.  by introducing a  "semi-strict mode" or "safe mode": if set, and if the=
 "role" capability is not received from the peer, then EBGP speaker MUST be=
have has per bgp-reject (i.e. not advertising/receiving routes, unless a po=
licy is explicitly configured)

Thanks,
Regards,
--Bruno

=20
 > Perhaps not the *WHY* (as in operator error in configuring things
 > correctly), but that's exactly what draft-ietf-grow-bgp-reject is about.
 >=20
 > --
 > Mikael Abrahamsson    email: swmike@swm.pp.se

___________________________________________________________________________=
______________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.


From nobody Tue Apr 25 03:15:41 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57BA512EB02 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 03:15:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level: 
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wnoMbC1YM5sU for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 03:15:38 -0700 (PDT)
Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F5E912EB01 for <idr@ietf.org>; Tue, 25 Apr 2017 03:15:38 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 117B1A3; Tue, 25 Apr 2017 12:15:34 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493115335; bh=JAj9Sk+7hiDT3iiE1vEWCR3rNjYnyx1kQne3oRdHD1o=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=tCTVEdEh1CW+EubGXEe7uBVI50PzfJsxbTxxj4/2EhWq9FCUIyvvRu62IwXnHS0r/ 0s0hJVuwCF2kP/ygw4yG7k1Clwo1gXNWCWwZbfbGf33ta+rzzMLlERlyVJI4UepWPe F5Dgq7O9yw6jSltduaeCi3IrhJp5yjISFFLTtfXQ=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id EC07FA2; Tue, 25 Apr 2017 12:15:34 +0200 (CEST)
Date: Tue, 25 Apr 2017 12:15:34 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: bruno.decraene@orange.com
cc: idr wg <idr@ietf.org>
In-Reply-To: <6721_1493114999_58FF2077_6721_1006_8_53C29892C857584299CBF5D05346208A31CCB44F@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Message-ID: <alpine.DEB.2.02.1704251211420.5591@uplift.swm.pp.se>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se> <20393_1493106881_58FF00C1_20393_19903_1_53C29892C857584299CBF5D05346208A31CCAEB1@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704251000070.5591@uplift.swm.pp.se> <9917_1493109125_58FF0985_9917_13726_10_53C29892C857584299CBF5D05346208A31CCB014@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704251137160.5591@uplift.swm.pp.se> <6721_1493114999_58FF2077_6721_1006_8_53C29892C857584299CBF5D05346208A31CCB44F@OPEXCLILM21.corporate.adroot.infra.ftgroup>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/y_gAqXwLW2VDAxqyKifdVE6NUHQ>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 10:15:39 -0000

On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:

> If the problem is route leak (which is indeed a problem to solve):
> - draft-ietf-grow-bgp-reject is unfortunately not a solution to route leak.

Errr... It's a solution to ONE huge glaring reason for some route leaks.

> There is nothing to check/unsure that the route advertised/received are 
> the "right" ones.

The problem draft-ietf-grow-bgp-reject tries to solve is when lack of 
config means you're announcing ALL your routes. So yes, you're technically 
correct, but I don't see the relevance.

> So if the problem is route leak, draft-ymbk-idr-bgp-open-policy seems a better solution to me.

It's not even an WG document. When will it be done? 
draft-ietf-grow-bgp-reject is short, concise and to the point, and easily 
understandable and can be adopted quickly.

> Eventually, it could include some idea from draft-ietf-grow-bgp-reject. 
> .e.g.  by introducing a "semi-strict mode" or "safe mode": if set, and

The whole problem draft-ietf-grow-bgp-reject tries to solve is that people 
are leaking routes WITHOUT SETTING ANYTHING. They're just creating the 
neighbor and then *boom* entire BGP table is sent.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Tue Apr 25 08:15:00 2017
Return-Path: <ietfc@btconnect.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2078131475 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 08:14:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.921
X-Spam-Level: 
X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U6RW3jcjDnNa for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 08:14:55 -0700 (PDT)
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0099.outbound.protection.outlook.com [104.47.0.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C84613166E for <idr@ietf.org>; Tue, 25 Apr 2017 08:14:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector1-btconnect-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ZYih0PHcuhJH+3BuD/unpzlczzvzHa3Xxu9Qx7vEwOc=; b=MtABofu6smPKQP/WBbwHdaz8rjI11uc+LwveMc1KuuyPcuQSGhI+Tuqu+29YttIbEWMPOe6sLif3rsiJzYD9gIH7uMOTG9xBhRvF8iW3chQNLEhxef7FyqZxg7f2w0xkjD46Mo382VJvDNOylRVOCL9BWFIlPfurmNjgkfKr87c=
Authentication-Results: orange.com; dkim=none (message not signed) header.d=none;orange.com; dmarc=none action=none header.from=btconnect.com;
Received: from pc6 (86.169.157.161) by HE1PR0701MB3003.eurprd07.prod.outlook.com (10.168.93.137) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1061.6; Tue, 25 Apr 2017 15:14:23 +0000
Message-ID: <025501d2bdd6$4a31e2c0$4001a8c0@gateway.2wire.net>
From: t.petch <ietfc@btconnect.com>
To: <bruno.decraene@orange.com>, idr wg <idr@ietf.org>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se> <20393_1493106881_58FF00C1_20393_19903_1_53C29892C857584299CBF5D05346208A31CCAEB1@OPEXCLILM21.corporate.adroot.infra.ftgroup>
Date: Tue, 25 Apr 2017 16:11:39 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [86.169.157.161]
X-ClientProxiedBy: DB6PR0501CA0025.eurprd05.prod.outlook.com (10.168.78.139) To HE1PR0701MB3003.eurprd07.prod.outlook.com (10.168.93.137)
X-MS-Office365-Filtering-Correlation-Id: 9bda0b01-431a-4935-d5a8-08d48bedc172
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(201703131423075)(201703031133081); SRVR:HE1PR0701MB3003; 
X-Microsoft-Exchange-Diagnostics: 1; HE1PR0701MB3003; 3:FukdPQE8csnUTaxByG2d4yfmdPmKGVFIWag8q0DqPD/q/6aFytD7W9adhYOXR+sFFAyPZcV8P+S1YhwPc57C4ysWzykD9QtYe3EThF18Rpq6kHuiSpMt8LMaxAzfusoI07mVjsQiBn5SxX1ueI51iQee9vAWd9zoPJUpz9JdnyELWajRzmC5wtZvhjqTGcOyfjQY2SnHx9ZHMuRL+XeUK5sc/81Kp18HNWpfvZw8I+AnO/eCruQhBvYc1a5EKni0bUx0PkLW9z53GtEGm/5Yz5wqpwLR7enuSVnvm3qKq7LqNp/BbnGUE/M8tNvxgpvF5J8vEqdIsCKvswWIX8OkMQ==; 25:DmcqCJM9F5yTXAaKjXKXsgI/0R765D1gfWeIY+3z/24OysdsXscLpMDlgRw2Wnbbb2xpX7ae50g2+G7IR4B1Ca0S3itRTxFR6ePoZmdtlL8MZmlioZWGjvR5DC/DarULyfRCBje4VFTNGdooZrXynfUoooIh8UchyWXM7iuHgs6RgTJUTTHBaaYG1nuUPGEim9qZoF2CJ8WM4Pj5TQEUqYTdPy593WAE5YY++2/HCaN9sp17yfmi5AVKm2MChaLow6wrbqFB9e4E8UphCMExBWSTBXFRh6o0lsVm8LaZ63PaLrRg/0FFBjWcrba2t1WR1ebrfWcqD/u1AbNwM1jCA9XVD9zcROogJy4rcpJF1hzO7LIY2sR/v8Oudy86+LgfHjL8fa5jaZy04TUw5oAO2s+mr8kNJBOjHhJAe2GAHYCKkHJVwhsNMaqI1N4WgUStJ7m/w/N7z8HL60mTfv2uvQZxacTCMZ9LIEJPK06oq1I=
X-Microsoft-Exchange-Diagnostics: 1; HE1PR0701MB3003; 31:QdLEubyVVTrdzcEGGmKTtjFq7hheHa1RD/NpCmA+77C5ktKZk6cLdSiMU4u8DqaGwwsqBZub9PAkcK35QxSNYysYfiSmkA6FB+lhwwLDHfnZjR2J4E6qglRTJ+HfnkkrsIAvIiLZLLlrLBosTKmkPPywmrJMvWUhbXajmEWa53DRm3NZNA6F3xFT8eTyZiGa6384DuM65AMXkrpIWMdNugH1LHZVJ/tug83fCzoxgK4T4cu+1nxuHeF8mGbiqFhp5YOZZoWVn3LCrb/yFt14gEiXqjZ9DZene3efuiFCIfQ=
X-Microsoft-Antispam-PRVS: <HE1PR0701MB300366E99891E678879A42D5A01E0@HE1PR0701MB3003.eurprd07.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(18271650672692);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3002001)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123560025)(20161123555025)(20161123562025)(20161123564025)(6072148); SRVR:HE1PR0701MB3003; BCL:0; PCL:0; RULEID:; SRVR:HE1PR0701MB3003; 
X-Microsoft-Exchange-Diagnostics: 1; HE1PR0701MB3003; 4:CzjlE6USK+Ij/4SWkB1Jo57cw+dy1wD4NS8VUrZjG8yHhjasp78UtNXCNMAfvYNJyduj0bF+qGvOc/heGqJXlS870i/ygUFtmIU45XvYEgP2QA537Tvt1ZLs57vckOogVg+nfVzh7GTsYkFVWZPphzzCsRO/O6Nwi6Sjbfeu2bdPmw0TE1wBOmzx4DFt2iAEYqH3dGI/ESj5vhr7Poe0+G77VfsH/P68teDv1TWkoK72/p7pfIE+eHrEJ/bNOsAoTPFyQ667CfeBw7n7l/qCuzgcEOKV5V3fNJcAgmaA6m4bGyVzLFYN3Wbx//CRN0+D+a9ymlmYuOTd5R1HQ2SX4g7AjC/b8iWUFuVQZAaYhzpl/JGTLozSTgCnApRWG/ILGxwmRRtChlpu3gLoq+DUXV9KdvDWhNaeyWiBntQ7Ukh1BNYmaP5iqcCR4/rlWgApjO+53hEE0RR+7mWbyeRrMyI9rEr5qhkXE1XMOLW836eiB4P13AkF9OE/yS/Z0agKuOz+kvVqf0UxPkwIeUCD+EvE+8cWof4WXP9+3tq850aPHN43Hr/ZICUFBa2Ea5A4OljrdanSuJXIZaVs75yB5Chl8TiYY+ouAqua84oDifn3siLvDX77oCsJguW0FmpoA3Fx8K0/J3oLPCcG0FUAXwQFtD1Lec0a8eGCQ5FWLVSA+UxXRw3xVQIOH7C0JeLWdNAyfLiNkNi4AndLeRHnjjmpu75lfQIEvXPMexWMkIQ4c5nETN4/0O8AYjKdyCCzYWq3G/dnqo6uTQkCHJYu5GcBqkRxFWD1lWgB5MKAChTyC21ChEYzHkZLkUofK0LBSymktsHxZE+62a8H3zNchA==
X-Forefront-PRVS: 0288CD37D9
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(39840400002)(39860400002)(39450400003)(39410400002)(39400400002)(39850400002)(24454002)(51444003)(252514010)(13464003)(377454003)(229853002)(6486002)(66066001)(62236002)(25786009)(189998001)(230700001)(44736005)(47776003)(50986999)(44716002)(6666003)(4720700003)(6306002)(61296003)(33646002)(230783001)(42186005)(93886004)(116806002)(53936002)(9686003)(2906002)(6246003)(6496005)(86362001)(5660300001)(23756003)(50466002)(50226002)(38730400002)(8676002)(81166006)(6116002)(305945005)(76176999)(3846002)(81816999)(81686999)(7736002); DIR:OUT; SFP:1102; SCL:1; SRVR:HE1PR0701MB3003; H:pc6; FPR:; SPF:None; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; HE1PR0701MB3003; 23:b8EhlUWyIx517n982v7hLdfBHF3ypcvuOr5Lz?= =?iso-8859-1?Q?r22uIc/iliiyPR2yHymI/RE4XOQhvRGIFnAFFKaVaAyOyMzHQguW8gonlT?= =?iso-8859-1?Q?6tTjkCRXCnpR8EmP1yFpAbhJoFN/NHdCJH3ucH0U71x7LeO8/cwKNp505F?= =?iso-8859-1?Q?8Adt757k90YCyqYDjPvScfij2tlyrG46A+AbGamebAo5AwpBiHZ72Ht6do?= =?iso-8859-1?Q?+/9RHDm4pZKgI2ncP90A3ZKAUZy50pZQbDPNivSF0MUiimOIOu+q8tu4mx?= =?iso-8859-1?Q?b01jWTGPU4bHOhU4iE7FmyaSzdynjtmxWWig71xFqLbGWww0XoPcyxnfly?= =?iso-8859-1?Q?2HDP0nW+z0YaBzv0XE1u8GF3WhlTU5WaJAxSMtLXQs8WQmMxsa9XL/vWPA?= =?iso-8859-1?Q?4/uOJC5H3R8qGK8SP72BL54mmd5aVo2iyp0xD1md9PahJcvwTdlvs67Fjx?= =?iso-8859-1?Q?AeOErGzkbGGeb9zUw+c/pP8rhhE3cHYbMdCNP8VzZ+NWMEnPdQlIGj8+pT?= =?iso-8859-1?Q?PE5lXaBNFTzv8xkaXUZaCYMzVIF8nmzPexIMJdBfpqncJCuv0SYKqK5mRE?= =?iso-8859-1?Q?Qqnq12ZHCTPYlSCA8nE3fsvsQVDc2ijuAJGBdcrAaDUxeLe8dOvvYbVTUc?= =?iso-8859-1?Q?dLUfRF5C1r8y2mx0zgXeqhZVvIG8G1st5jta/AtheSQkqwDy0QZYcy9gSO?= =?iso-8859-1?Q?CY1Fmc1m6cpRi23BlJjGaz6sn2fX/afFb0ZGe3CA9pv718anMhX3hpo2G4?= =?iso-8859-1?Q?RWJ2hcU11tVU5qJKRZBkk6bktFAG463kP1dnGVwQr+EOJI/0Fni8HDXnXu?= =?iso-8859-1?Q?gP8tpn9A5EQushJM4hm/zRbrmDl0ZWFnHQD3v/ve7JTV2vb8ZH7xFWd0hY?= =?iso-8859-1?Q?S7hYB0T+VgtNxwEtbzuUP3Om4X+gXJ2CV6zMS4bTy+eD6fOaAVQ2fr1Q6n?= =?iso-8859-1?Q?SrmR6AljqZhnINEod62VL/7dYHHERfeCLkK3Gsb97856IRYYJRIHOFzmHl?= =?iso-8859-1?Q?SmMrppkvmvIsdckzsUa2FLj8tbwlmjQ8dLxLy5bRqLnDf1nZsb249qqixT?= =?iso-8859-1?Q?2XyU2YKeKClZ+PNU+BZY4EIt8THEAHcA4dGZk0dPEdXQUp4BB61Dbx5XMA?= =?iso-8859-1?Q?+7UJwIhKW5bnKEzlTRXhqpkjKDdIflbLewu47VtBWjOsTvsz6HUkFvfSzK?= =?iso-8859-1?Q?905uRXkdyaJ3PF8EoEeK47ciNSXBET3s4sGXstDDtGpdt5eYJhfDscf+P9?= =?iso-8859-1?Q?q8GowczLlpuKaHOGJ/gFtzx688FZAY2GNwhqEY8vESFpFPjegZMoxvQirW?= =?iso-8859-1?Q?U6OpeIInInWJghmgW918w2ZY5GeopEUVHa9ugvz/pFF/oHw=3D=3D?=
X-Microsoft-Exchange-Diagnostics: 1; HE1PR0701MB3003; 6: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; 5:JRaLiP3wwjYnjJlUARY3THGEVig4tQxPPmaOpD3JyCk27wxEWNm42oNUl2k+9czg59/L3qhvH7y9eGd4EjS2mfmZo1Eu2j+fnSwFExGxNEjI5viBS/6sIe6xXeIZL/woZ+PowraR7Kcdiq2hI3DPNg==; 24:dQV/KCzy7csYRiM9hBpqo9Ak1NmcrrVcgQA3eafz1ODOgdWc39bnBUOsquKNK0Tp9z+l3ff04b/ypvpjA+p631CsFCBOFyJa542VXi8In6A=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; HE1PR0701MB3003; 7:t653RvnJ3ggQyh8CBF5StxoY49ZVJvfAOw06kWx4JqN++rL0QIx4jU+BUepMZvAfVryNNNy+6rPkIK/yItzHktUAsPrkLZ0X5I+rKffRo5eqSi9oJJnZSG3si/I94GsTx645L28L0Gol63ZDYVEEhHggxu52QNmZ/CikmwkAhq8WanvyPkF8Np09vNwLt/wFbrXDz5jj5MRGQwg5Q9NsyCB+Y54C8APUAhlYS5GBT3pzm/VSxspS6T4MggUinnLyrtN/jpwuKFZ5XtDSLHfBUfb/WGA5y2APJ1mzrLmOEKRuNNwJmFP1/nYYYVCUsWEAYgxoobu5lFzK55Zr+hZCcw==
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Apr 2017 15:14:23.0787 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB3003
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/DheEV0w1kOMA-CMkrTmFowcmlt0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 15:14:58 -0000

----- Original Message -----
From: <bruno.decraene@orange.com>
Cc: "Hares Susan" <shares@ndzh.com>
Sent: Tuesday, April 25, 2017 8:54 AM
> > From: Mikael Abrahamsson [mailto:swmike@swm.pp.se]
> Sent: Tuesday, April 25, 2017 9:33 AM
> > On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:
>  >
>  > > If this is indeed the goal to make no protocol change, including
no
>  > > default behavior change in the protocol, could the document be
updated
>  > > to state this. In which case, Standard Track may be required.
>  >
>  > I re-read https://tools.ietf.org/html/draft-ietf-grow-bgp-reject-05
>  >
>  > As far as I can see, it doesn't do any protocol change. It changes
the
>  > default behaviour a router comes with when it comes to treating
routes
>  > sent/received when there is no policy map applied on the neighbor.
>  >
>  > So it suggest a behavioural change, not a protocol change.
>
> So we now have 3 readings:
> - protocol change updating RFC 4271 (base BGP spec)
> - a behavioural change, not a protocol change
> - no default behavior change in the protocol

The current text in RFC 4271 is
"    If the route is learned from an external peer, then the local BGP
      speaker computes the degree of preference based on preconfigured
      policy information.  If the return value indicates the route is
      ineligible, the route .. "

With this I-D, that becomes

"    If the route is learned from an external peer, then the local BGP
      speaker computes the degree of preference based on preconfigured
      policy information.

      If there is no preconfigured policy information, the route is
ineligible.

                                    If the return value indicates the
route is
      ineligible, the route ... "

I think that that is a change that will change what is then transmitted
on the wire so it is a protocol change.  YMMV.

Tom Petch

>  > --
>  > Mikael Abrahamsson    email: swmike@swm.pp.se
>
>
________________________________________________________________________
_________________________________________________


From nobody Tue Apr 25 13:23:44 2017
Return-Path: <ghankins@mindspring.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09464129511 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 13:23:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.72
X-Spam-Level: 
X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mindspring.com; domainkeys=pass (2048-bit key) header.from=ghankins@mindspring.com header.d=mindspring.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3hdvTdf96O52 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 13:23:41 -0700 (PDT)
Received: from elasmtp-galgo.atl.sa.earthlink.net (elasmtp-galgo.atl.sa.earthlink.net [209.86.89.61]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BFBF1294FD for <idr@ietf.org>; Tue, 25 Apr 2017 13:23:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mindspring.com; s=dk12062016; t=1493151819; bh=nV33gzo55NnjmOKp8yekSki+hvzpf3wai+PF lCmJB2o=; h=Received:Received:Received:X-Authentication-Warning: Date:From:To:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To:User-Agent: X-ELNK-Trace:X-Originating-IP; b=rO4bUblrS//fU+Duy9tBjSvXugHQ2BBZM ZHLKFtsH/JQzJXzwyRIwsy7I5cwwGezFK4r/ScB15a3h+SIUCZLpMGK98WeJmFq/ifO UOY8ddhGjrMWlspLSmY5zbP1kXTD+hGqKNutxQuOHQvldwfCeOWDqE16wRh/R8/b1T0 2c2eiuQyT33Knxg+ShH61Nr2G0XLK76idUxfbwJ7ymIfW6GzGHwMJe9Zi4Wv9t2vNF4 8YhtvEirO8UWF5WBlSrJdxs7l+d4jrvLXV25hvwETJnOV6dhRtxF//oQVvF474cjAb9 AzdTH8vMiURUEDKtOsSAtqPpOudY4/93DcFJ1Z0gQ==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=dk12062016; d=mindspring.com; b=n088kNCNFhhPVnDkVU3xydlCPzZCl+Y6/tAjEaMZ16NK2gfpDA1+R230admDscd/WQMoRnaF1o4oifHj9Y9Ihv52wn1YA60s7lORAeK6mq7EzV9/dMLZbELwkwvLcGFp/AL5gTDwcWrnFFYm7NjlzGSxGVYjUjtoNE9ETDWUXZFVCUH/kMNJqQYk4m706P3p/JHO1cDVjZGq1ixsi2lrLKfWukCPb5M6kTHBOxRqE9sZmanXMoTnDIBIshwlb5KjEnyb4+50bSj2KxKYTCcGdj+2yUmEF77QvISqtG1e6gpNEUNU+0i5bgs1TBWnNUzXEyJjNVkOGRsbzp0cC0+FxA==; h=X-Authentication-Warning:Date:From:To:Subject:Message-ID:References:MIME-Version:Content-Type:Content-Disposition:In-Reply-To:User-Agent:X-ELNK-Trace:X-Originating-IP;
Received: from [76.8.75.174] (helo=doom.twoguys.org) by elasmtp-galgo.atl.sa.earthlink.net with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.67) (envelope-from <ghankins@mindspring.com>) id 1d36zp-0001y7-51 for idr@ietf.org; Tue, 25 Apr 2017 16:23:37 -0400
Received: from doom.twoguys.org (localhost.twoguys.org [127.0.0.1]) by doom.twoguys.org (8.14.4/8.12.11) with ESMTP id v3PKNegQ009209 for <idr@ietf.org>; Tue, 25 Apr 2017 16:23:40 -0400
Received: (from ghankins@localhost) by doom.twoguys.org (8.14.4/8.14.4/Submit) id v3PKNeMS009205 for idr@ietf.org; Tue, 25 Apr 2017 16:23:40 -0400
X-Authentication-Warning: doom.twoguys.org: ghankins set sender to ghankins@mindspring.com using -f
Date: Tue, 25 Apr 2017 16:23:40 -0400
From: Greg Hankins <ghankins@mindspring.com>
To: "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170425202340.GD8237@mindspring.com>
References: <23283_1492759950_58F9B58E_23283_375_1_53C29892C857584299CBF5D05346208A31CC352B@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421084638.l6pbvtznfsxnq2wy@Vurt.local> <23291_1492766305_58F9CE61_23291_9725_1_53C29892C857584299CBF5D05346208A31CC399E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170421095839.sralcy7aos5mzzic@Vurt.local> <d57ed214-945a-54b8-e04f-cb8610f789e4@cisco.com> <alpine.DEB.2.02.1704231447550.5591@uplift.swm.pp.se> <ee6e3ad8-d5c2-16c5-4464-3473d9a6443a@cisco.com> <alpine.DEB.2.02.1704240928120.5591@uplift.swm.pp.se> <09173019-86ee-4f81-d57f-f664d642f633@cisco.com> <58FE590A.9050302@foobar.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <58FE590A.9050302@foobar.org>
User-Agent: Mutt/1.5.19 (2009-01-05)
X-ELNK-Trace: 176464c9115cf5b39c7f779228e2f6aeda0071232e20db4dc6af6b0834bc74acc0b4940823697b9c350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 76.8.75.174
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/kgl6etbjUuR3jLHVeDSi4LLIs50>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 20:23:43 -0000

I would like to add a couple of points to this discussion wearing my Nokia
Product Manager hat, and specifically as the person who is responsible
for managing this feature in our routing product line.

Our current BGP defaults in Nokia SR OS are insecure, and we are going to
implement this secure behavior because our customers are asking us for it.
Jared, Job, Mikael, Nick, and others have expressed their demand directly
on the GROW and IDR lists as operators, and we are seeing this same demand
as a router vendor too.

Defaults can be changed, it's not an impossible problem.  We put considerable
thought into changing configuration defaults a long time ago, and have
quite a bit of infrastructure support to make sure that changes are handled
correctly between different software releases during an upgrade or downgrade.
This allows us to change a command syntax or default behavior, and preserve
the intended functionality during various software change scenarios.  First,
we are strict about only introducing changes in major releases, unless for
example there is a security issue that needs to be addressed immediately.
Changing defaults or deprecating a command is a multiyear process that
spans multiple major releases, where we first mark a command as deprecated
and eventually remove it as a configuration option.  Our configuration
infrastructure knows how to translate commands between releases if the
syntax changed, or knows how to handle the cases where a default changes
or a command has been removed.

We also have a clear documentation process for communicating changes
to customers in multiple sections of release notes and documentation.
Each version of the release notes has a detailed section ordered by release
that describes new features, deprecated features, and changed or deprecated
commands.  As people have pointed out, operators may not read the available
information, but this doesn't mean that we don't make careful decisions
to change defaults when necessary.  In addition to the documentation,
we communicate roadmap information during customer interactions such as
EBC visits, planning meetings, training sessions, our customer conferences
and even over social media.

There are a number of scenarios we have considered for changing the insecure
default.  This is not an exhaustive list, but here are some examples:
o ISSU upgrade: old behavior
o ISSU downgrade: old behavior
o Reboot: new behavior
o Device that ships with preloaded software in 2017: old behavior
o Device that ships with preloaded software in the future: new behavior

Lastly, we explicitly added the option to the I-D to have a configuration
knob that configures the insecure behavior:
   o  A BGP speaker MAY provide a configuration option to disable the
      preceding behaviors, but it MUST implement them by default.
So if our customers want the old behavior, then we have a way for
them to enable it.

Greg

-- 
Greg Hankins <ghankins@mindspring.com>


From nobody Tue Apr 25 13:30:51 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F51F131530 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 13:30:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level: 
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dZrwHZfWVJTY for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 13:30:49 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 09DB0129AD5 for <idr@ietf.org>; Tue, 25 Apr 2017 13:30:49 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 458B91E34F; Tue, 25 Apr 2017 16:38:08 -0400 (EDT)
Date: Tue, 25 Apr 2017 16:38:08 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Nick Hilliard <nick@foobar.org>
Cc: Robert Raszuk <robert@raszuk.net>, idr wg <idr@ietf.org>
Message-ID: <20170425203808.GK30063@pfrc.org>
References: <20170314213607.GH12864@pfrc.org> <579D00D9-D80F-4625-BF16-0D5112C2FA98@cisco.com> <CA+b+ERkXLg3O0hEAtokUDn4ndjixyuT4dpv9LfLVPmfsb1akug@mail.gmail.com> <20170418203108.GB9688@pfrc.org> <CA+b+ERnxjsjVbSowzBgBhrCtY5ehhn+SM+uvF3G071No-3gk6Q@mail.gmail.com> <58F89C07.8080900@foobar.org> <CA+b+ERnZvPM0jyuMEx1cGTHS70Rw+h+Ze0KoM7cbCkvVMAKMTw@mail.gmail.com> <58F93B30.2010909@foobar.org> <CA+b+ER=QLQy8hTrw4Dvs7Au5uhQd=wUxdFWQqQx06Kc61n5BLg@mail.gmail.com> <58F9C95E.2050201@foobar.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <58F9C95E.2050201@foobar.org>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/AUd7qWDwWLLxFeew_AUVupyyf0g>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-rs-bfd-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 20:30:50 -0000

On Fri, Apr 21, 2017 at 09:57:02AM +0100, Nick Hilliard wrote:
> Or you could update bfd to support mtu detection.

Note that there's been prior art in this problem space:
https://tools.ietf.org/html/draft-haas-xiao-bfd-echo-path-mtu-01

However, I do suggest it's worth having that conversation in
rtg-bfd@ietf.org.

-- Jeff 


From nobody Tue Apr 25 13:47:54 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4FE651294B2 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 13:47:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t_t2ou9_9Ad0 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 13:47:52 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 5AD3812709D for <idr@ietf.org>; Tue, 25 Apr 2017 13:47:52 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id C6FEA1E358; Tue, 25 Apr 2017 16:55:11 -0400 (EDT)
Date: Tue, 25 Apr 2017 16:55:11 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
Cc: "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170425205511.GN30063@pfrc.org>
References: <20170419173711.71458B814DA@rfc-editor.org> <88AF5CD0-3DA4-4CD0-877B-39925DC7D5F0@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <88AF5CD0-3DA4-4CD0-877B-39925DC7D5F0@cisco.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/-GU3B0ghuW7EOfwPUSRQn-9Pug4>
Subject: Re: [Idr] [Technical Errata Reported] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 20:47:53 -0000

On Wed, Apr 19, 2017 at 05:56:12PM +0000, Alvaro Retana (aretana) wrote:
> I would like to get input from the WG as to the best way to handle this report.  I would specially like to hear from implementers, but all input is welcome.
> 
> The options are:
> 
[...]
> b. s/MAY NOT/MUST NOT

b.  Because "THOU SHALT NOT" isn't appropriate 2119 at this time.

-- Jeff


From nobody Tue Apr 25 13:56:03 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90F02129443; Tue, 25 Apr 2017 13:56:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wiX3xQYg5acY; Tue, 25 Apr 2017 13:56:00 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 380711294AC; Tue, 25 Apr 2017 13:55:54 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 56FE61E358; Tue, 25 Apr 2017 17:03:13 -0400 (EDT)
Date: Tue, 25 Apr 2017 17:03:13 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Job Snijders <job@instituut.net>
Cc: "Alvaro Retana (aretana)" <aretana@cisco.com>, "idr-chairs@ietf.org" <idr-chairs@ietf.org>, "draft-ietf-idr-shutdown@ietf.org" <draft-ietf-idr-shutdown@ietf.org>, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170425210313.GP30063@pfrc.org>
References: <010A73B6-A030-483F-8D79-3498D92C3335@cisco.com> <20170422101013.4unb4a3ulsq2kueg@Vurt.local>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20170422101013.4unb4a3ulsq2kueg@Vurt.local>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/VMHR82Vq7-NjNu1Vh2ZFqdEtTTw>
Subject: Re: [Idr] AD Review of draft-ietf-idr-shutdown-07
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 20:56:02 -0000

[Largely addressed to Alvaro using Job's points.]

On Sat, Apr 22, 2017 at 12:10:13PM +0200, Job Snijders wrote:
> The choice to 'just' decorate subcode 2 and 4 was driven out of
> operational experience with the various shutdown events. 2 and 4 are
> human initiated (or humans program a system to do it on their behalf).
> The other sub cease codes are either driven out of existing automation
> no immediate need to enrich them was identified ("maximum prefix",
> "Connection Rejected")), or are poorly understood ("Other Configuration
> Change") or rarely used ("Out of Resources").

There's also the simple matter that a number of the behaviors for some of
these subcodes have implications for conformance testing suites.  Those
suites know what happens when you hit those controls in the CLI and
preserving the subcodes leverages existing conformance work.

Arguably, there's a chance in behavior by adding stuff to the DATA field,
but there's supporting precedent in 4271 to ignore things you don't
understand there.

In short, this was a good fit for the use case.

-- Jeff


From nobody Tue Apr 25 14:09:49 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E94BA129443 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 14:09:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B6xGzlLINE-o for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 14:09:46 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id A6B541252BA for <idr@ietf.org>; Tue, 25 Apr 2017 14:09:46 -0700 (PDT)
Received: by puck.nether.net (Postfix, from userid 162) id 69D62540A9D; Tue, 25 Apr 2017 17:09:46 -0400 (EDT)
Date: Tue, 25 Apr 2017 17:09:46 -0400
From: Jared Mauch <jared@puck.Nether.net>
To: Mikael Abrahamsson <swmike@swm.pp.se>
Cc: bruno.decraene@orange.com, idr wg <idr@ietf.org>
Message-ID: <20170425210946.GB17347@puck.nether.net>
References: <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se> <20393_1493106881_58FF00C1_20393_19903_1_53C29892C857584299CBF5D05346208A31CCAEB1@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704251000070.5591@uplift.swm.pp.se> <9917_1493109125_58FF0985_9917_13726_10_53C29892C857584299CBF5D05346208A31CCB014@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704251137160.5591@uplift.swm.pp.se> <6721_1493114999_58FF2077_6721_1006_8_53C29892C857584299CBF5D05346208A31CCB44F@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704251211420.5591@uplift.swm.pp.se>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <alpine.DEB.2.02.1704251211420.5591@uplift.swm.pp.se>
User-Agent: Mutt/1.8.0 (2017-02-23)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/BdroO6gxuriwDV-plkm_NxjtMR0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 21:09:48 -0000

On Tue, Apr 25, 2017 at 12:15:34PM +0200, Mikael Abrahamsson wrote:
> On Tue, 25 Apr 2017, bruno.decraene@orange.com wrote:
> 
> > If the problem is route leak (which is indeed a problem to solve):
> > - draft-ietf-grow-bgp-reject is unfortunately not a solution to route leak.
> 
> Errr... It's a solution to ONE huge glaring reason for some route leaks.
> 
> > There is nothing to check/unsure that the route advertised/received are
> > the "right" ones.
> 
> The problem draft-ietf-grow-bgp-reject tries to solve is when lack of config
> means you're announcing ALL your routes. So yes, you're technically correct,
> but I don't see the relevance.
> 
> > So if the problem is route leak, draft-ymbk-idr-bgp-open-policy seems a better solution to me.
> 
> It's not even an WG document. When will it be done?
> draft-ietf-grow-bgp-reject is short, concise and to the point, and easily
> understandable and can be adopted quickly.
> 
> > Eventually, it could include some idea from draft-ietf-grow-bgp-reject.
> > .e.g.  by introducing a "semi-strict mode" or "safe mode": if set, and
> 
> The whole problem draft-ietf-grow-bgp-reject tries to solve is that people
> are leaking routes WITHOUT SETTING ANYTHING. They're just creating the
> neighbor and then *boom* entire BGP table is sent.

	In private at least one vendor has now conceded this is a bad thing
and is trying to fix it, that's progress.

	I'm looking forward to when BGP starts as secure out of the box
as many other protocols, such as SMTP, etc.

	- Jared

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


From nobody Tue Apr 25 14:36:29 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BE79128BB6 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 14:36:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qaaZX5opnZp2 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 14:36:27 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id D9889129443 for <idr@ietf.org>; Tue, 25 Apr 2017 14:36:25 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 37F0A1E358; Tue, 25 Apr 2017 17:43:45 -0400 (EDT)
Date: Tue, 25 Apr 2017 17:43:45 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Eric C Rosen <erosen@juniper.net>
Cc: "John G. Scudder" <jgs@juniper.net>, idr@ietf.org, Hares Susan <shares@ndzh.com>
Message-ID: <20170425214344.GR30063@pfrc.org>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <76d50f1f-e009-ab24-9c66-abdd41791dc1@juniper.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <76d50f1f-e009-ab24-9c66-abdd41791dc1@juniper.net>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/EHcVCaUUgpjY4g9jx9ndDAimSWg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 21:36:28 -0000

On Fri, Apr 21, 2017 at 11:54:29AM -0400, Eric C Rosen wrote:
> FWIW, my take on it is the following.
> 
> The document should not be considered to be an update to 4271, as it
> does not change anything 4271 says, and does not update or extend
> the protocol in any way.  Standards track seems entirely
> inappropriate, as there is no protocol specification in it.
> 
> The document is not really a Best Current Practices document, as it
> advocates a change from current practice.

FWIW, BCP is probably the best targeted status for the document.  I agree
with you completely that this doesn't document deployed code behavior, but
it is the "best practice" for running a network.

At the end of the day, the document status only impacts conformance suites.
And even those depend on the user saying "test these features".

-- Jeff


From nobody Tue Apr 25 15:03:48 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B45F1275AB for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 15:03:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level: 
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YZkQuhuZ5P2N for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 15:03:45 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 43350128BB6 for <idr@ietf.org>; Tue, 25 Apr 2017 15:03:45 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id AC2F71E358; Tue, 25 Apr 2017 18:11:04 -0400 (EDT)
Date: Tue, 25 Apr 2017 18:11:04 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Jared Mauch <jared@puck.nether.net>
Cc: idr@ietf.org, "Alvaro Retana (aretana)" <aretana@cisco.com>
Message-ID: <20170425221104.GS30063@pfrc.org>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/NmMdZuKL-qjbmQU6IpYxhGvkeJY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 22:03:47 -0000

[I'm picking on this specific message to make my points.]

On Thu, Apr 20, 2017 at 09:40:13AM -0400, Jared Mauch wrote:
> 
> > On Apr 19, 2017, at 6:26 PM, Robert Raszuk <robert@raszuk.net> wrote:
> > 
> > Keyur,
> > 
> > You can not set "insecure mode" before you reload the OS as current OS does not have such knob. Unless you delay the deployment across N releases and enforce sequenced upgrade.
> 
> Infact, this is the recommendation that I’ve provided to vendors that have expressed concerns.  There are many defaults that have not always been displayed, but things like IOS have “show run all” so you can see these.  
> 
> Something like the ‘bgp unsafe-ebgp-policy’ could be generated on their respective implementations.  I didn’t think that GROW/IDR needed to tell implementors this level of how to manage their release, so this does seem somewhat out of scope, but a concern I can see needs to be thought about.

My own thoughts on this draft haven't really changed since my original
comments at the microphone and in the halls after grow when it was
introduced:

- I'm supportive of this idea.  Safe by default is significantly better than
  unsafe by default.
- Moving to this as a new behavior will be extremely painful.  The word I've
  used internally has been "excruciating".

The tenor of this thread has really taken a disservice by conflating the
"this is a good idea" and the "we're going to make long-standing
implementations non-conformant" via the document status bludgeon.  The
latter isn't the fault of the document authors, but it's where I think we
took a wrong turn.

My personal recommendation is, presuming Alvaro and the IESG can live with
the particular bending of the meaning of BCP, that we go for that status.

This thread has generated a lot of good ideas about how to mitigate the pain
of moving existing implementations to support this practice.  It'd be good
if we summarize those some place.  Perhaps that place should be in the
RFC-to-be.

That said, even with some of the techniques involved, implementors will take
considerable pain in making these changes.  Defaults do change.  Impacted
operators get cranky with them and they cause outages.  Sane developers do
not tend to want to be the one tagged as responsible for the change because
the hate mail in the form of bug reports, regressions, broken tests that comes
back to them. :-)

I'm not the most sane of our developers and I've been spending time since
this was originally proposed in grow to allow such a change in our
implementation and mitigate the results.  The change is easy, the mitigation
is not.  And even I'm sensitive to how much pain this will be.  I dare say
my operator friends can't buy me quite enough beer to make it "easy".

But it's worth continuing the conversation.

-- Jeff


From nobody Tue Apr 25 15:11:25 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 977D41279E5 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 15:11:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level: 
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ja0kglDDFGOS for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 15:11:23 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 132D81275AB for <idr@ietf.org>; Tue, 25 Apr 2017 15:11:23 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 523331E358; Tue, 25 Apr 2017 18:18:42 -0400 (EDT)
Date: Tue, 25 Apr 2017 18:18:42 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: bruno.decraene@orange.com
Cc: Job Snijders <job@ntt.net>, Hares Susan <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Message-ID: <20170425221842.GT30063@pfrc.org>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <19878_1492639968_58F7E0E0_19878_13298_1_53C29892C857584299CBF5D05346208A31CBE742@OPEXCLILM21.corporate.adroot.infra.ftgroup> <20170420085755.sbzdtcjhirdoi3b3@hanna.meerval.net> <8442_1492680540_58F87F5C_8442_1101_11_53C29892C857584299CBF5D05346208A31CBFD43@OPEXCLILM21.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <8442_1492680540_58F87F5C_8442_1101_11_53C29892C857584299CBF5D05346208A31CBFD43@OPEXCLILM21.corporate.adroot.infra.ftgroup>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/3MeXyqRmklNpWuDggaEZdVW6Uvs>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 22:11:25 -0000

On Thu, Apr 20, 2017 at 09:28:59AM +0000, bruno.decraene@orange.com wrote:
> Can this document define what he means by "configured export policy".  Possibly by referring to standardized yang models.

Referring to at least the IETF published document:
https://tools.ietf.org/html/draft-ietf-rtgwg-policy-model-01

:   The default policy defined by the model is to reject the route for
:   both import and export policies.

I don't have the openconfig models cached and those are effectively the
working documents, but I doubt this point is likely to have changed.
Perhaps someone doing active work in openconfig can respond to this point.

-- Jeff


From nobody Tue Apr 25 21:39:33 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF89A1201F8 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 21:39:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level: 
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8n65Rv_UJjp2 for <idr@ietfa.amsl.com>; Tue, 25 Apr 2017 21:39:29 -0700 (PDT)
Received: from uplift.swm.pp.se (ipv6.swm.pp.se [IPv6:2a00:801::f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD88A120046 for <idr@ietf.org>; Tue, 25 Apr 2017 21:39:29 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id BAD14A3; Wed, 26 Apr 2017 06:39:25 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493181565; bh=9ag97HxerraIUGnDyOm5YSZuUFKI70j4O1KxblBJR5M=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=MNU9nUAbR8OX8o9LnG45bUn8UYAaxkSE1HcF5c5J+dbDtkTlVb3wsww7FFJyEcTbe szSfMwiZ+pJ6odqAhJwHKJFEfq5NlPy7nqlcL9syZIlCdCl702DQsPNQWo35pTx/M9 x4pe+pnNswNONYl0CJ3VqgCAQ19MODNv93MyjQIs=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id B756BA2; Wed, 26 Apr 2017 06:39:25 +0200 (CEST)
Date: Wed, 26 Apr 2017 06:39:25 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: "t.petch" <ietfc@btconnect.com>
cc: bruno.decraene@orange.com, idr wg <idr@ietf.org>
In-Reply-To: <025501d2bdd6$4a31e2c0$4001a8c0@gateway.2wire.net>
Message-ID: <alpine.DEB.2.02.1704260636130.5591@uplift.swm.pp.se>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <CA+b+ERnRz8BEO3mb1fnsDPoiL6Wxjdfw9vQPbyODNEa+xCJdnw@mail.gmail.com> <D51D67E4.A9782%acee@cisco.com> <AF07526F-F08B-4084-937B-A9A2D2DD2813@juniper.net> <D51D6AD2.A9795%acee@cisco.com> <CAL9jLaa1UQ5A1FwRKVw5RJCBQO+0j0BW4vUNaPXHB0_JB0j76Q@mail.gmail.com> <1058_1493105140_58FEF9F4_1058_786_3_53C29892C857584299CBF5D05346208A31CCAD43@OPEXCLILM21.corporate.adroot.infra.ftgroup> <alpine.DEB.2.02.1704250930500.5591@uplift.swm.pp.se> <20393_1493106881_58FF00C1_20393_19903_1_53C29892C857584299CBF5D05346208A31CCAEB1@OPEXCLILM21.corporate.adroot.infra.ftgroup> <025501d2bdd6$4a31e2c0$4001a8c0@gateway.2wire.net>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/1b_VLd74bSupKPvFJ90XgeRaGKM>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 04:39:32 -0000

On Tue, 25 Apr 2017, t.petch wrote:

> The current text in RFC 4271 is
> "    If the route is learned from an external peer, then the local BGP
>      speaker computes the degree of preference based on preconfigured
>      policy information.  If the return value indicates the route is
>      ineligible, the route .. "
>
> With this I-D, that becomes
>
> "    If the route is learned from an external peer, then the local BGP
>      speaker computes the degree of preference based on preconfigured
>      policy information.
>
>      If there is no preconfigured policy information, the route is
> ineligible.
>
>                                    If the return value indicates the
> route is
>      ineligible, the route ... "
>
> I think that that is a change that will change what is then transmitted
> on the wire so it is a protocol change.  YMMV.

If you're blackbox-testing a device with this change, you can't tell if 
it's a changed default or if it's got a policy that denies all. There is 
nothing in the on-wire format that has changed. There is nothing changed 
in how the BGP messages are handled in any way, as opposed to a configured 
default DENY-ALL policy in/out.

So I don't see it as a protocol change. It's a default policy change, but 
not a protocol change.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Wed Apr 26 02:49:13 2017
Return-Path: <ietfc@btconnect.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E22E12952E for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 02:49:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.912
X-Spam-Level: 
X-Spam-Status: No, score=-2.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ej4pyuHN7Skq for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 02:49:09 -0700 (PDT)
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0125.outbound.protection.outlook.com [104.47.1.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C44E4129526 for <idr@ietf.org>; Wed, 26 Apr 2017 02:49:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector1-btconnect-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=m59P81G8qkvCfS2LOsDv4p1WCGOUiIZ6yMZmJlXdAkY=; b=RZxzeqQYrFbct/2zDIPHILm581FfCqGANqNW4IJWkkGvZSniHHAtiRZZg/rsPFKXN2/8pT53VvYn7bKoJSRFXtG4+0qBJqqPphQai24CcZv31e5LGbPH1LDC3rwal61MGjQuGPFeEaDYh17SqxebvU8xXgyRcBnuJjyb5KOr1JU=
Authentication-Results: pfrc.org; dkim=none (message not signed) header.d=none;pfrc.org; dmarc=none action=none header.from=btconnect.com;
Received: from pc6 (86.169.157.161) by VI1PR0701MB3007.eurprd07.prod.outlook.com (10.173.72.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1061.6; Wed, 26 Apr 2017 09:49:05 +0000
Message-ID: <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net>
From: t.petch <ietfc@btconnect.com>
To: Jeffrey Haas <jhaas@pfrc.org>, Jared Mauch <jared@puck.nether.net>
CC: <idr@ietf.org>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org>
Date: Wed, 26 Apr 2017 10:45:57 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [86.169.157.161]
X-ClientProxiedBy: HE1PR0202CA0047.eurprd02.prod.outlook.com (10.171.89.161) To VI1PR0701MB3007.eurprd07.prod.outlook.com (10.173.72.149)
X-MS-Office365-Filtering-Correlation-Id: 7225040e-5937-40fc-681e-08d48c897ade
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(201703131423075)(201703031133081); SRVR:VI1PR0701MB3007; 
X-Microsoft-Exchange-Diagnostics: 1; VI1PR0701MB3007; 3:yUTtvABFASuwuZPSPZMdh30gbOFxqO/s/5NtMiiac1QsuWthX5os4CgXH1FnoimJMqfnsNXpY9safQhrcItgRFRn1MyYwWtMIYMu3uPlf8D3xvBZk9CzBMdnd+IhrAj5b6WuYxooC6VPwDSWjBOlp/fg/qVfW57YhkBEi1VZMBx8BZv0j4v8AV89tj4ApWxJnhQZl7zxw/BB8aefqSkvAStWWrP38XV28cqi2GGqVrf35C3rnGgVDS/2tRLySjGXPtQG+0V7I0QimuBo7xc64CE/s6gbw4Q84T8b68q7HcW01e7QjFDeynURumbbTKxTyN+cYD1WqXswZAfyUYzwew==; 25:8P1CpzadUfVwoGUxH39zVkXXaDsl8LU/Dru6S7IvP1JLq7wS8LhvLSIgDDy1pTi+x35F2KApeYen4SqOSBpRuhVsGe8xqloLOE4/1A/NYv9nD3b8d+yO20X2DP2zAn9sq7v9k/Tw9aP+JferoVJubrW8jEdzo87iF3lYLpyQWiedMa59hUDc/wTQgwyHd6JZpfEabqZVuT0PdAxLiZTccdKj+zZkBGUq8erqVQYMbpn64Kg32fx6IIH1eMpwoqiBsBJ5ox6mJGtPZBcH47GcRy77Cpgkw7cN8i8t4XwkuozC5kxuNErAsMZH85Yw4ZgUoxrvqu0NNfY2ywAbMbMAsY7i5CAialfL9/KaveQAeNv0b8SZdxXT1sqZvxYUuSi1WMroSnZAVE/sxOBK/Puhy5iwjK2kDj452J67ALhAansf4dYtnNg8yU4cUmnsEXWX5vEh+cqyONbQO5KHjDZWvPQzkEgugnxTyd+DSI8WbDQ=
X-Microsoft-Exchange-Diagnostics: 1; VI1PR0701MB3007; 31:IdCpwR8iY79iLaiPQTaz/sDfFcvHJpL/V74X+nZzcP0VMryYKBeGI1TH+P9rCrx+pA3X3j1agImXZzaek3LfZRctnvdEeGecUAHbSpnJWzuFeHcYHENdGF4LrqkK0UmH10Xf9y2acrxnh0yUDSt/g5wb3kER8rrVJJfkJ6GCxG8VcW4GwRtDGobqOkrHb/3orgWJ+pzE2JbjnW+4g3DKGonbNA70QfQ47+sFzqvmc86SeYDM/pgYj8h3jnoyd52B6O57Vl6tKsjXNPeF8wrgJg==
X-Microsoft-Antispam-PRVS: <VI1PR0701MB300775A6097A51D1001B926EA0110@VI1PR0701MB3007.eurprd07.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(124276396282122)(20558992708506);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3002001)(6041248)(20161123558100)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(20161123555025)(20161123560025)(6072148); SRVR:VI1PR0701MB3007; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0701MB3007; 
X-Microsoft-Exchange-Diagnostics: 1; VI1PR0701MB3007; 4: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
X-Forefront-PRVS: 0289B6431E
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(39410400002)(39850400002)(39860400002)(39450400003)(39840400002)(39400400002)(377454003)(13464003)(24454002)(2906002)(2870700001)(3846002)(66066001)(6116002)(8676002)(4720700003)(229853002)(6666003)(23676002)(81166006)(6306002)(9686003)(44736005)(38730400002)(6496005)(6486002)(53936002)(6246003)(189998001)(50226002)(5660300001)(4326008)(86362001)(230783001)(44716002)(93886004)(62236002)(61296003)(47776003)(81816999)(81686999)(50986999)(33646002)(42186005)(76176999)(25786009)(50466002)(305945005)(7736002); DIR:OUT; SFP:1102; SCL:1; SRVR:VI1PR0701MB3007; H:pc6; FPR:; SPF:None; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtWSTFQUjA3MDFNQjMwMDc7MjM6bnlUYmVwb0RHdERkUmxzU3ZTTlVYeU5r?= =?utf-8?B?WG54eERUZW5oeEo1R1AxUDFTVy9LWktKVnpDQVhCOFdOUWpwNlhVaXpoZ0xm?= =?utf-8?B?eVhSVjBhaE5jQmJ3ZjlqNjJrOFo1Uk1mTGJ1S1N5MURoSCtwMXgvYlI1MnBP?= =?utf-8?B?RDZZengwaEZURjIwTnVrTFNhL21nL1NHOVE0c2JUeDlsb0doZlpkOFkvdHdu?= =?utf-8?B?OXJPRU16a0RKWVhUaVR4M1RERlE0djNyaFg5aFlHQkRoUHRwRE5kdkRReU5i?= =?utf-8?B?cTBCVlhUSTc3QWhmdGNhbGlQT3pjQVYxTXhPWmV0cVNvdVEvMEc5cmxldFhv?= =?utf-8?B?Tk9BSG11VDRNKzZsRWtCU1dETTd3ZUQzZ2tlMEtNd2NmQlJvRVFyL3N5cHZi?= =?utf-8?B?a1B5ZFl3bDl5QTk2OUxBQ3lUclFlamN1Tk9jQkRmNjFKdG0yanhkVmpOdkRW?= =?utf-8?B?MXgyOFMxYnQwTkFJSFFqbWtBVDRUYVJBT3N6VE9NTjNDWm95OFpSbmt4RHls?= =?utf-8?B?UzM3WTZtdi95RU1iNmxXMnlncnNlV1h4L2VoWk9uUnE3aDkzei9KaE9aaU1N?= =?utf-8?B?OWpGU2pSOG03ZHA4ZmFPOEVVZmpMNk54N3JaeG4zNk9sdmhwaEpaL083aVR2?= =?utf-8?B?NEREWEs2N3A1cXNuRGJleEkvZ3ZIQ3VzbnpqNjA3NGpIWEdxdDVDWmVvcXFT?= =?utf-8?B?THVlMUo4SUJSOXlRKzN6ejZpaWZ3ck9ETTNXVkdPR2hWaFhUbS9GUllyUHkx?= =?utf-8?B?RnJJWjdOeHZXcGJhQ0gxZ0FLb2xZaENnWUNaNGx4bDZ2ZWZNOHVHQ25pK3hV?= =?utf-8?B?cFI5Y2ZGSzZaVDZGbGppVXEvZjVZWWF4cVhwbWhXNFdleTRaQkJvakt0WGI0?= =?utf-8?B?QXpkVlBZWjFGRVlLMkQwWUJDcnVpWEwvM1pkQ3liSWYrZXJnKzg0UW5vZ0M1?= =?utf-8?B?UXpMUFF2bHprZjFEYXFJNlZkUTRPdWxab1NQaG1Fb3hOdGt6b1N5aHc4dTdS?= =?utf-8?B?TDVNbzAybXNHRVB6WFpHR0RuU3k0WHBzeFdNYkRmMGpsQVVpWEhvakpWOVUr?= =?utf-8?B?SlRiekJ1alcwSFMzWHk0VW1tRm1KOGZGUFFJaGF5SjZXTGI5eU0rOWpWUGNY?= =?utf-8?B?NVgvZWkzRFFkYjdZK1oveFBuZHBJZ1cwdmZtb3M0MnArUUZ3USs0MEdOcE9N?= =?utf-8?B?bnE0YkVrclJ4YXVIeXJKUFpZMzFKdllHeWdrRFBuQUd5L2lmQk8xai9nOFZo?= =?utf-8?B?NGRiazVrSnZJM09rTDExWERyT2tNeUgyaDhaNFl6enk3Y2t0azFqMzdtMElj?= =?utf-8?B?L1RIOGVkaWlaeHowN2ZGVGpLeUJycTlTczNvY29Lb2dSaDMxV2E1QXdBeDd6?= =?utf-8?B?QTFJRnFxdXRicTFCU1hyWlErZy9ySjJjUVlId3FHam5nd05BQU9kcHl5Wm43?= =?utf-8?B?aUhHMXZkM1MrcnBYbEQ0UUdDbmJVbDF1eG9INVNlaFhzdlVCKzJ3UFRjZDhH?= =?utf-8?B?Q2kwQ1Jzem91cTVLMFExRmNCNlZQK0ovckFJbU1iY0lrNkQ5QW9GUkxHUkpz?= =?utf-8?B?dG11a2puRlVYWW9Yb1BlZ0ZOOUVSRVlBNUF1QlcyTXRRS0NiUkNXZ2htTmtG?= =?utf-8?B?enNDWWFDZlJYYmU5dWt4QW1YenBoUXI5cE9TMkdleVhCcnhHZ09hMXpRUFlC?= =?utf-8?Q?uXKA5TbsfjWolMmVCc4M=3D?=
X-Microsoft-Exchange-Diagnostics: 1; VI1PR0701MB3007; 6:HPS5y+bgHhw8aRqN78EMnTyk5R6+tkZvMeVvL/Bva/8zFXEQ7r3YrxmNWW8IQy2NaOEnaYWWv4Yr3cHFowFC/qowzlG0EZx4bWYVOWnvFecnDeWvj8QYa0PnMh783xR+KluyxVq0uDe4kglJdW21osTBilhh7rERy6UOavVikWN5hJx4A8Cg+AXtfZN3F5Zh+9Xm8xBM96+ka1UE1/sjW2q/D1NBlx+zkEiZcL+C0tPEl6b0Fodal8Mx5QulCx7pYGPjV4/pLUOCm5Nf5Qec71qVX8Cm8/HaEFlrZq8J7/7QD8aU1mpz4CnP+rmt0YXjVFRQU1mcDXo5lNVDJStfVvkG6teA2MyX4/UzMBlqXwQlsLZczOaeUFDlBH8nE0snAyXJhb8GqXL6eFGscNPGInaT8O/Uw3IkrNEMiNoPtGSAm5HZ93n54AUtCXQRoRT7wGo9eiBNEJ41XKNJlLQ5dCYvBkhKTl989uJbSz/ay9pkzjrA2icOlZMFOWV6wzgTm3BsFoMW+pGIXEeQCFqYzw==; 5:TBXdkp471d2I/sGMqWbI0FaIkFcRlZCzZAVrtpPogmSx2q937AubYEsSfgXIqjbMfffv0fgj/yKZnUP/HRU+75Q2/A6YQdSCuO59nLdKnRtN5Ey1wsXnn/f3nqdieDLeIZ1JJlju8YlRRQAiwOQC0K+2HJm9nNZpf+yqoAbPaaA=; 24:iVh7kiBQECVBMUBWSQCO7YfALpmbQU4IyvW6axrHLnVpyihDUwtJ9Sp3Y7E9XTNVfmqmnbY+6zZrMZNYGkErsK4jVVtLsAVsWDo15WnUZZ0=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; VI1PR0701MB3007; 7:b4p6IV8VvIY5Ab2PxMlpqln5xClvebPdiEsXLTtCx2NcVa43CKqbItBpVB80aC7TEDiy1ZW1rMUjkTaEtU8sNQC8AOfCCxuI9yDpRL+kLXtIS3IDvs/eryA6fYbYtrQOJgCwhRr5KNR95/xvDF6lxl9bsNP2Xg9bnLOV6RK9C/FoN2g+EpgooVU/qhGlZLpGJyBh+4h+/Mk6enLXy9tXspg4OLy1mQkMHrypaoRMzPDtQ8y3UYnnyPgDdlu9EFEvFnd8o8jrKwkGaPJwLzS2AUaB9syya0Dy3ncrlBqsdeEW8fnaEZC78C67pW0PrcCxkCELD+6Up+Ygui7xl4omsQ==
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Apr 2017 09:49:05.9801 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0701MB3007
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/k5-3n38og7KujKDVNJ9LuAFCShw>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 09:49:12 -0000

----- Original Message -----
From: "Jeffrey Haas" <jhaas@pfrc.org>
To: "Jared Mauch" <jared@puck.nether.net>
Cc: <idr@ietf.org>
Sent: Tuesday, April 25, 2017 11:11 PM

> [I'm picking on this specific message to make my points.]

[me too]

> On Thu, Apr 20, 2017 at 09:40:13AM -0400, Jared Mauch wrote:
> >
> > > On Apr 19, 2017, at 6:26 PM, Robert Raszuk <robert@raszuk.net>
wrote:
> > >
> > > Keyur,
> > >
> > > You can not set "insecure mode" before you reload the OS as
current OS does not have such knob. Unless you delay the deployment
across N releases and enforce sequenced upgrade.
> >
> > Infact, this is the recommendation that I’ve provided to vendors
that have expressed concerns.  There are many defaults that have not
always been displayed, but things like IOS have “show run all” so you
can see these.
> >
> > Something like the ‘bgp unsafe-ebgp-policy’ could be generated on
their respective implementations.  I didn’t think that GROW/IDR needed
to tell implementors this level of how to manage their release, so this
does seem somewhat out of scope, but a concern I can see needs to be
thought about.
>
> My own thoughts on this draft haven't really changed since my original
> comments at the microphone and in the halls after grow when it was
> introduced:
>
> - I'm supportive of this idea.  Safe by default is significantly
better than
>   unsafe by default.
> - Moving to this as a new behavior will be extremely painful.  The
word I've
>   used internally has been "excruciating".
>
> The tenor of this thread has really taken a disservice by conflating
the
> "this is a good idea" and the "we're going to make long-standing
> implementations non-conformant" via the document status bludgeon.  The
> latter isn't the fault of the document authors, but it's where I think
we
> took a wrong turn.

I see it as an operator bludgeon (good word that) to fix the problem
that some experience but without considering the impact thereof.

If you stop propagating routes, then you create black holes.  How many
black holes of what size will this change create?  How will those black
holes be detected?  What will be the damage to the Internet as a result?

I see no sign of this having been considered by those in favour of the
change and would expect this to be in the I-D before now.  Since the I-D
categorises this change as making BGP safer, I am asking how unsafe this
change is making BGP, at the same time.

Tom Petch

>
> My personal recommendation is, presuming Alvaro and the IESG can live
with
> the particular bending of the meaning of BCP, that we go for that
status.
>
> This thread has generated a lot of good ideas about how to mitigate
the pain
> of moving existing implementations to support this practice.  It'd be
good
> if we summarize those some place.  Perhaps that place should be in the
> RFC-to-be.
>
> That said, even with some of the techniques involved, implementors
will take
> considerable pain in making these changes.  Defaults do change.
Impacted
> operators get cranky with them and they cause outages.  Sane
developers do
> not tend to want to be the one tagged as responsible for the change
because
> the hate mail in the form of bug reports, regressions, broken tests
that comes
> back to them. :-)
>
> I'm not the most sane of our developers and I've been spending time
since
> this was originally proposed in grow to allow such a change in our
> implementation and mitigate the results.  The change is easy, the
mitigation
> is not.  And even I'm sensitive to how much pain this will be.  I dare
say
> my operator friends can't buy me quite enough beer to make it "easy".
>
> But it's worth continuing the conversation.
>
> -- Jeff
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>


From nobody Wed Apr 26 02:55:53 2017
Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C6061296B0 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 02:55:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6aeSQCJuWplo for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 02:55:50 -0700 (PDT)
Received: from mobil.space.net (mobil.space.net [195.30.115.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85D3112950E for <idr@ietf.org>; Wed, 26 Apr 2017 02:55:50 -0700 (PDT)
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id 73E5B60BDE for <idr@ietf.org>; Wed, 26 Apr 2017 11:55:48 +0200 (CEST)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id 2793C60B80; Wed, 26 Apr 2017 11:55:48 +0200 (CEST)
Received: by moebius4.space.net (Postfix, from userid 1007) id 178861FC9B; Wed, 26 Apr 2017 11:55:48 +0200 (CEST)
Date: Wed, 26 Apr 2017 11:55:48 +0200
From: Gert Doering <gert@space.net>
To: "t.petch" <ietfc@btconnect.com>
Cc: Jeffrey Haas <jhaas@pfrc.org>, Jared Mauch <jared@puck.nether.net>, idr@ietf.org
Message-ID: <20170426095547.GP25069@Space.Net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net>
X-NCC-RegID: de.space
User-Agent: Mutt/1.7.2 (2016-11-26)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/wEqYqNiB8AVWen96GfIcB-3QH6w>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 09:55:52 -0000

Hi,

On Wed, Apr 26, 2017 at 10:45:57AM +0100, t.petch wrote:
> If you stop propagating routes, then you create black holes.  How many
> black holes of what size will this change create?  How will those black
> holes be detected?  What will be the damage to the Internet as a result?

Black holes get usually noticed very quickly by those *responsible* for
them.

Routing leaks get noticed by the victims, usually not by those responsible.

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279


From nobody Wed Apr 26 04:28:58 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCFEA129B56 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 04:28:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iSVZas1tmPnH for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 04:28:52 -0700 (PDT)
Received: from mail-io0-x22f.google.com (mail-io0-x22f.google.com [IPv6:2607:f8b0:4001:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91403129B55 for <idr@ietf.org>; Wed, 26 Apr 2017 04:28:52 -0700 (PDT)
Received: by mail-io0-x22f.google.com with SMTP id a103so506038ioj.1 for <idr@ietf.org>; Wed, 26 Apr 2017 04:28:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=8Y8GzQSx1d7Qc9p3/rXloKLNeyM7AV3Eb2b25O9/Jaw=; b=R5gWPLUmS4s7CB7rgMMz16XANxVLjiLnjVCY7ETGlVGUNc+94YYFBAPT53hT7TJyki Q7FmSAsGgDk3k7i2C8T+yOzi2CTwpoHN0lfy+VrvDYRp6XPXVA1PWHHd8Shsej59BoSh rOC8H68dkEsXB0EFdUHdp1HspLE3k8DvI+htxO3Gz7G/Dk/SP/6c0XWpcm/F41qysnJh ew767O0Wr30EgfsllX6vI0B7CjWALYebpAYvR2EZitMw69sGKnIAoAZNs39tKwwAeDT+ aJJluWMa1bMs7gGeyoMzpaQJE3cw2nYC8IWRBuQ2MUBzdi/oE5gk2a2qleocVB83geND KfsQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=8Y8GzQSx1d7Qc9p3/rXloKLNeyM7AV3Eb2b25O9/Jaw=; b=gi1sK1CBkFddQXHXhRu0yDE6Fb1gLUeiKVJhNwnqwiQaLcX8uUNbEZu9R8j4yZJ7TX vYcLVMNma2jHgRqnj8xfFT8rWKbQgGBV+N8dhLHZW3kSC2wnM5xv4IMnWPvSw5UQOixr rUK4QKmAGpVIn1ROAMvo4FU/3vn9SAilJfDCY+zlEl7uDg5XgZZGMXjkvl4k39xE91oA 3K/oNZvHY8M/cQgr6QSjMABkhDvalhNotnlNogVl123FVbum2nL4gJ5GzE8mFsMBM5ZN o1Jqr1yhszurVfmwY3gkBSUKvVlJ30oxNZVU7Wj1dU2+3Q7gIau6F1I4RROaQKb7J/Fv 5WBQ==
X-Gm-Message-State: AN3rC/5aBzqpnL7nhSsNZdxkAoS8mgaliXhdOL385TBuDUlVQnoUFnNw XT4FG/Dqu/8sUyrIrt8ZnZcuHBv/aw==
X-Received: by 10.107.5.207 with SMTP id 198mr19506590iof.186.1493206131929; Wed, 26 Apr 2017 04:28:51 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.62.24 with HTTP; Wed, 26 Apr 2017 04:28:49 -0700 (PDT)
Received: by 10.79.62.24 with HTTP; Wed, 26 Apr 2017 04:28:49 -0700 (PDT)
In-Reply-To: <20170426095547.GP25069@Space.Net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net>
From: Robert Raszuk <robert@raszuk.net>
Date: Wed, 26 Apr 2017 13:28:49 +0200
X-Google-Sender-Auth: AJzdFTax-aV7hhtuCDuWG_u9J08
Message-ID: <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com>
To: Gert Doering <gert@space.net>
Cc: idr wg <idr@ietf.org>, "t.petch" <ietfc@btconnect.com>
Content-Type: multipart/alternative; boundary=001a113ebcb811f54c054e10259e
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/RDLnGh9aN4w6DW6Xmw9gFEEtvC8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 11:28:55 -0000

--001a113ebcb811f54c054e10259e
Content-Type: text/plain; charset=UTF-8

Hi Gert,

Unless the result is not lost of connectivity but lost of BGP path
redundancy from your AS.

It is quite often and in fact good idea to have dual vendors as your ASBRs.

So unless proper cli is automagically added the problem may only  surface
weeks and months after upgrade and in fact far from given ASBR when
external link from still operational ASBR breaks.

Document should discuss that as well and recommend such auto cli.

//R.


On Apr 26, 2017 5:55 AM, "Gert Doering" <gert@space.net> wrote:

Hi,

On Wed, Apr 26, 2017 at 10:45:57AM +0100, t.petch wrote:
> If you stop propagating routes, then you create black holes.  How many
> black holes of what size will this change create?  How will those black
> holes be detected?  What will be the damage to the Internet as a result?

Black holes get usually noticed very quickly by those *responsible* for
them.

Routing leaks get noticed by the victims, usually not by those responsible.

Gert Doering
        -- NetMaster
--
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279

_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr

--001a113ebcb811f54c054e10259e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Hi Gert,<div dir=3D"auto"><br></div><div dir=3D"auto">Unl=
ess the result is not lost of connectivity but lost of BGP path redundancy =
from your AS.</div><div dir=3D"auto"><br></div><div dir=3D"auto">It is quit=
e often and in fact good idea to have dual vendors as your ASBRs.</div><div=
 dir=3D"auto"><br></div><div dir=3D"auto">So unless proper cli is automagic=
ally added the problem may only =C2=A0surface weeks and months after upgrad=
e and in fact far from given ASBR when external link from still operational=
 ASBR breaks.</div><div dir=3D"auto"><br></div><div dir=3D"auto">Document s=
hould discuss that as well and recommend such auto cli.</div><div dir=3D"au=
to"><br></div><div dir=3D"auto">//R.</div><br><div class=3D"gmail_extra" di=
r=3D"auto"><br><div class=3D"gmail_quote">On Apr 26, 2017 5:55 AM, &quot;Ge=
rt Doering&quot; &lt;<a href=3D"mailto:gert@space.net">gert@space.net</a>&g=
t; wrote:<br type=3D"attribution"><blockquote class=3D"quote" style=3D"marg=
in:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<div class=3D"quoted-text"><br>
On Wed, Apr 26, 2017 at 10:45:57AM +0100, t.petch wrote:<br>
&gt; If you stop propagating routes, then you create black holes.=C2=A0 How=
 many<br>
&gt; black holes of what size will this change create?=C2=A0 How will those=
 black<br>
&gt; holes be detected?=C2=A0 What will be the damage to the Internet as a =
result?<br>
<br>
</div>Black holes get usually noticed very quickly by those *responsible* f=
or<br>
them.<br>
<br>
Routing leaks get noticed by the victims, usually not by those responsible.=
<br>
<div class=3D"quoted-text"><br>
Gert Doering<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 -- NetMaster<br>
--<br>
have you enabled IPv6 on something today...?<br>
<br>
SpaceNet AG=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 Vorstand: Sebastian v. Bomhard<br>
Joseph-Dollinger-Bogen 14=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Aufsichtsratsvo=
rs.: A. Grundner-Culemann<br>
D-80807 Muenchen=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0HRB: 136055 (AG Muenchen)<br>
Tel: <a href=3D"tel:%2B49%20%280%2989%2F32356-444" value=3D"+498932356444">=
+49 (0)89/32356-444</a>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0USt-IdNr.: =
DE813185279<br>
<br>
</div><div class=3D"elided-text">______________________________<wbr>_______=
__________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></blockquote></div><br></div></div>

--001a113ebcb811f54c054e10259e--


From nobody Wed Apr 26 04:39:57 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A736D129B5C for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 04:39:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7QAKfZqlZx-3 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 04:39:55 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [IPv6:2001:418:3f4::5]) by ietfa.amsl.com (Postfix) with ESMTP id 355AF129B55 for <idr@ietf.org>; Wed, 26 Apr 2017 04:39:55 -0700 (PDT)
Received: by puck.nether.net (Postfix, from userid 162) id E9B07540A6B; Wed, 26 Apr 2017 07:39:54 -0400 (EDT)
Date: Wed, 26 Apr 2017 07:39:54 -0400
From: Jared Mauch <jared@puck.Nether.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: Gert Doering <gert@space.net>, idr wg <idr@ietf.org>
Message-ID: <20170426113954.GA18318@puck.nether.net>
References: <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com>
User-Agent: Mutt/1.8.0 (2017-02-23)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Bpuq3yRP4FOO1c14GeWoncgPzqI>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 11:39:56 -0000

On Wed, Apr 26, 2017 at 01:28:49PM +0200, Robert Raszuk wrote:
> Hi Gert,
> 
> Unless the result is not lost of connectivity but lost of BGP path
> redundancy from your AS.
> 
> It is quite often and in fact good idea to have dual vendors as your ASBRs.
> 
> So unless proper cli is automagically added the problem may only  surface
> weeks and months after upgrade and in fact far from given ASBR when
> external link from still operational ASBR breaks.
> 
> Document should discuss that as well and recommend such auto cli.

	I've only cited CLI as an example of how others have addressed
the concerns raised in the thread.  For the purpose of IDR I don't
wish to mandate that part of a solution, but cite other viable
operational alternatives.

	Saying that a BGP operator needs some "auto-cli" to know how
to do BGP stuff tells me these people should not be trusted with BGP
outside their own labs.

	The pollution here is real, when I was at NTT we worked to
mitigate it via a variety of methods.

	We also had executive escalations that reached my desk where people
didn't do their simple homework of "we had two links, redundancy
didn't work, you took us down big bad $ISP".  

	Once I said "Hi, you are only sending 2/3 of your routes on
your backup session, do you want to fix that now while I observe" they
quickly settled down on their escalation issues.

	Things break, people need to learn how to debug the technologies
they are using.  We should be working to make it simple, yes but not
by foregoing an operator developing their own skills to identify problems
and using their supported vendor paths to triage it.

	Putting text in the draft that it must take the form of
"show bgp neighbor 2001:db8::1 " would favor one vendor over another
and perhaps open the draft up to IPR claims.  I do not welcome these
suggestions.

	The reality is many of the operational leaks we see today are
because of one or multiple failures in the routing ecosystem, be it
a network link, NLRI filter, AS_PATH filter or otherwise.

	- Jared

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


From nobody Wed Apr 26 04:40:16 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59D74129B59 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 04:40:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.302
X-Spam-Level: 
X-Spam-Status: No, score=-4.302 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nkmCkZMW8Wqd for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 04:40:06 -0700 (PDT)
Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68CA8129B65 for <idr@ietf.org>; Wed, 26 Apr 2017 04:40:03 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 42150A4; Wed, 26 Apr 2017 13:40:01 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493206801; bh=s0MAZ6q1IHYNNC5L7MVSDULAwPqRbCD5FfDECVaqmSI=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=xSw2YN5liQEIo0ncSGnCmdqMtkJIRB5WZUMBa9CazwVUPB9i346VWp/KzTTL6VHNj Lgw3AhmfNRgMCuWdiYAZR0cQgTkqbx3o1VDJ/Ew/WdfMQR0nx3mIWkz/Bh4BQYeGK7 FY9/5mK7EVisb+8p9f4ZG/XiVZl3/1QaEmDcdDrc=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 3F818A3; Wed, 26 Apr 2017 13:40:01 +0200 (CEST)
Date: Wed, 26 Apr 2017 13:40:01 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Robert Raszuk <robert@raszuk.net>
cc: Gert Doering <gert@space.net>, idr wg <idr@ietf.org>
In-Reply-To: <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com>
Message-ID: <alpine.DEB.2.02.1704261333080.5591@uplift.swm.pp.se>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/zl-MWIEGDTTv8Kft1tliSV2b1M8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 11:40:15 -0000

On Wed, 26 Apr 2017, Robert Raszuk wrote:

> Hi Gert,
>
> Unless the result is not lost of connectivity but lost of BGP path
> redundancy from your AS.
>
> It is quite often and in fact good idea to have dual vendors as your ASBRs.
>
> So unless proper cli is automagically added the problem may only  surface
> weeks and months after upgrade and in fact far from given ASBR when
> external link from still operational ASBR breaks.
>
> Document should discuss that as well and recommend such auto cli.

Let me just understand the reasoning here:

Operator today deploys ASBR without neighbor policy. It sends all routes 
to peer/transit and accepts all routes. This is not noticed by other end 
maximum-prefix and they have filtering in place to drop the "erraneous 
prefixes", so everything is working fine.

Now the router is rebooted with new version of software, that is 
default-deny, and vendor didn't provide CLI parser to migrate config to 
assure consistent behaviour in the new version. After the reboot, all 
routes are denied in/out. Operator doesn't check this now unused link, so 
this state is prolonged for an extended amount of time, all traffic is 
traversing other path, only. Still nobody notices.

Now other link goes down for some reason. Now these ASNs are isolated from 
each other, because there is no backup over transit for some reason, or 
transit becomes congested.

This is the scenario you want analyzed? Or is the scenario you want to 
protect against more non-Internet related, no DFZ amount of routes etc?

Because I find the behaviour I describe above as implausible for any 
decently professionally run network.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Wed Apr 26 04:41:05 2017
Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8929B129B59 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 04:41:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yaO4TAQDNFde for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 04:41:01 -0700 (PDT)
Received: from mobil.space.net (mobil.space.net [IPv6:2001:608:2:81::67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92312129B55 for <idr@ietf.org>; Wed, 26 Apr 2017 04:41:00 -0700 (PDT)
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id 5B47B60BC7 for <idr@ietf.org>; Wed, 26 Apr 2017 13:40:58 +0200 (CEST)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id 1C8A860A24; Wed, 26 Apr 2017 13:40:58 +0200 (CEST)
Received: by moebius4.space.net (Postfix, from userid 1007) id 0E9C7238B6; Wed, 26 Apr 2017 13:40:58 +0200 (CEST)
Date: Wed, 26 Apr 2017 13:40:57 +0200
From: Gert Doering <gert@space.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: Gert Doering <gert@space.net>, idr wg <idr@ietf.org>, "t.petch" <ietfc@btconnect.com>
Message-ID: <20170426114057.GR25069@Space.Net>
References: <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="5YKSb2j9DSNMgxAt"
Content-Disposition: inline
In-Reply-To: <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com>
X-NCC-RegID: de.space
User-Agent: Mutt/1.7.2 (2016-11-26)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/zNExm2XRrjf2r9p4yopHmObOaTI>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 11:41:04 -0000

--5YKSb2j9DSNMgxAt
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

On Wed, Apr 26, 2017 at 01:28:49PM +0200, Robert Raszuk wrote:
> Unless the result is not lost of connectivity but lost of BGP path
> redundancy from your AS.
>=20
> It is quite often and in fact good idea to have dual vendors as your ASBR=
s.
>=20
> So unless proper cli is automagically added the problem may only  surface
> weeks and months after upgrade and in fact far from given ASBR when
> external link from still operational ASBR breaks.

This still hurts those that have no policies configured, which is
how it should be.

"Failing open" hurts totally unrelated networks, which is not what it
should be.

Not hard, isn't it?

Gert Doering
        -- NetMaster
--=20
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279

--5YKSb2j9DSNMgxAt
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=eMMr
-----END PGP SIGNATURE-----

--5YKSb2j9DSNMgxAt--


From nobody Wed Apr 26 05:00:54 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B574F129B5D for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 05:00:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.699
X-Spam-Level: 
X-Spam-Status: No, score=-1.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dlb9NkFo_Ssr for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 05:00:47 -0700 (PDT)
Received: from mail-it0-x229.google.com (mail-it0-x229.google.com [IPv6:2607:f8b0:4001:c0b::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DBF8129B6D for <idr@ietf.org>; Wed, 26 Apr 2017 05:00:47 -0700 (PDT)
Received: by mail-it0-x229.google.com with SMTP id 70so36955153ita.0 for <idr@ietf.org>; Wed, 26 Apr 2017 05:00:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=PCy0ZvVcVdms1uukxv8o1hP/Q+Qf7wO0OhYy7MePzyw=; b=F9+uBljBMl0oudkPJHqga4CFhX8tQce5Qv515FkmoZkplFbdA28J1H5kupSg7Oy9h0 YQ1vEipUshOES2ckT44rRWEqWPcY3/Y53/MVkJorUAIvTorcFM9Nre6UY6cEaI5RAmTe 9J094+6Yh16ilLLuPwE4W+jvxffBmuMLSlGqD5cYGyp61adINqhLHSPymMECfD4SpCoz tUhSFGuI+WF4xYekWDdaPQcvzhWbfnnoEt3bgLIWYgz+IlCHq0kjSf+H7WMetR2ljxp1 7HoPlmaEUXlTsoR8R05FFVFux953HVusqui/ebRH1myKmAeZdAUU7bY6n4hhLFr7/yHc eMoQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=PCy0ZvVcVdms1uukxv8o1hP/Q+Qf7wO0OhYy7MePzyw=; b=bUzLylxjRP5q2N3qMOeCiUVhzu9hgNIA0LY2AbRaGkpgzPUx0zHyyVdQqAoPJjCYT5 e62mka7uPe79EIKyHxH+ikDUN3zmuw0wSFybPw7MJP0vqHYbqElnWGEuSlqbo+MWql51 yuIISKFNb1a8bbQCKUijmpTBM3nJqAQpDHmpo0ntcL0bU/QkqpSQASuLDRYRqUGFFfRr gOA4t7ypTyg3LUNEar6bYGvTNqjeAu2jqlw1czKYtSmuWPwlI9i6w2+gPk2GRWmwbnut h2+2JFTm3b51r2rX05WTICkG3bo01wWnSikN4CygyGjfc/bSrOEAv1mwe05wTjIBtYcy 6clw==
X-Gm-Message-State: AN3rC/5xMy5f9ZyGuOHtvKRmXFPVu6z/FyiXBb5LxGaSbWbK259uyCqO gRpaC5/IgNRiZk54e0qu1699GHcHHA==
X-Received: by 10.36.94.138 with SMTP id h132mr10673229itb.104.1493208046585;  Wed, 26 Apr 2017 05:00:46 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.62.24 with HTTP; Wed, 26 Apr 2017 05:00:45 -0700 (PDT)
Received: by 10.79.62.24 with HTTP; Wed, 26 Apr 2017 05:00:45 -0700 (PDT)
In-Reply-To: <20170426113954.GA18318@puck.nether.net>
References: <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net>
From: Robert Raszuk <robert@raszuk.net>
Date: Wed, 26 Apr 2017 14:00:45 +0200
X-Google-Sender-Auth: V06QXOUrnrH6F1_rjOzs-3ijH0A
Message-ID: <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com>
To: Jared Mauch <jared@puck.nether.net>
Cc: Gert Doering <gert@space.net>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114252723151d6054e1097ba
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/to0t05bHGipu1EvYqweA3s38rpY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 12:00:54 -0000

--001a114252723151d6054e1097ba
Content-Type: text/plain; charset=UTF-8

Hi Jared,

So let's talk examples ... for my own education.

If you are provider and have 1000 multihomed customers with v4/v6 PI space.

Imagine you want to apply granular policy better then permit all on your
inbound.

How practically (considering that your customers get address block all the
time) you wilk track and adjust policy o  a daily basis ?

You need offline machinery when unless they log in and inform you their
routes will be denied. Moreover your backend must be able to check if
prefix does not belong to someone else .... Oh wait what if someone else
just sold it to them ?

With PA blocks policy works well ... with PI I think not so.

And if you are customer and have 4 prefixes in BGP table thing are fine. If
you by accident become transit and advertise fulm table around I think we
can do better in BGP to protect from it then mandate policy.

Cheers
R.

On Apr 26, 2017 7:39 AM, "Jared Mauch" <jared@puck.nether.net> wrote:

> On Wed, Apr 26, 2017 at 01:28:49PM +0200, Robert Raszuk wrote:
> > Hi Gert,
> >
> > Unless the result is not lost of connectivity but lost of BGP path
> > redundancy from your AS.
> >
> > It is quite often and in fact good idea to have dual vendors as your
> ASBRs.
> >
> > So unless proper cli is automagically added the problem may only  surface
> > weeks and months after upgrade and in fact far from given ASBR when
> > external link from still operational ASBR breaks.
> >
> > Document should discuss that as well and recommend such auto cli.
>
>         I've only cited CLI as an example of how others have addressed
> the concerns raised in the thread.  For the purpose of IDR I don't
> wish to mandate that part of a solution, but cite other viable
> operational alternatives.
>
>         Saying that a BGP operator needs some "auto-cli" to know how
> to do BGP stuff tells me these people should not be trusted with BGP
> outside their own labs.
>
>         The pollution here is real, when I was at NTT we worked to
> mitigate it via a variety of methods.
>
>         We also had executive escalations that reached my desk where people
> didn't do their simple homework of "we had two links, redundancy
> didn't work, you took us down big bad $ISP".
>
>         Once I said "Hi, you are only sending 2/3 of your routes on
> your backup session, do you want to fix that now while I observe" they
> quickly settled down on their escalation issues.
>
>         Things break, people need to learn how to debug the technologies
> they are using.  We should be working to make it simple, yes but not
> by foregoing an operator developing their own skills to identify problems
> and using their supported vendor paths to triage it.
>
>         Putting text in the draft that it must take the form of
> "show bgp neighbor 2001:db8::1 " would favor one vendor over another
> and perhaps open the draft up to IPR claims.  I do not welcome these
> suggestions.
>
>         The reality is many of the operational leaks we see today are
> because of one or multiple failures in the routing ecosystem, be it
> a network link, NLRI filter, AS_PATH filter or otherwise.
>
>         - Jared
>
> --
> Jared Mauch  | pgp key available via finger from jared@puck.nether.net
> clue++;      | http://puck.nether.net/~jared/  My statements are only
> mine.
>

--001a114252723151d6054e1097ba
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Hi Jared,<div dir=3D"auto"><br></div><div dir=3D"auto">So=
 let&#39;s talk examples ... for my own education.</div><div dir=3D"auto"><=
br></div><div dir=3D"auto">If you are provider and have 1000 multihomed cus=
tomers with v4/v6 PI space.</div><div dir=3D"auto"><br></div><div dir=3D"au=
to">Imagine you want to apply granular policy better then permit all on you=
r inbound.</div><div dir=3D"auto"><br></div><div dir=3D"auto">How practical=
ly (considering that your customers get address block all the time) you wil=
k track and adjust policy o =C2=A0a daily basis ?=C2=A0</div><div dir=3D"au=
to"><br></div><div dir=3D"auto">You need offline machinery when unless they=
 log in and inform you their routes will be denied. Moreover your backend m=
ust be able to check if prefix does not belong to someone else .... Oh wait=
 what if someone else just sold it to them ?</div><div dir=3D"auto"><br></d=
iv><div dir=3D"auto">With PA blocks policy works well ... with PI I think n=
ot so.</div><div dir=3D"auto"><br></div><div dir=3D"auto">And if you are cu=
stomer and have 4 prefixes in BGP table thing are fine. If you by accident =
become transit and advertise fulm table around I think we can do better in =
BGP to protect from it then mandate policy.</div><div dir=3D"auto"><br></di=
v><div dir=3D"auto">Cheers</div><div dir=3D"auto">R.</div></div><div class=
=3D"gmail_extra"><br><div class=3D"gmail_quote">On Apr 26, 2017 7:39 AM, &q=
uot;Jared Mauch&quot; &lt;<a href=3D"mailto:jared@puck.nether.net">jared@pu=
ck.nether.net</a>&gt; wrote:<br type=3D"attribution"><blockquote class=3D"g=
mail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-l=
eft:1ex">On Wed, Apr 26, 2017 at 01:28:49PM +0200, Robert Raszuk wrote:<br>
&gt; Hi Gert,<br>
&gt;<br>
&gt; Unless the result is not lost of connectivity but lost of BGP path<br>
&gt; redundancy from your AS.<br>
&gt;<br>
&gt; It is quite often and in fact good idea to have dual vendors as your A=
SBRs.<br>
&gt;<br>
&gt; So unless proper cli is automagically added the problem may only=C2=A0=
 surface<br>
&gt; weeks and months after upgrade and in fact far from given ASBR when<br=
>
&gt; external link from still operational ASBR breaks.<br>
&gt;<br>
&gt; Document should discuss that as well and recommend such auto cli.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 I&#39;ve only cited CLI as an example of how ot=
hers have addressed<br>
the concerns raised in the thread.=C2=A0 For the purpose of IDR I don&#39;t=
<br>
wish to mandate that part of a solution, but cite other viable<br>
operational alternatives.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Saying that a BGP operator needs some &quot;aut=
o-cli&quot; to know how<br>
to do BGP stuff tells me these people should not be trusted with BGP<br>
outside their own labs.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 The pollution here is real, when I was at NTT w=
e worked to<br>
mitigate it via a variety of methods.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 We also had executive escalations that reached =
my desk where people<br>
didn&#39;t do their simple homework of &quot;we had two links, redundancy<b=
r>
didn&#39;t work, you took us down big bad $ISP&quot;.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Once I said &quot;Hi, you are only sending 2/3 =
of your routes on<br>
your backup session, do you want to fix that now while I observe&quot; they=
<br>
quickly settled down on their escalation issues.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Things break, people need to learn how to debug=
 the technologies<br>
they are using.=C2=A0 We should be working to make it simple, yes but not<b=
r>
by foregoing an operator developing their own skills to identify problems<b=
r>
and using their supported vendor paths to triage it.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Putting text in the draft that it must take the=
 form of<br>
&quot;show bgp neighbor 2001:db8::1 &quot; would favor one vendor over anot=
her<br>
and perhaps open the draft up to IPR claims.=C2=A0 I do not welcome these<b=
r>
suggestions.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 The reality is many of the operational leaks we=
 see today are<br>
because of one or multiple failures in the routing ecosystem, be it<br>
a network link, NLRI filter, AS_PATH filter or otherwise.<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 - Jared<br>
<br>
--<br>
Jared Mauch=C2=A0 | pgp key available via finger from <a href=3D"mailto:jar=
ed@puck.nether.net">jared@puck.nether.net</a><br>
clue++;=C2=A0 =C2=A0 =C2=A0 | <a href=3D"http://puck.nether.net/~jared/" re=
l=3D"noreferrer" target=3D"_blank">http://puck.nether.net/~jared/</a>=C2=A0=
 My statements are only mine.<br>
</blockquote></div></div>

--001a114252723151d6054e1097ba--


From nobody Wed Apr 26 05:26:17 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 636031296CF for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 05:26:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ODS4ScQXeCas for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 05:26:13 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id 704D61276AF for <idr@ietf.org>; Wed, 26 Apr 2017 05:26:13 -0700 (PDT)
Received: by puck.nether.net (Postfix, from userid 162) id 2DE32540A66; Wed, 26 Apr 2017 08:26:13 -0400 (EDT)
Date: Wed, 26 Apr 2017 08:26:13 -0400
From: Jared Mauch <jared@puck.Nether.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: Jared Mauch <jared@puck.nether.net>, Gert Doering <gert@space.net>, idr wg <idr@ietf.org>
Message-ID: <20170426122613.GB18318@puck.nether.net>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com>
User-Agent: Mutt/1.8.0 (2017-02-23)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/xlLsbqnanVNSwh7R9B_n_aR7s24>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 12:26:15 -0000

On Wed, Apr 26, 2017 at 02:00:45PM +0200, Robert Raszuk wrote:
> Hi Jared,
> 
> So let's talk examples ... for my own education.
> 
> If you are provider and have 1000 multihomed customers with v4/v6 PI space.
> 
> Imagine you want to apply granular policy better then permit all on your
> inbound.
> 
> How practically (considering that your customers get address block all the
> time) you wilk track and adjust policy o  a daily basis ?

	Proper machinery and automation.

> You need offline machinery when unless they log in and inform you their
> routes will be denied. Moreover your backend must be able to check if
> prefix does not belong to someone else .... Oh wait what if someone else
> just sold it to them ?

	Sounds like a great market.  I've seen vendors attempt and
fail at this though.  They also assume vendor lock-in, provider lock-in
and other value additive things.  This is why people build their
own automation and abstraction layers.  This is what any provider with
many network elements to manage is doing today.

	There are still those people who do what I call cut+paste SDN
where they modify existing policy out of a device, from notepad.exe or
their vi buffer.  Emacs users have their own operating system to interact
with first.

> With PA blocks policy works well ... with PI I think not so.

	Works fine if you architect it correctly.

> And if you are customer and have 4 prefixes in BGP table thing are fine. If
> you by accident become transit and advertise fulm table around I think we
> can do better in BGP to protect from it then mandate policy.

	Actually, providers mandate many things on their customers.
There's many other ways to address the broken behaviors, we have used
prefix-lists, as_path filters, max-prefix in an attempt to stop
the leakage.  It's still only mitigated most of the worst events and
covers up people who are behaving as an insecure BGP speaker.  It's some
mitigation, but the desire of operators is to do better.

	Like I said, at least one vendor has commented in private they
are working on fixing their behavior of their implementations.  This is a
good thing I am hoping will be visible in the measurements of routing leaks
in the coming years.

	- Jared
	
> On Apr 26, 2017 7:39 AM, "Jared Mauch" <jared@puck.nether.net> wrote:
> 
> > On Wed, Apr 26, 2017 at 01:28:49PM +0200, Robert Raszuk wrote:
> > > Hi Gert,
> > >
> > > Unless the result is not lost of connectivity but lost of BGP path
> > > redundancy from your AS.
> > >
> > > It is quite often and in fact good idea to have dual vendors as your
> > ASBRs.
> > >
> > > So unless proper cli is automagically added the problem may only  surface
> > > weeks and months after upgrade and in fact far from given ASBR when
> > > external link from still operational ASBR breaks.
> > >
> > > Document should discuss that as well and recommend such auto cli.
> >
> >         I've only cited CLI as an example of how others have addressed
> > the concerns raised in the thread.  For the purpose of IDR I don't
> > wish to mandate that part of a solution, but cite other viable
> > operational alternatives.
> >
> >         Saying that a BGP operator needs some "auto-cli" to know how
> > to do BGP stuff tells me these people should not be trusted with BGP
> > outside their own labs.
> >
> >         The pollution here is real, when I was at NTT we worked to
> > mitigate it via a variety of methods.
> >
> >         We also had executive escalations that reached my desk where people
> > didn't do their simple homework of "we had two links, redundancy
> > didn't work, you took us down big bad $ISP".
> >
> >         Once I said "Hi, you are only sending 2/3 of your routes on
> > your backup session, do you want to fix that now while I observe" they
> > quickly settled down on their escalation issues.
> >
> >         Things break, people need to learn how to debug the technologies
> > they are using.  We should be working to make it simple, yes but not
> > by foregoing an operator developing their own skills to identify problems
> > and using their supported vendor paths to triage it.
> >
> >         Putting text in the draft that it must take the form of
> > "show bgp neighbor 2001:db8::1 " would favor one vendor over another
> > and perhaps open the draft up to IPR claims.  I do not welcome these
> > suggestions.
> >
> >         The reality is many of the operational leaks we see today are
> > because of one or multiple failures in the routing ecosystem, be it
> > a network link, NLRI filter, AS_PATH filter or otherwise.
> >
> >         - Jared
> >
> > --
> > Jared Mauch  | pgp key available via finger from jared@puck.nether.net
> > clue++;      | http://puck.nether.net/~jared/  My statements are only
> > mine.
> >

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


From nobody Wed Apr 26 05:54:32 2017
Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CDA0129B7F for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 05:54:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QXZ0WVBDc9jE for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 05:54:29 -0700 (PDT)
Received: from mobil.space.net (mobil.space.net [195.30.115.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEA68129B8C for <idr@ietf.org>; Wed, 26 Apr 2017 05:54:22 -0700 (PDT)
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id 487D760B93 for <idr@ietf.org>; Wed, 26 Apr 2017 14:54:18 +0200 (CEST)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id 15DAC602C8; Wed, 26 Apr 2017 14:54:18 +0200 (CEST)
Received: by moebius4.space.net (Postfix, from userid 1007) id 08077311A5; Wed, 26 Apr 2017 14:54:18 +0200 (CEST)
Date: Wed, 26 Apr 2017 14:54:17 +0200
From: Gert Doering <gert@space.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: Jared Mauch <jared@puck.nether.net>, Gert Doering <gert@space.net>, idr wg <idr@ietf.org>
Message-ID: <20170426125417.GU25069@Space.Net>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Av0raCf5Q1JxibrL"
Content-Disposition: inline
In-Reply-To: <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com>
X-NCC-RegID: de.space
User-Agent: Mutt/1.7.2 (2016-11-26)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/ksSvF_2UdBdUCIa5ZggukFYjDN8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 12:54:31 -0000

--Av0raCf5Q1JxibrL
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

On Wed, Apr 26, 2017 at 02:00:45PM +0200, Robert Raszuk wrote:
> So let's talk examples ... for my own education.
>=20
> If you are provider and have 1000 multihomed customers with v4/v6 PI spac=
e.
>=20
> Imagine you want to apply granular policy better then permit all on your
> inbound.
>=20
> How practically (considering that your customers get address block all the
> time) you wilk track and adjust policy o  a daily basis ?
>=20
> You need offline machinery when unless they log in and inform you their
> routes will be denied. Moreover your backend must be able to check if
> prefix does not belong to someone else .... Oh wait what if someone else
> just sold it to them ?
>=20
> With PA blocks policy works well ... with PI I think not so.

We do IRRDB lookups twice a day and build prefix- and as-path filters from=
=20
there.  Filters get uploaded to routers if something changes (with some
safety net for "the tool hickupped, and the result is empty").

As do all my upstreams, as we're not buying from networks that cannot
be bothered to do such basic network hygiene.

I consider this industry best practice, even if some large transit ISPs
consider this "too much work" (which is the other end of the BGP leak
problem).

> And if you are customer and have 4 prefixes in BGP table thing are fine. =
If
> you by accident become transit and advertise fulm table around I think we
> can do better in BGP to protect from it then mandate policy.

Evidence shows that, as of today, we can not.

"Shooting" would sound like an alternative and very american way to solve=
=20
the issue, but I'm sure that many IETF members would frown on this.

Gert Doering
        -- NetMaster
--=20
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279

--Av0raCf5Q1JxibrL
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=QFP7
-----END PGP SIGNATURE-----

--Av0raCf5Q1JxibrL--


From nobody Wed Apr 26 06:56:32 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5841E129BC7 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 06:56:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ti9R80cAk_vi for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 06:56:28 -0700 (PDT)
Received: from mail-io0-x22c.google.com (mail-io0-x22c.google.com [IPv6:2607:f8b0:4001:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A8DC129BBE for <idr@ietf.org>; Wed, 26 Apr 2017 06:56:28 -0700 (PDT)
Received: by mail-io0-x22c.google.com with SMTP id r16so3026460ioi.2 for <idr@ietf.org>; Wed, 26 Apr 2017 06:56:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=zhTWtY8lMz6RAxcgI4Gy7p+x4RNPQkOb78B74U/VrNo=; b=mbdOv+Uea/GmO33g88oXL7uFyTctamIpA6wtHQ1AUTB225aL+x+gmg2yGBH5WDHKKi +72EBvaGZDgJip8U24U3963AmhNDNEMIEeCmEvi1rmtVzzhomP+FhZ1pgRMmjbM65602 jUKW8vH/W77XZflMJJbEOD9TROaoT3vAjMr1GoV9u9UyhJgQr1X8iv8C7d/S1h8I7QoJ l9BDN3Yf3eTSoSIfBvsZ3xg3ykvDyaDDAX0DghHIYoMLRTzhoAb10ez2B4eXZftk7HjY a7HUzvtwVTgXBEQF5/1OET+/q21+YHWVQaPp6DF48BZ/QVJ04DWg4WtOU9geszu3oDB6 huvA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=zhTWtY8lMz6RAxcgI4Gy7p+x4RNPQkOb78B74U/VrNo=; b=pwS7Ez6g4Zh11Lu3u0G7KDdDKMs8GEvXR2n6xleRMqCMs7mmLblA3vy4KOglCzQ0fP 69BE7XF+7RPkHdbA/72ymPxVUY7ON1YfPIs9Jsk/D3tc80PMV5ScfDJLDDUw8YwprHcV wO7OzV0HTN8L+cKS3hWD++cMM/5clno4ZKAIAnksnRaAuhu47uECUAUYzfCKFYCcnXLh LJXK4r784UM73KPukC/ZLwlU7AY9rx/h6jpCn3Ptg/OLm+fiWaK8p8isD4E11urxz7CP h7RKbn5shm6OL+N9wJw2LWr+pLVVsZQlV8QRo0KecxPZtlatsmFmua3Xzpy+TWw+Tcik H1Kg==
X-Gm-Message-State: AN3rC/42JPtySoNEX9J+EjQ4bH++pirjfCppyYfyRpbuuVLYU4KEo8aH hPFLW9UDzbFtc8GXjfgIfNy/iwzItw==
X-Received: by 10.107.205.132 with SMTP id d126mr22926457iog.155.1493214986513;  Wed, 26 Apr 2017 06:56:26 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.62.24 with HTTP; Wed, 26 Apr 2017 06:56:25 -0700 (PDT)
In-Reply-To: <20170426125417.GU25069@Space.Net>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net>
From: Robert Raszuk <robert@raszuk.net>
Date: Wed, 26 Apr 2017 15:56:25 +0200
X-Google-Sender-Auth: VLlGIG987lBkOQWauq5Jd_niq2I
Message-ID: <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com>
To: Gert Doering <gert@space.net>
Cc: Jared Mauch <jared@puck.nether.net>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=94eb2c188718d86476054e1234a8
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/lmfxRoU-92z68GkSVwclWBQyVYE>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 13:56:30 -0000

--94eb2c188718d86476054e1234a8
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

>
> > And if you are customer and have 4 prefixes in BGP table thing are fine=
.
> If
> > you by accident become transit and advertise fulm table around I think =
we
> > can do better in BGP to protect from it then mandate policy.
>
> Evidence shows that, as of today, we can not.
>

=E2=80=8BHave anyone actually tried ?=E2=80=8B

The BGP origin validation was at least one attempt.

The other one could be as simple as *"ebgp policy auto"* where based in the
IRRDB and your peer's AS router can build a policy automagically using say
BGPQ3.

http://snar.spb.ru/prog/bgpq3/

Otherwise while Jared, you and perhaps most folks on this list already have
automated ways to build nice and accurate policies I suspect they are those
which do not. And those would either put "allow all" or will now start
looking for hints "what do I put in".

And if the end result is what you are doing twice a day why router's can't
do it themselves assuming IRRDB or any other src of truth is accurate ?

Best,
R.

--94eb2c188718d86476054e1234a8
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left=
:1px solid rgb(204,204,204);padding-left:1ex"><span class=3D"gmail-">&gt; A=
nd if you are customer and have 4 prefixes in BGP table thing are fine. If<=
br>
&gt; you by accident become transit and advertise fulm table around I think=
 we<br>
&gt; can do better in BGP to protect from it then mandate policy.<br>
<br>
</span>Evidence shows that, as of today, we can not.<br></blockquote><div><=
br></div><div><div class=3D"gmail_default" style=3D"font-family:arial,helve=
tica,sans-serif;font-size:small">=E2=80=8BHave anyone actually tried ?=E2=
=80=8B</div><div class=3D"gmail_default" style=3D"font-family:arial,helveti=
ca,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small">The BGP origin =
validation was at least one attempt.</div><div class=3D"gmail_default" styl=
e=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div=
 class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fo=
nt-size:small">The other one could be as simple as <b>&quot;ebgp policy aut=
o&quot;</b> where based in the IRRDB and your peer&#39;s AS router can buil=
d a policy automagically using say BGPQ3.=C2=A0</div><div class=3D"gmail_de=
fault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br=
></div><div class=3D"gmail_default"><font face=3D"arial, helvetica, sans-se=
rif"><a href=3D"http://snar.spb.ru/prog/bgpq3/">http://snar.spb.ru/prog/bgp=
q3/</a></font><br></div><div class=3D"gmail_default"><font face=3D"arial, h=
elvetica, sans-serif"><br></font></div><div class=3D"gmail_default">Otherwi=
se while Jared, you and perhaps most folks on this list already have automa=
ted ways to build nice and accurate policies I suspect they are those which=
 do not. And those would either put &quot;allow all&quot; or will now start=
 looking for hints &quot;what do I put in&quot;.=C2=A0</div></div><div clas=
s=3D"gmail_default"><br></div><div class=3D"gmail_default">And if the end r=
esult is what you are doing twice a day why router&#39;s can&#39;t do it th=
emselves assuming IRRDB or any other src of truth is accurate ?</div><div c=
lass=3D"gmail_default"><br></div><div class=3D"gmail_default">Best,</div><d=
iv class=3D"gmail_default">R.</div></div></div></div>

--94eb2c188718d86476054e1234a8--


From nobody Wed Apr 26 07:02:11 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01EE7129C19 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 07:02:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6iSuXbxQGGKb for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 07:02:05 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id D7EB0129C31 for <idr@ietf.org>; Wed, 26 Apr 2017 07:01:45 -0700 (PDT)
Received: by puck.nether.net (Postfix, from userid 162) id 9DE77540AA7; Wed, 26 Apr 2017 10:01:45 -0400 (EDT)
Date: Wed, 26 Apr 2017 10:01:45 -0400
From: Jared Mauch <jared@puck.Nether.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: Gert Doering <gert@space.net>, Jared Mauch <jared@puck.nether.net>, idr wg <idr@ietf.org>
Message-ID: <20170426140145.GA28909@puck.nether.net>
References: <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com>
User-Agent: Mutt/1.8.0 (2017-02-23)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/yhrwp6Lb580unM2B-YKUdFAJWQ0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 14:02:10 -0000

On Wed, Apr 26, 2017 at 03:56:25PM +0200, Robert Raszuk wrote:
> >
> > > And if you are customer and have 4 prefixes in BGP table thing are fine.
> > If
> > > you by accident become transit and advertise fulm table around I think we
> > > can do better in BGP to protect from it then mandate policy.
> >
> > Evidence shows that, as of today, we can not.
> >
> 
> ​Have anyone actually tried ?​

	Yes.

	Please see the past decade of history.

> The BGP origin validation was at least one attempt.
> 
> The other one could be as simple as *"ebgp policy auto"* where based in the
> IRRDB and your peer's AS router can build a policy automagically using say
> BGPQ3.
> 
> http://snar.spb.ru/prog/bgpq3/
> 
> Otherwise while Jared, you and perhaps most folks on this list already have
> automated ways to build nice and accurate policies I suspect they are those
> which do not. And those would either put "allow all" or will now start
> looking for hints "what do I put in".

> And if the end result is what you are doing twice a day why router's can't
> do it themselves assuming IRRDB or any other src of truth is accurate ?

	You use the best available data you have as a network operator.

	- Jared

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


From nobody Wed Apr 26 07:14:38 2017
Return-Path: <christopher.morrow@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54BE312EAB3 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 07:14:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jX8bC34OluNp for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 07:14:27 -0700 (PDT)
Received: from mail-qt0-x236.google.com (mail-qt0-x236.google.com [IPv6:2607:f8b0:400d:c0d::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D07CB12EB1B for <idr@ietf.org>; Wed, 26 Apr 2017 07:08:46 -0700 (PDT)
Received: by mail-qt0-x236.google.com with SMTP id m36so1443626qtb.0 for <idr@ietf.org>; Wed, 26 Apr 2017 07:08:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=2HjwTTZrbhWxDHPs1AKMp/I3zGFHy2TRdzLXuYep8tY=; b=cRCi4WCGZACSCA6l0HH0YuTCf3ITHJTaqQ87G5xtGJMDSg3qvVkWefvqV0fRAEISE3 r4Ntcn8LuV3MM+g8iDQokA4xBKituQpi5CqwJGUW/WSO9q5VaYsisgeDFIkjVM/8cRMj ZxyqdbnCEJ4L9HiuIf7ODUeAPv9K5ip8nWbt3GfEKkvxsg76ZS1LvjA4ds7UDCJxDG3V c76wmPGjDUN3EeWNuChduCE+2CaUYgjYzICdF0cqnwSqv5VABeRf725RiFjHTb+nnKRm Ta35ETkJP9zgW8P7YBg8NF7NNe8ft/CJgNbrwjL/Vdpvg5I3EQaF3Mk8T0H38cBs3Dkx +pAg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=2HjwTTZrbhWxDHPs1AKMp/I3zGFHy2TRdzLXuYep8tY=; b=mnhRNJpD1Mj/Hjp+1MtDvNa0hu27mR4QzRPFgK3ZPsTujcUIsmFWwwCFjOEPV0hoec O/PLRIscGZqd05pXwxCl+AzxxZZh4nN9mc2gb6bzwu+iQ51mzsVrO2MeyrDN480FagHO ebR/cTkrMTAFcMp6hRdjXjPb1rvpUr8qASQsVDhgQYOCTWS7B5cPH+fT3/TkMrcyy3Nf TjzNyRYKT0jfI+2GR5A9pjWT/5fjTz91NhS3n9TiVJltqxOTe0ffbWSkvRmNegbJFuWC m072BFYmyaOX5LV7MRVY4jdT3dHnCzrvaoGkH02XJHjGOP58p9KcBP0cpV+tmBH9zmY8 hbQA==
X-Gm-Message-State: AN3rC/4REZEKZ2c8JPGJV0SvpS6/fD7QipTowN51Zm9BPxDKjtsPJO4Y MquprMyYtqVF4qCQ00CT68J2uZqZYw==
X-Received: by 10.237.59.150 with SMTP id r22mr35251921qte.100.1493215725939;  Wed, 26 Apr 2017 07:08:45 -0700 (PDT)
MIME-Version: 1.0
Sender: christopher.morrow@gmail.com
Received: by 10.140.93.5 with HTTP; Wed, 26 Apr 2017 07:08:44 -0700 (PDT)
In-Reply-To: <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com>
From: Christopher Morrow <morrowc.lists@gmail.com>
Date: Wed, 26 Apr 2017 10:08:44 -0400
X-Google-Sender-Auth: tsvsTJnUG5o5JJY9c6ORLahhia4
Message-ID: <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com>
To: Robert Raszuk <robert@raszuk.net>
Cc: Gert Doering <gert@space.net>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114dc346eb06b8054e1260ac
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/dLuhU6ZLLsauk_5xAJQ4boWMjQE>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 14:14:33 -0000

--001a114dc346eb06b8054e1260ac
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Wed, Apr 26, 2017 at 9:56 AM, Robert Raszuk <robert@raszuk.net> wrote:

> > And if you are customer and have 4 prefixes in BGP table thing are fine=
.
>> If
>> > you by accident become transit and advertise fulm table around I think
>> we
>> > can do better in BGP to protect from it then mandate policy.
>>
>> Evidence shows that, as of today, we can not.
>>
>
> =E2=80=8BHave anyone actually tried ?=E2=80=8B
>
> The BGP origin validation was at least one attempt.
>
>
origin validation doesn't protect against 'accidentally i became transit,
whoops!' mistakes.

bgpsec also doesn't protect against this scenario.

There have been a few years worth of papers/analysis out of academia (and
at least 2 drafts in the ietf) talking about the above.


> The other one could be as simple as *"ebgp policy auto"* where based in
> the IRRDB and your peer's AS router can build a policy automagically usin=
g
> say BGPQ3.
>
>
are you suggesting that the router build it's filtering directly (on it's
own) from an IRRdb? that seems interesting, but also fraught with peril...

I also see problems in setting up the configuration parts for this, for a
single network it probably isn't rough, but for a more generic solution
it's going to involve more configuration toggling than just enabling a
policy on the peerings. At least you'd need to account for:
  1) which irrdb to pull content from
  2) which protocol to use to do that pulling
  3) authentication?
  4) results qualifications (larger than X, smaller than Y, general content
sanity)
  5) how to match/query the irrdb for the particular peerings on this devic=
e
  6) timeouts for operations
  7) scheduling of operations
  8) security bits around the new 'service' enabled on this device

there are other things to account for as well...


> http://snar.spb.ru/prog/bgpq3/
>
>
that's very vendor specific :(


> Otherwise while Jared, you and perhaps most folks on this list already
> have automated ways to build nice and accurate policies I suspect they ar=
e
> those which do not. And those would either put "allow all" or will now
> start looking for hints "what do I put in".
>
>
vendors who sold gear could probably offer solutions in this space.


> And if the end result is what you are doing twice a day why router's can'=
t
> do it themselves assuming IRRDB or any other src of truth is accurate ?
>
>
'how often does this data change?'
'how often do I want to refresh peering data on devices (from neighbors)'
'what is the sla for this part of the service'

Some folk do it more 'dynamically' (some providers update 4 or 6 times
day), some folk do it 'less dynamically' (email nacr-list@uu.net .. data
updated in 24hrs)

'why not do it more!' has lots of reasons in both directions, but really
that's not the point of this draft anyway.

--001a114dc346eb06b8054e1260ac
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Wed, Apr 26, 2017 at 9:56 AM, Robert Raszuk <span dir=3D"ltr">&lt;<a=
 href=3D"mailto:robert@raszuk.net" target=3D"_blank">robert@raszuk.net</a>&=
gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 =
0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div c=
lass=3D"gmail_extra"><div class=3D"gmail_quote"><span class=3D""><blockquot=
e class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px s=
olid rgb(204,204,204);padding-left:1ex"><span class=3D"m_724540997328525813=
8gmail-">&gt; And if you are customer and have 4 prefixes in BGP table thin=
g are fine. If<br>
&gt; you by accident become transit and advertise fulm table around I think=
 we<br>
&gt; can do better in BGP to protect from it then mandate policy.<br>
<br>
</span>Evidence shows that, as of today, we can not.<br></blockquote><div><=
br></div></span><div><div style=3D"font-family:arial,helvetica,sans-serif;f=
ont-size:small">=E2=80=8BHave anyone actually tried ?=E2=80=8B</div><div st=
yle=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></div></=
div></div></div></div></blockquote><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=
=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><div><div st=
yle=3D"font-family:arial,helvetica,sans-serif;font-size:small">The BGP orig=
in validation was at least one attempt.</div><div style=3D"font-family:aria=
l,helvetica,sans-serif;font-size:small"><br></div></div></div></div></div><=
/blockquote><div><br></div><div>origin validation doesn&#39;t protect again=
st &#39;accidentally i became transit, whoops!&#39; mistakes.</div><div><br=
></div><div>bgpsec also doesn&#39;t protect against this scenario.</div><di=
v><br></div><div>There have been a few years worth of papers/analysis out o=
f academia (and at least 2 drafts in the ietf) talking about the above.</di=
v><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 =
.8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div cla=
ss=3D"gmail_extra"><div class=3D"gmail_quote"><div><div style=3D"font-famil=
y:arial,helvetica,sans-serif;font-size:small"></div><div style=3D"font-fami=
ly:arial,helvetica,sans-serif;font-size:small">The other one could be as si=
mple as <b>&quot;ebgp policy auto&quot;</b> where based in the IRRDB and yo=
ur peer&#39;s AS router can build a policy automagically using say BGPQ3.=
=C2=A0</div><div style=3D"font-family:arial,helvetica,sans-serif;font-size:=
small"><br></div></div></div></div></div></blockquote><div><br></div><div>a=
re you suggesting that the router build it&#39;s filtering directly (on it&=
#39;s own) from an IRRdb? that seems interesting, but also fraught with per=
il...</div><div><br>I also see problems in setting up the configuration par=
ts for this, for a single network it probably isn&#39;t rough, but for a mo=
re generic solution it&#39;s going to involve more configuration toggling t=
han just enabling a policy on the peerings. At least you&#39;d need to acco=
unt for:<br>=C2=A0 1) which irrdb to pull content from</div><div>=C2=A0 2) =
which protocol to use to do that pulling</div><div>=C2=A0 3) authentication=
?</div><div>=C2=A0 4) results qualifications (larger than X, smaller than Y=
, general content sanity)</div><div>=C2=A0 5) how to match/query the irrdb =
for the particular peerings on this device</div><div>=C2=A0 6) timeouts for=
 operations</div><div>=C2=A0 7) scheduling of operations</div><div>=C2=A0 8=
) security bits around the new &#39;service&#39; enabled on this device</di=
v><div><br></div><div>there are other things to account for as well...</div=
><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .=
8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div clas=
s=3D"gmail_extra"><div class=3D"gmail_quote"><div><div style=3D"font-family=
:arial,helvetica,sans-serif;font-size:small"></div><div><font face=3D"arial=
, helvetica, sans-serif"><a href=3D"http://snar.spb.ru/prog/bgpq3/" target=
=3D"_blank">http://snar.spb.ru/prog/bgpq3/</a></font><br></div><div><font f=
ace=3D"arial, helvetica, sans-serif"><br></font></div></div></div></div></d=
iv></blockquote><div><br></div><div>that&#39;s very vendor specific :(</div=
><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .=
8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div clas=
s=3D"gmail_extra"><div class=3D"gmail_quote"><div><div><font face=3D"arial,=
 helvetica, sans-serif"></font></div><div>Otherwise while Jared, you and pe=
rhaps most folks on this list already have automated ways to build nice and=
 accurate policies I suspect they are those which do not. And those would e=
ither put &quot;allow all&quot; or will now start looking for hints &quot;w=
hat do I put in&quot;.=C2=A0</div></div><div><br></div></div></div></div></=
blockquote><div><br></div><div>vendors who sold gear could probably offer s=
olutions in this space.</div><div>=C2=A0</div><blockquote class=3D"gmail_qu=
ote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex=
"><div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><d=
iv></div><div>And if the end result is what you are doing twice a day why r=
outer&#39;s can&#39;t do it themselves assuming IRRDB or any other src of t=
ruth is accurate ?</div><div><br></div></div></div></div></blockquote><div>=
<br></div><div>&#39;how often does this data change?&#39;</div><div>&#39;ho=
w often do I want to refresh peering data on devices (from neighbors)&#39;<=
/div><div>&#39;what is the sla for this part of the service&#39;</div><div>=
<br></div><div>Some folk do it more &#39;dynamically&#39; (some providers u=
pdate 4 or 6 times day), some folk do it &#39;less dynamically&#39; (email =
<a href=3D"mailto:nacr-list@uu.net">nacr-list@uu.net</a> .. data updated in=
 24hrs)=C2=A0</div><div><br></div><div>&#39;why not do it more!&#39; has lo=
ts of reasons in both directions, but really that&#39;s not the point of th=
is draft anyway.</div></div></div></div>

--001a114dc346eb06b8054e1260ac--


From nobody Wed Apr 26 07:33:41 2017
Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2855312EAC0 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 07:33:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ttH-qqIOUZIL for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 07:33:37 -0700 (PDT)
Received: from mobil.space.net (mobil.space.net [195.30.115.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6DF3412EB57 for <idr@ietf.org>; Wed, 26 Apr 2017 07:28:38 -0700 (PDT)
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id 6141F60BC7 for <idr@ietf.org>; Wed, 26 Apr 2017 16:28:37 +0200 (CEST)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id 25C3760A24; Wed, 26 Apr 2017 16:28:37 +0200 (CEST)
Received: by moebius4.space.net (Postfix, from userid 1007) id 17DE931D1D; Wed, 26 Apr 2017 16:28:37 +0200 (CEST)
Date: Wed, 26 Apr 2017 16:28:37 +0200
From: Gert Doering <gert@space.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: Gert Doering <gert@space.net>, Jared Mauch <jared@puck.nether.net>, idr wg <idr@ietf.org>
Message-ID: <20170426142836.GV25069@Space.Net>
References: <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="UkOY2grXPhhol9RY"
Content-Disposition: inline
In-Reply-To: <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com>
X-NCC-RegID: de.space
User-Agent: Mutt/1.7.2 (2016-11-26)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/LHm42NEqn5VaP2XgyFrkSEXipzo>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 14:33:40 -0000

--UkOY2grXPhhol9RY
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

On Wed, Apr 26, 2017 at 03:56:25PM +0200, Robert Raszuk wrote:
> >
> > > And if you are customer and have 4 prefixes in BGP table thing are fi=
ne.
> > If
> > > you by accident become transit and advertise fulm table around I thin=
k we
> > > can do better in BGP to protect from it then mandate policy.
> >
> > Evidence shows that, as of today, we can not.
>=20
> ???Have anyone actually tried ????
>=20
> The BGP origin validation was at least one attempt.

How exactly does "BGP origin validation" protect against people leaking
paths they should not?  All the origin ASes are as valid as they were
originally.

("BGP->IGP->BGP redistribution" is not the most common case - in that
latter case, origin validation plus drop invalid would indeed help)

> The other one could be as simple as *"ebgp policy auto"* where based in t=
he
> IRRDB and your peer's AS router can build a policy automagically using say
> BGPQ3.
>=20
> http://snar.spb.ru/prog/bgpq3/
>=20
> Otherwise while Jared, you and perhaps most folks on this list already ha=
ve
> automated ways to build nice and accurate policies I suspect they are tho=
se
> which do not. And those would either put "allow all" or will now start
> looking for hints "what do I put in".
>=20
> And if the end result is what you are doing twice a day why router's can't
> do it themselves assuming IRRDB or any other src of truth is accurate ?

The router certainly could.  But that's a much more sophisticated requireme=
nt
than "do not announce anything at all, unless explicitely being told to".

(And then, there's the question of "truth", as soon as certain IRRDBs=20
are involved)

Gert Doering
        -- NetMaster
--=20
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279

--UkOY2grXPhhol9RY
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=EQ3O
-----END PGP SIGNATURE-----

--UkOY2grXPhhol9RY--


From nobody Wed Apr 26 08:03:11 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33F7E12EC23 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 08:03:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IZyQFbEGHna4 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 08:03:07 -0700 (PDT)
Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0117.outbound.protection.outlook.com [104.47.41.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1962012EC2C for <idr@ietf.org>; Wed, 26 Apr 2017 08:03:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=op9yLThD4wUJZaE77vhHSHcU7xra6YzYI89PDzmwr14=; b=TGEo57wvKcapBrsvLYQuPIfJBkh0URaV+QdawZijptTuZWYHlpoZhNkv4E/Gm6fbHzFhBi28R279zP5m3UAHs9S0eb5dTrUOlRSZ2YPSu4aCg9+1cGoIMNYrhlm+91K767cqVpv1gc1Qcmvt4spJ+cjkWgRhblFv7AjMG4RM/Oo=
Authentication-Results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.36.228] (66.129.241.10) by CO2PR05MB2503.namprd05.prod.outlook.com (10.166.95.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1061.6; Wed, 26 Apr 2017 15:03:04 +0000
Content-Type: multipart/alternative; boundary="Apple-Mail=_939C5BB8-F6ED-4A61-95D7-E132BF596AE0"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com>
Date: Wed, 26 Apr 2017 11:02:59 -0400
CC: Robert Raszuk <robert@raszuk.net>, idr wg <idr@ietf.org>
Message-ID: <25665E85-FF15-48FA-BF24-DB0EDB882EEB@juniper.net>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com>
To: Christopher Morrow <morrowc.lists@gmail.com>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.10]
X-ClientProxiedBy: BN6PR18CA0015.namprd18.prod.outlook.com (10.175.188.25) To CO2PR05MB2503.namprd05.prod.outlook.com (10.166.95.149)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 46f9d73f-f440-46f9-4149-08d48cb557c8
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:CO2PR05MB2503; 
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2503; 3:yhy1MPGJrnfvA0SuerUbAHB1pPBNu3bfQCbOJg63uBg/pk4ItI+BeO/+hhmAXx1N6fRSfFBnlEIkgrltDlKdX7w2FrZy9B3MvzIgDB3DF+AYYsZm9yDi46LCbYoYYiTjQB62NB7e+TA3NQHj5BsqYB285nOnj0taNEPsebGp0C0Yw37be/eUyz/0iA8mt4M4vxYOovDR6NGKl6RwElabNnU+/ap9f6rbf/qPtxKLz2i06Jhiiesqngac+CXt68/2SBicVVwMCRyu8nQ9bFUwq+gq/Qk3Oz1bNq03gdL9a9ED1e+1h+9N5i0qAjk+2eshD5mztlX2OtYCpP2O3VUsGwcn0zcpRhkT965zoNXkXQc=; 25:p/oJsSPnOkjyporuujMdvXGbVrXauED18/u53zPVcj2aQ5/DqwvZpxYKw5e5KbW+55+QkkfbYEb7jHmPk+L0WyZx6BGZxSCxzL1O7ZFBvmwkkkO18DFSkDx7ZbBgptz0VgAWFPksT/jAT1Yp5ZdudSmk/pLTjkvcJif3Md8BZxGjRyT9VqKjNBeSgyqWXvdcrxS5Fm57NsNaFvHrhMy6IY0xTOcIG//yo6IkgdBnvUg4B+hAl821MhLU2ZZO/9CYxI9UqwDGat/H5EoPuOBdSh5QdNIsHYIg1RrjDfl0AELkAiosz55qBQL3sCHA1yfss1hoAXROK0ql5EbDoGdmW2IYM9XunWqI4F3pIVZKdC26QRCbpeZZSjaaUCwtxghXdaO5SMKB6mAWNgzCBhoCRVlCNfZlV6Xvy30WMLiRIXEu1PJ1oa3Bl0tFT9jAAAJXDG0mX1dwXY1Pf0U0jkb104VYDFwS5Py4etX2yrRa0xg=
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2503; 31:zc3hmWHgDZM7ykYRym6P252VZ8LfP/PSVkI3t48/79/QR75hga9ppnTEXLKT5vBzIBt9+0kXKfkVrM4lhI5KYZvG6hUtV1S+iiRKmjxz/vrah9J8PBgjdvhPjuFB/UTivDuqDQ90zD1EwzPuROYg6BqYc7R3v+em2RLYzJYxwP/nC2L5/vL/HukpAstEWVYP2Cis8MoK2G735i4Xe9Ap1AoJsDUYFtEcgoDCzog6xXog7Va+NYVnwwcomv/rX2FXe5eir9WXZ/K6ztXD7WvQEFSx5mXtEX3oHVRNp/WSf+s=; 20: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
X-Microsoft-Antispam-PRVS: <CO2PR05MB2503E39D33F9B49A3732F5ADAA110@CO2PR05MB2503.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(6055026)(6041248)(20161123555025)(20161123562025)(20161123564025)(20161123560025)(20161123558100)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(6072148); SRVR:CO2PR05MB2503; BCL:0; PCL:0; RULEID:; SRVR:CO2PR05MB2503; 
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2503; 4: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
X-Forefront-PRVS: 0289B6431E
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(39850400002)(39410400002)(39400400002)(39840400002)(39450400003)(39860400002)(377454003)(24454002)(4326008)(25786009)(83716003)(7736002)(6916009)(42186005)(2950100002)(6666003)(260700001)(5660300001)(50986999)(54906002)(76176999)(86362001)(33656002)(93886004)(6116002)(3846002)(236005)(81166006)(110136004)(50226002)(6486002)(77096006)(53936002)(38730400002)(6246003)(8676002)(36756003)(229853002)(230783001)(2906002)(512954002)(189998001)(82746002)(69556001)(84326002)(57306001)(66066001)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CO2PR05MB2503; H:[172.29.36.228]; FPR:; SPF:None; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; CO2PR05MB2503; 23:858G5W2gzBzY1kN3itIGNR8Xwo+74RqIdaO1DnvGU?= =?us-ascii?Q?r1+00T35RSxOqWLLI3FP89W6w2tN1utRnhKeje6+NWvPXYyxI/f0ZgnHQQno?= =?us-ascii?Q?XqtcTB1x9xscj6afo5wTS1N/HS9NQs7+GNmOcCIyGTGq8NrSuSnEjkOjuesj?= =?us-ascii?Q?sp9hqbQmognNbz8CmUI5Gu8mMY2LpYwdN1LnDznWKGi2Csv84u4rJY6RuY2l?= =?us-ascii?Q?wPr9wGRtKOMjhliMnPGITETve+ouTvMuM8utJmJ4G9rLStcUNYQJX5eFxAyu?= =?us-ascii?Q?r2M4ytsLJ9R7r6hrMXkl581YeNEGZA31y/in1ShS5pZvNp+BT2tNOnTP6Nbw?= =?us-ascii?Q?AK+GJYNKrBmlub4vorXcqexMORrwFlk3XZB+tPnWzxwOcDv8WXDk17PcHjCs?= =?us-ascii?Q?4WmrpXmjtBZRjvoKjDKXxQ45i9sDBVMraInMN5IhuyDmEnfPIyiRstYgiWCl?= =?us-ascii?Q?xts3r8g5ZvONnOOo8mIECcXvVd38fWxfb3hpxa/lLzE4ReoUpGgZ6l2qRlUF?= =?us-ascii?Q?RgssSbVdMMOirObYhOOFm7CZSMNVa91Leem1Uf9n1z5PuZjGZPAOlrDfOQCm?= =?us-ascii?Q?Sd3xwxYo99REFjfGkdGubG8nHHLDtBbWYhlgtLQKSHOkYBSefhwjjCIlxhS2?= =?us-ascii?Q?PAYzyjF8Q+N+90qby5yAsAaIS1vKdydzLPjDdnzGBKUOKrQ8uMvHel2z2Axk?= =?us-ascii?Q?2gnZLayHOdqqANU8VAA/DQESB1uy7WFnNq0dr0/7GvdjLNtqrq68ljNEcc6v?= =?us-ascii?Q?sZagAIdADzwFcqaNaFygEoWlwH+AfjHrTsHebU75Mkqx/Gw8R7Jj17Kaweaw?= =?us-ascii?Q?0dZvttKnd6OR3pWDZ04qvCeWbURG4o/LH5MR6vgJKU4bTtjwR12wAMcHyt/M?= =?us-ascii?Q?FJscXhofxRajQC7Rswhw+ROv8Rbagd3IFOve9p6dWjbkRqVhePaaM9Kgvg2l?= =?us-ascii?Q?YQCUIne4Ti5AXiuw3PbQkWz8YHOcioZgUsls8QMemucuogS+FRhRp2ZKCiZ8?= =?us-ascii?Q?p8KTkFDEF6izelHTBiM8ojfkhj+l/DxA2/lXvUbv5IqRaxkJBD9bgG/1jWIg?= =?us-ascii?Q?A/5qq2lcmT1V8jIKggCR58/gk+d7XGmXxXiO9aSjtjlCLNmqpwlc9d8FvPY8?= =?us-ascii?Q?Fu27l2kHW8qy/GhvpD/yQGLCAkaKbkC8jjIYtx6rL1HfDizQRXlNJlrOTHaa?= =?us-ascii?Q?pExewoHuBqJdlC1jxgT4xptDpoQrGoa826YttPhsUcbRNYUojK9EHmz4w=3D?= =?us-ascii?Q?=3D?=
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2503; 6: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; 5:DR1QiZK98tER7UGETwGnNiNVzQKAcfZmoTYx3J5sUAEDS6lUTzEInqqmOYh0WGxavBjwlHZpHgslovIkwHPmyJcKZBom0TyQXVgRw1Fgrfctun2hPvSH+mRnawKPfztQ+G37gy0nS4wsUB6gnwmyKw==; 24:7iqK12YBMK1Rk0ZqOpOR3VWqF8SB1Af+C0ORuKCCND820yh5YCnUUznFVdrByK2Lw2iTNmrkVE0kQZLxrS6s9yfJsnXXbwxSlbRJ8dHTmpQ=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2503; 7:hJ0KLMNtvTJ+cMtXiX5dYCaeeRAOSjlkN4IV7o8Q4DaKk56Pmd+K7HV9Lq3b/M0hlm1eetULLn4xa3me7cDZplv14mc3xSGEMMxu07nj6Spm0Z4ogG3uyHYAP7ISEZLFfvbnSACChwjIDCAJAsAz4tByUp75vj8VRNEToX65nJFlt5Wru8tUBoSzquowZJYfPvoiTTcTgbFe9UokPxogqseP5XaGV/BWu9qfIg0hYWdOBvpmffrXGRksiLMzQQpVKKJvLmvnu71eqjP4opy1ci3vNQSmlahruE5tRu0jmBvx+R/al2nG9oPHf1YjK8FBfz4aTV5DlZHeIUT6RVPyIA==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Apr 2017 15:03:04.9067 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR05MB2503
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/DnluYISu0JHBTU0nYF0pZjWbDaY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 15:03:09 -0000

--Apple-Mail=_939C5BB8-F6ED-4A61-95D7-E132BF596AE0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="us-ascii"

#include individual_contributor_disclaimer

On Apr 26, 2017, at 10:08 AM, Christopher Morrow =
<morrowc.lists@gmail.com> wrote:
> 'why not do it more!' has lots of reasons in both directions, but =
really that's not the point of this draft anyway.

Seems that way to me, too.=20

AFAICT:

- bgp-reject is a case of trying to patch one special case, but an =
important special case. If the special case is important enough, the =
cost/benefit analysis works out.
- Perfect is often the enemy of good.
- The case Robert has just raised ("it's difficult for providers to =
filter their customers") is EXACTLY WHY bgp-reject exists, to put the =
onus on the customer to configure a filter.
- Putting all our eggs in the basket of "perfect filtering by providers" =
is known from experience to be imprudent (see also: BCP-38).

$0.02,

--John=

--Apple-Mail=_939C5BB8-F6ED-4A61-95D7-E132BF596AE0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="us-ascii"

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" =
class=3D""><div class=3D"">#include =
individual_contributor_disclaimer</div><div class=3D""><br =
class=3D""></div>On Apr 26, 2017, at 10:08 AM, Christopher Morrow &lt;<a =
href=3D"mailto:morrowc.lists@gmail.com" =
class=3D"">morrowc.lists@gmail.com</a>&gt; wrote:<div><blockquote =
type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" =
style=3D"font-family: Helvetica; font-size: 12px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
orphans: auto; text-align: start; text-indent: 0px; text-transform: =
none; white-space: normal; widows: auto; word-spacing: 0px; =
-webkit-text-stroke-width: 0px;" class=3D""><div =
class=3D"gmail_extra"><div class=3D"gmail_quote"><div class=3D"">'why =
not do it more!' has lots of reasons in both directions, but really =
that's not the point of this draft =
anyway.</div></div></div></div></div></blockquote></div><br =
class=3D""><div class=3D"">Seems that way to me, too.&nbsp;</div><div =
class=3D""><br class=3D""></div><div class=3D"">AFAICT:</div><div =
class=3D""><br class=3D""></div><div class=3D"">- bgp-reject is a case =
of trying to patch one special case, but an important special case. If =
the special case is important enough, the cost/benefit analysis works =
out.</div><div class=3D"">- Perfect is often the enemy of =
good.</div><div class=3D"">- The case Robert has just raised ("it's =
difficult for providers to filter their customers") is EXACTLY WHY =
bgp-reject exists, to put the onus on the customer to configure a =
filter.</div><div class=3D"">- Putting all our eggs in the basket of =
"perfect filtering by providers" is known from experience to be =
imprudent (see also: BCP-38).</div><div class=3D""><br =
class=3D""></div><div class=3D"">$0.02,</div><div class=3D""><br =
class=3D""></div><div class=3D"">--John</div></body></html>=

--Apple-Mail=_939C5BB8-F6ED-4A61-95D7-E132BF596AE0--


From nobody Wed Apr 26 08:17:17 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F4AF12EBDB for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 08:17:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e3xpUOqd6oza for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 08:17:15 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id D11AC12EC14 for <idr@ietf.org>; Wed, 26 Apr 2017 08:17:06 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 812B21E358; Wed, 26 Apr 2017 11:24:27 -0400 (EDT)
Date: Wed, 26 Apr 2017 11:24:27 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Gert Doering <gert@space.net>
Cc: Robert Raszuk <robert@raszuk.net>, idr wg <idr@ietf.org>
Message-ID: <20170426152427.GC4803@pfrc.org>
References: <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20170426125417.GU25069@Space.Net>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/z7GljtCmoLAdF5p5qlkV4hKWEIc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 15:17:16 -0000

On Wed, Apr 26, 2017 at 02:54:17PM +0200, Gert Doering wrote:
> > And if you are customer and have 4 prefixes in BGP table thing are fine. If
> > you by accident become transit and advertise fulm table around I think we
> > can do better in BGP to protect from it then mandate policy.
> 
> Evidence shows that, as of today, we can not.
> 
> "Shooting" would sound like an alternative and very american way to solve 
> the issue, but I'm sure that many IETF members would frown on this.

Prefix-limit is a fairly standard way to shoot the peering session.  It's a
very clumsy one though.

-- Jeff


From nobody Wed Apr 26 08:20:39 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A89412ECF5 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 08:20:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3lle4TD0lveq for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 08:20:32 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 6EDDA12ECAA for <idr@ietf.org>; Wed, 26 Apr 2017 08:20:30 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 19B6F1E358; Wed, 26 Apr 2017 11:27:50 -0400 (EDT)
Date: Wed, 26 Apr 2017 11:27:49 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Christopher Morrow <morrowc.lists@gmail.com>
Cc: Robert Raszuk <robert@raszuk.net>, idr wg <idr@ietf.org>
Message-ID: <20170426152749.GD4803@pfrc.org>
References: <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/oVkKzGV6evgAeN3ml357hZXWE24>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 15:20:35 -0000

On Wed, Apr 26, 2017 at 10:08:44AM -0400, Christopher Morrow wrote:
> > And if the end result is what you are doing twice a day why router's can't
> > do it themselves assuming IRRDB or any other src of truth is accurate ?
> >
> >
> 'how often does this data change?'
> 'how often do I want to refresh peering data on devices (from neighbors)'
> 'what is the sla for this part of the service'

I will point out that RPKI-rtr (RFC 6810) is effectively a form of this sort
of dynamic update mechanism. Managing the database and its consistency for
the feed it advertises is certainly no different than what is being talked
about, but the signaling of the *results* is certainly not completely out of
scope of existing or prior work.

It's still gross that RtConfig or equivalent still is the common operational
practice.

-- Jeff


From nobody Wed Apr 26 09:49:34 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B046C129413 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 09:49:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level: 
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cCEFd8xwkd08 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 09:49:30 -0700 (PDT)
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0135.outbound.protection.outlook.com [104.47.32.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4431D12943B for <idr@ietf.org>; Wed, 26 Apr 2017 09:49:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=rK06ypzjsFu+YNA3ocSlOr4cc2WncHxtugaRvXyKwEk=; b=knST5Tfd8a/KoJxrPEZPjH7UKP8zEUU2YfgiD7f9lpbi1mcb7jMmhICY0guZIL63/u3ca0h2FVY7v4LrrbV3hg0zggzpGAYz+f4/vhEWETH2/fZq0cQP3NhHEu6SaedKhIyVRR19PJE8SQMc6WqacArU2ZZPwu9fpLHN468ltw4=
Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.36.228] (66.129.241.10) by CO2PR05MB2501.namprd05.prod.outlook.com (10.166.95.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1061.6; Wed, 26 Apr 2017 16:49:28 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <20170426152749.GD4803@pfrc.org>
Date: Wed, 26 Apr 2017 12:49:23 -0400
Content-Transfer-Encoding: quoted-printable
Message-ID: <7030F60C-C451-4BF6-9950-444D5780FBE7@juniper.net>
References: <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com> <20170426152749.GD4803@pfrc.org>
To: idr wg <idr@ietf.org>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.10]
X-ClientProxiedBy: BN6PR18CA0006.namprd18.prod.outlook.com (10.175.188.16) To CO2PR05MB2501.namprd05.prod.outlook.com (10.166.95.147)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 3b3bf5f8-8e4c-4f54-ce68-08d48cc43485
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:CO2PR05MB2501; 
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2501; 3:rjMw2qyCknFvNzsHrbJNg8Rq0hv7ltxFSMa/HfSbTW0zIh8W78GupQDFFDSEwlFewmd7cq4AtGDsYK+jlVa09EzGcJll9oSXfehOdnWDYZE/2vYOPvvG7IUE6etoGgc8NDk5o4rZiWn9rsHE6aU9WPalsnd7P3QVOZNiP7x/FrfBmVHc4/KbAtGxMaJgZ8MbTvT/kQ+ZIDist8d/K1RfOJgPEi+LlD7WKNrfi1pDy4XaUo2rGlQRe9byTafZbLSX8BilsAfXY116tLVGQjeL6jgfjmMa1uuE9kzMrp2mibcyadUMjFG3ub8npqbodINXqTXOEtzC0jJd6rUIDSQdSlfqjbMlavaKz7/oQoq0jCk=; 25:9IClvLuNF3KBvEYonnGZaReDASpkGNy60wc+oFLH8yV9o/xcpvBnM/t4j/Vsa0l59eHii7DoNAyZPFO6IilDYm24g+gBcNOu5Lr7Da+dXIbuauGtkHnIPriYbz2r53M2ve6qmAz349fUIRPLPvnuDH7Akid5bvnXO72ZDZaYzbKcU2g2Y20xftNe1AABGODt/4DET0wCNBC+b/Dl3P/luoLud4W4Oj351HeK1BA3e5wb8bLHMveVRXRhgfu/od6M+5AXBE1H39nnVwfPAQUSbq4FKBxythVkPSjPi78k6Iq9oL/vV5ZNmRP7MJcl4T04QMhqP73o3g7AELDgKTuOdAMUcla0KxjIO0WgEQIQ0rPcPuelkvpC4y3G4WEdVnW3E4CUAPCV4HLpp/HJ+q6zSu8m/5FL5ZjMDhzaMsaQXdTeqc4BlD/KFT44KJAWr203CNK8w3vakz+TawoWhHLREciCQuaWrKgdPRsWVSeuSEk=
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2501; 31:HS8LyoTt0TpkUHyi1g2/09PIreGDdkpWJpN5RcR6DkeaT/1feHmP3lszPTijAEAIGZu/JgijuZFKUeh956/Lb8mJrUQIkMUI+RGpwcAzELZSDxsRniTAYihspHGh8aSsOLvqLE+g3giWMbhXLYm1cmQ3Pg0yv8+M5SlS5OqMZmqtBSfyKR6x2Fy0RmkUZG4CpacJeC45X3DsjCKi46svzqKOYR8xjIOIhtxSas5ZaB9kdVy9v0+psRcC5r6Os//DmWkKzk0z0L/Dw7WzGKdpJg==; 20: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
X-Microsoft-Antispam-PRVS: <CO2PR05MB25014A612A3ADC1ED9BD6FF1AA110@CO2PR05MB2501.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(100405760836317);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(93006095)(93001095)(6055026)(6041248)(20161123555025)(20161123560025)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123564025)(6072148); SRVR:CO2PR05MB2501; BCL:0; PCL:0; RULEID:; SRVR:CO2PR05MB2501; 
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2501; 4: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
X-Forefront-PRVS: 0289B6431E
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(39410400002)(39860400002)(39400400002)(39850400002)(39450400003)(39840400002)(86362001)(6666003)(6916009)(2950100002)(23726003)(6116002)(83716003)(110136004)(189998001)(66066001)(305945005)(3846002)(7736002)(42186005)(50466002)(82746002)(76176999)(230783001)(25786009)(50226002)(229853002)(47776003)(50986999)(38730400002)(97756001)(33656002)(77096006)(6486002)(53936002)(90366009)(93886004)(6246003)(46406003)(36756003)(8676002)(2906002)(8746002)(81166006)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CO2PR05MB2501; H:[172.29.36.228]; FPR:; SPF:None; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; CO2PR05MB2501; 23:Ta5uJR5DRGpYBYC00wETPMuBeTeGBF97T/6+TA/D+?= =?us-ascii?Q?4Ap3aJx/KQ6OJ8egbYE898W4TJoOG3j781b4r+DT3uWYtiwsRDylj7SH98hA?= =?us-ascii?Q?9FcvZ/E1FbZIvmIasTLyCLqIA5fJGFMtPRY++zS/Acv+GPcKd2CGT5Rh4567?= =?us-ascii?Q?DC/0Z2po7ZVBN9hxkMyWWurVtYIOkiC0azjAmcPLkBQp2akfTiFflnzNk/Xa?= =?us-ascii?Q?LtTFaotDhvZ3EUq8OB2FMLJBfxxer2+kwdNv+J0bV3z3bxgbLzw9KqNB6YOF?= =?us-ascii?Q?C0hW20EGLIlchN6wZ1/M/wCHE5Pe5VmQTm9iG1OTIH/xjznyi0BeJgz/og8E?= =?us-ascii?Q?3Cv/6UWH7Pfs7nmok7lUYVxUY5uKOzsVtKVLnO23s5r1wdk+qeUN+/ZSzTbx?= =?us-ascii?Q?DKO+FlUXyFJkjrp2M/AKrbThgRLEhf6pENg2tMXu2ZWt53ccaOILOVe2WOyz?= =?us-ascii?Q?keMECoxg5dSOqnTv/Q6xxNE95YV6X5ArzLSOVe1iKxHqq+fxHvrS/sbX+Fou?= =?us-ascii?Q?EwBpAoCm2BM+ff7VgtIqUM3NA82strCmpN93k5uMkdOn7DTC3NvD5+ikBnSl?= =?us-ascii?Q?UhS7BA+okMKnnC+MvU8j5KMHFf5JCh5qlLWDFBY24C8UbmwkxzwrpurazGjb?= =?us-ascii?Q?3a/0dhdaoJwtY54Xeaq2da1b/DqziFMwYBV9vN0k7V8nQ97CWMcWSSiJvdj8?= =?us-ascii?Q?PAzDH7tbLi2iI+ZSK6787dOTVcQyQHu8ebFibhWtvwwFA6Nzg7EA+lNHJk2i?= =?us-ascii?Q?jcn1MZgDzXkgRPw4kOHSFLWZTiXemYj3TwpGVJL7zet/lFS3D5jCmBRjxOjn?= =?us-ascii?Q?xE6bBHu8m5dd6M0J91a9YaB88slnbTFGgoUcLccaVmrMwsyY8jcCBzZNm/iR?= =?us-ascii?Q?P7QSyTK0fWhqpCILPUNOtq21ukDy6dPBG8TDhc9jDyZgfWETdyLEETuQrUWQ?= =?us-ascii?Q?RdqDc6gkLa4+z78OyCfA4KGwDo7e0oZux/buxMMG9GMP4dcbta2fvQvfLkRP?= =?us-ascii?Q?cifYNn3tEZI7OGxx1I7utAmjUk4uSLnxB3P2tgD27K2P7KTz8r35CH3t2PS2?= =?us-ascii?Q?43f/N3BbLOZ+Ibj10UAZNAG3yAi1iIUfDcoL9qTIr086TotQkKFrFeV/wLbg?= =?us-ascii?Q?QA5mN/QAoovlZTsuH1xaU/J4+YBGGjCeyIzi7FIhoKyuaFnN5Z79nvbu2Ct4?= =?us-ascii?Q?JKocVx2T5zvfac=3D?=
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2501; 6: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; 5:t24XteqMXlVuHZP8S1jzkViivAkyolZfB4Z+Dg1tZwro113CUIHhUDf3CgDIC33R27xUIudz09EXYoBL6cd/+Sq8QgDX7FJmlH7Z0IzQkbVlhcV56YU+Wi76HNiLU4DoNXpUCzHL3Oqago88beMKe37RNocfx3R8qXrVhWstcEM=; 24:rA+SvW3xCtbwZSk3vLn9nHJzZeMibWjye/78HkaC9pnVcCb/DXsUPKKAczDztXyNgKZqnhCq5kg2x2k9pUWnCOwK6s5Pr82RqwN/aOrRnOU=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2501; 7:js27ThLeiKxI16Dm9oIzp0n0+ilyoyyLk3rS4HJg1b5GKPOKgWfN6sv+dacLZi9UZ8jpfz+WXOFuSLKKaiY+BQtpYH5fLKhZOGc2e6bAj86cN+AIKUqtoOr8QK0M5OWvP3qWChCxtUkpfPZLcsn0NcVw/6/mj17W3xgVWjZyr095bTvhgFwi0TNDpi7qJjaKCNU+CXdvm9uw+mhBuVYaFm1Zih9DN1pM95SH0WFDgt2kBGENAVzPPrECcjC9HJmQ7V0v7UFEIItm6EMY4K0J69EohIG0sT6QXMJ0DUphk76BJmcBwtx7y8u4lAv8yPHPFF6RucUYjLa9ZraaRlLZuw==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Apr 2017 16:49:28.2880 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR05MB2501
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/V2_1Bqu0OzJtDDVY55YD5Fo039U>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 16:49:33 -0000

By the way, the general topic of ingress filtering and how to promote it =
is interesting, but relatively tangential to achieving consensus on what =
the IDR WG's opinion of advancing draft-ietf-grow-bgp-reject-05 is. It's =
relevant insofar as it addresses the same broad problem space, but as we =
delve into details I think it has the potential to become a distraction =
from the main topic.

If folks want to keep discussing details of how to improve ingress =
filtering, please consider starting a new thread for that purpose. =
Thanks!

--John=


From nobody Wed Apr 26 11:07:59 2017
Return-Path: <brian.peter.dickson@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3790128792 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 11:07:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jb-29JYlToct for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 11:07:55 -0700 (PDT)
Received: from mail-io0-x22b.google.com (mail-io0-x22b.google.com [IPv6:2607:f8b0:4001:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 102F7131560 for <idr@ietf.org>; Wed, 26 Apr 2017 11:07:48 -0700 (PDT)
Received: by mail-io0-x22b.google.com with SMTP id p80so8007914iop.3 for <idr@ietf.org>; Wed, 26 Apr 2017 11:07:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=y51uRM3cjfiD+9imNwe1BYybij/K5uvdnCyDGgwGegM=; b=RfhkEJejJpH+JHtdcNs2H14BhbT5OPwI7liOAGpBHa6rwGVNe+buyKmKaDDfSBo0Ws jn11Rglsm5jH9FDPbRhBS9BylhCEnZ2C0T55rdbXdv0IGq4bhrBL+woegTT1evXNzkUD GPN7sl5xmcuJJs3J3MyVUfXbUz4etl+RWsTfYWHgfc1G1HCWbz1BX3CIQ0PZxsUzhq7a F7y7yqKOt1Yhdhv2DYzzqJslXy4YZvFEanBGK7jabBWxQulgeNfCecRUer7GmK23NuKE 1R2KjX0s7FbsEm4PifbGcefNGN51WhHw+JJejMMnuyF6bGUw32kuNHax3GFDXObCb61G KtyQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=y51uRM3cjfiD+9imNwe1BYybij/K5uvdnCyDGgwGegM=; b=oe21IYAFCj2IEStPfIFkUjE20o4z7jhspWe+/+OLwP0/4mhAfUe2CLdaugpZ7Nhska ida1IJwHAw9T77C7s+E3lZ5D7YcghqUXeyJNJMV244cM9mQnteKO4eoppqMFFD9xsBhk kOE8cy67oYAPedZMM3jpVrOarfW6mvyIQXLgfOhXpSxJJT0rjF26RY0/4dEvo8wxz4Fj r1zQfpioogtmcj0ygkTFR4aEw9ORmA61QUPlluOpw7WA3da4GwuQXBqgxf0Ljqrh6TW3 SAHKy1hVAXwDrk5xnp7FeHggP3wi+2gxpCpcO0rugRSa/oPLms+fA+Ys+91ivsHtBdRR bOLQ==
X-Gm-Message-State: AN3rC/6qWBdsq8IDeEc1Khua/+VlMyxifKK3Iug95IMkIJVuKLUeqVBh dXr6jczq7WrBb0s+hcsB2i6OxI6wvg==
X-Received: by 10.107.59.12 with SMTP id i12mr1061658ioa.225.1493230067291; Wed, 26 Apr 2017 11:07:47 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.36.90.77 with HTTP; Wed, 26 Apr 2017 11:07:46 -0700 (PDT)
In-Reply-To: <25665E85-FF15-48FA-BF24-DB0EDB882EEB@juniper.net>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com> <25665E85-FF15-48FA-BF24-DB0EDB882EEB@juniper.net>
From: Brian Dickson <brian.peter.dickson@gmail.com>
Date: Wed, 26 Apr 2017 11:07:46 -0700
Message-ID: <CAH1iCiq=0Y3aW+jD3RAAdz=o9PvVSe36jd7L+ps_e-sNfmWfNA@mail.gmail.com>
To: "John G. Scudder" <jgs@juniper.net>
Cc: Christopher Morrow <morrowc.lists@gmail.com>, idr wg <idr@ietf.org>,  Robert Raszuk <robert@raszuk.net>
Content-Type: multipart/alternative; boundary=94eb2c0633e6baba6a054e15b7b1
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/PspI8qGeb5UbfHr6itHtgBimL4M>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 18:07:58 -0000

--94eb2c0633e6baba6a054e15b7b1
Content-Type: text/plain; charset=UTF-8

I'll see your $0.02, and raise you $0.02:

The argument against this being only a BCP, has to do with it being,
effectively, a safety issue.

A BCP is fine if the only person injured by making an error is the
operator.
However, this is clearly not the case.
(Or should be clear; PM me if you would like an explanation.)

The analogy would be the difference between general features and safety
features, on automobiles.

General features are a great way for auto manufacturers to differentiate
themselves.
And even SOME safety features can be such a differentiator, if they relate
to occupant protection alone (anti-whiplash headrests, side airbags).
However, ONE feature protects against collateral damage, and is MANDATED as
a result:

     The "brake pedal interlock".

The automobile mandate is both simple, and general: At some point in the
"operate the vehicle" process, the brake pedal must be depressed while
performing some other act, in order to put the vehicle in motion.
(The generality allows different mechanisms to be used on automatic vs
manual gear shifts: automatics require brake pedal to shift out of park;
manuals require brake pedal to start the engine.)
The brake pedal interlock is intended to prevent a number of use cases,
from accidental gear-shift by an adult, to unattended child operation, to
inadequately-trained young adult error.
The result in all of those cases is the same: unintended vehicle
motion/operation, with potential for third party loss of life.

This analogy fits very nicely with the -reject use case: in order to
prevent collateral damage (leaking the entire routing table), regardless of
who or why, the brake pedal (ingress/egress filter) must be applied before
the vehicle (BGP peering session) starts (begins).

For the same reason that government regulations mandate this, rather than
leaving it as a voluntary compliance thing, it behooves us (the standards
setting body for BGP) to make this mandatory.

There's nothing wrong with mandatory things having grandfather clauses
("any vehicle/router sold after such-and-such date"). However, that does
not preclude making the thing mandatory on a going-forward basis.

(Yes, analogies are always imperfect, but the sentiment here fits.)

Brian

On Wed, Apr 26, 2017 at 8:02 AM, John G. Scudder <jgs@juniper.net> wrote:

> #include individual_contributor_disclaimer
>
> On Apr 26, 2017, at 10:08 AM, Christopher Morrow <morrowc.lists@gmail.com>
> wrote:
>
> 'why not do it more!' has lots of reasons in both directions, but really
> that's not the point of this draft anyway.
>
>
> Seems that way to me, too.
>
> AFAICT:
>
> - bgp-reject is a case of trying to patch one special case, but an
> important special case. If the special case is important enough, the
> cost/benefit analysis works out.
> - Perfect is often the enemy of good.
> - The case Robert has just raised ("it's difficult for providers to filter
> their customers") is EXACTLY WHY bgp-reject exists, to put the onus on the
> customer to configure a filter.
> - Putting all our eggs in the basket of "perfect filtering by providers"
> is known from experience to be imprudent (see also: BCP-38).
>
> $0.02,
>
> --John
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>
>

--94eb2c0633e6baba6a054e15b7b1
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">I&#39;ll see your $0.02, and raise you $0.02:<div><br></di=
v><div>The argument against this being only a BCP, has to do with it being,=
 effectively, a safety issue.</div><div><br></div><div>A BCP is fine if the=
 only person injured by making an error is the operator.=C2=A0</div><div>Ho=
wever, this is clearly not the case.</div><div>(Or should be clear; PM me i=
f you would like an explanation.)</div><div><br></div><div>The analogy woul=
d be the difference between general features and safety features, on automo=
biles.</div><div><br></div><div>General features are a great way for auto m=
anufacturers to differentiate themselves.</div><div>And even SOME safety fe=
atures can be such a differentiator, if they relate to occupant protection =
alone (anti-whiplash headrests, side airbags).</div><div>However, ONE featu=
re protects against collateral damage, and is MANDATED as a result:=C2=A0</=
div><div><br></div><div>=C2=A0 =C2=A0 =C2=A0The &quot;brake pedal interlock=
&quot;.</div><div><br></div><div>The automobile mandate is both simple, and=
 general: At some point in the &quot;operate the vehicle&quot; process, the=
 brake pedal must be depressed while performing some other act, in order to=
 put the vehicle in motion.</div><div>(The generality allows different mech=
anisms to be used on automatic vs manual gear shifts: automatics require br=
ake pedal to shift out of park; manuals require brake pedal to start the en=
gine.)</div><div>The brake pedal interlock is intended to prevent a number =
of use cases, from accidental gear-shift by an adult, to unattended child o=
peration, to inadequately-trained young adult error.=C2=A0</div><div>The re=
sult in all of those cases is the same: unintended vehicle motion/operation=
, with potential for third party loss of life.</div><div><br></div><div>Thi=
s analogy fits very nicely with the -reject use case: in order to prevent c=
ollateral damage (leaking the entire routing table), regardless of who or w=
hy, the brake pedal (ingress/egress filter) must be applied before the vehi=
cle (BGP peering session) starts (begins).</div><div><br></div><div>For the=
 same reason that government regulations mandate this, rather than leaving =
it as a voluntary compliance thing, it behooves us (the standards setting b=
ody for BGP) to make this mandatory.</div><div><br></div><div>There&#39;s n=
othing wrong with mandatory things having grandfather clauses (&quot;any ve=
hicle/router sold after such-and-such date&quot;). However, that does not p=
reclude making the thing mandatory on a going-forward basis.</div><div><br>=
</div><div>(Yes, analogies are always imperfect, but the sentiment here fit=
s.)</div><div><br></div><div>Brian</div></div><div class=3D"gmail_extra"><b=
r><div class=3D"gmail_quote">On Wed, Apr 26, 2017 at 8:02 AM, John G. Scudd=
er <span dir=3D"ltr">&lt;<a href=3D"mailto:jgs@juniper.net" target=3D"_blan=
k">jgs@juniper.net</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quot=
e" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">=
<div style=3D"word-wrap:break-word"><div>#include individual_contributor_<w=
br>disclaimer</div><span class=3D""><div><br></div>On Apr 26, 2017, at 10:0=
8 AM, Christopher Morrow &lt;<a href=3D"mailto:morrowc.lists@gmail.com" tar=
get=3D"_blank">morrowc.lists@gmail.com</a>&gt; wrote:<div><blockquote type=
=3D"cite"><div><div dir=3D"ltr" style=3D"font-family:Helvetica;font-size:12=
px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spa=
cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=
e:normal;word-spacing:0px"><div class=3D"gmail_extra"><div class=3D"gmail_q=
uote"><div>&#39;why not do it more!&#39; has lots of reasons in both direct=
ions, but really that&#39;s not the point of this draft anyway.</div></div>=
</div></div></div></blockquote></div><br></span><div>Seems that way to me, =
too.=C2=A0</div><div><br></div><div>AFAICT:</div><div><br></div><div>- bgp-=
reject is a case of trying to patch one special case, but an important spec=
ial case. If the special case is important enough, the cost/benefit analysi=
s works out.</div><div>- Perfect is often the enemy of good.</div><div>- Th=
e case Robert has just raised (&quot;it&#39;s difficult for providers to fi=
lter their customers&quot;) is EXACTLY WHY bgp-reject exists, to put the on=
us on the customer to configure a filter.</div><div>- Putting all our eggs =
in the basket of &quot;perfect filtering by providers&quot; is known from e=
xperience to be imprudent (see also: BCP-38).</div><div><br></div><div>$0.0=
2,</div><div><br></div><div>--John</div></div><br>_________________________=
_____<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
<br></blockquote></div><br></div>

--94eb2c0633e6baba6a054e15b7b1--


From nobody Wed Apr 26 11:57:39 2017
Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 473CD1205F1 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 11:57:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A60DTWB7iWHG for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 11:57:30 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by ietfa.amsl.com (Postfix) with ESMTP id D591213157F for <idr@ietf.org>; Wed, 26 Apr 2017 11:57:30 -0700 (PDT)
Received: by puck.nether.net (Postfix, from userid 162) id 577F7540B3D; Wed, 26 Apr 2017 14:57:30 -0400 (EDT)
Date: Wed, 26 Apr 2017 14:57:30 -0400
From: Jared Mauch <jared@puck.Nether.net>
To: Brian Dickson <brian.peter.dickson@gmail.com>
Cc: "John G. Scudder" <jgs@juniper.net>, idr wg <idr@ietf.org>, Robert Raszuk <robert@raszuk.net>
Message-ID: <20170426185730.GC28925@puck.nether.net>
References: <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com> <25665E85-FF15-48FA-BF24-DB0EDB882EEB@juniper.net> <CAH1iCiq=0Y3aW+jD3RAAdz=o9PvVSe36jd7L+ps_e-sNfmWfNA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAH1iCiq=0Y3aW+jD3RAAdz=o9PvVSe36jd7L+ps_e-sNfmWfNA@mail.gmail.com>
User-Agent: Mutt/1.8.0 (2017-02-23)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/v620kTVmE0y885uD9Ms4ePxR-kQ>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 18:57:32 -0000

On Wed, Apr 26, 2017 at 11:07:46AM -0700, Brian Dickson wrote:
> For the same reason that government regulations mandate this, rather than
> leaving it as a voluntary compliance thing, it behooves us (the standards
> setting body for BGP) to make this mandatory.
> 
> There's nothing wrong with mandatory things having grandfather clauses
> ("any vehicle/router sold after such-and-such date"). However, that does
> not preclude making the thing mandatory on a going-forward basis.
> 
> (Yes, analogies are always imperfect, but the sentiment here fits.)

	Thanks.  This is surely the intent, make BGP safer for
all involved.  The interesting bit here is that some implementions
don't even have the capability to apply the brake pedal prior to
the vehicle moving.  This of course makes it easy to move, but
much harder to stop (and undo the collateral damage).

	- Jared

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


From nobody Wed Apr 26 12:18:34 2017
Return-Path: <warren@kumari.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 423C81289C3 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 12:18:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=kumari-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id boiP-oBB4YSd for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 12:18:30 -0700 (PDT)
Received: from mail-qk0-x233.google.com (mail-qk0-x233.google.com [IPv6:2607:f8b0:400d:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CABA1205F1 for <idr@ietf.org>; Wed, 26 Apr 2017 12:18:30 -0700 (PDT)
Received: by mail-qk0-x233.google.com with SMTP id y63so9779963qkd.1 for <idr@ietf.org>; Wed, 26 Apr 2017 12:18:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kumari-net.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=4M4e9J6mmy25RWkWDpTi+h8Vv6LPYrf30J1syA+l/DE=; b=WozoF5yWypKx1T04FmJJ9ME9gyKfHdMx+7RhL8RVyfz9WZG2EN/AXOVqSDzj3hJWHI GG25/DkliCzubksDYCTVOj4ebaW2Uyu2JXx+L71q9Vn1MUs7nP+FLvbTGLbNPQU2dZLF ZZcCxclQBqVmJnELz7v+k6okfFJLpk5+mMpKyxrfb5Q5zmbDYh4W8f4yd1OsmS9BlhKm NSZD6eLupMt7IRcAwEC6/SarHGknNDmC+8LjCdIQ5rCpGUms8s867pSahRmXeHb2jHW4 rhX6fXaQN7GGK09/K+Vq91ClQo7VjMs7H7EXyjdieIakZ4QZNZ9QT1t+Y1J03qHr7VqY w1AA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=4M4e9J6mmy25RWkWDpTi+h8Vv6LPYrf30J1syA+l/DE=; b=R6xY4MDEf2L9hGOcdFua9eMEGjrnm5ti3ix3QcFSgzEfRFZPFPHs6RJVrsdXovbAcT 50v3dUpw5flqJzGY1ZWE6N4R1kH0iHhQiH0zgJJJMRoeKalbLwfPZWGA21upSQ4mz1JE qkzLoPBvHlkahHDon/M0/2YT/k0KrRiDMLeVF0PWc60xxTOwJy5g/byRs1LzMq8YX9Ap icIwvLv2oCY92lGMLsA4+ZGnzqckW1LcAxI6Vt44pO9cIbA6HWx2vKr3cPV+sqYxlo8u r9b98cPpIpR5KDEMzQDdD+qyOnPuEEQ6yN0GW6oIu/4KH+N32YROxuPFYS6X0AWbYmFE 6j9Q==
X-Gm-Message-State: AN3rC/4A5oOUV763d9hkhx76UONko2A4T1FGHASW5QXQmVlR0bqvBUNn sGT0oZZPHbJ+8XHhDnCKxPd8CNRw9I4SrPg=
X-Received: by 10.55.67.135 with SMTP id q129mr1495797qka.21.1493234309352; Wed, 26 Apr 2017 12:18:29 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.12.189.164 with HTTP; Wed, 26 Apr 2017 12:17:48 -0700 (PDT)
In-Reply-To: <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com>
From: Warren Kumari <warren@kumari.net>
Date: Wed, 26 Apr 2017 15:17:48 -0400
Message-ID: <CAHw9_iKhRQpEGigqvqYoF0ca9D=-2VmESO8Fp4P_p1tZqpJgXQ@mail.gmail.com>
To: Christopher Morrow <morrowc.lists@gmail.com>
Cc: Robert Raszuk <robert@raszuk.net>, idr wg <idr@ietf.org>
Content-Type: text/plain; charset=UTF-8
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/XClo4fVDxi3QijYdiklkY-62OOg>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 19:18:32 -0000

On Wed, Apr 26, 2017 at 10:08 AM, Christopher Morrow
<morrowc.lists@gmail.com> wrote:
>
>
> On Wed, Apr 26, 2017 at 9:56 AM, Robert Raszuk <robert@raszuk.net> wrote:
>>>
>>> > And if you are customer and have 4 prefixes in BGP table thing are
>>> > fine. If
>>> > you by accident become transit and advertise fulm table around I think
>>> > we
>>> > can do better in BGP to protect from it then mandate policy.
>>>
>>> Evidence shows that, as of today, we can not.
>>
>>
>> Have anyone actually tried ?
>>
>> The BGP origin validation was at least one attempt.
>>
>
> origin validation doesn't protect against 'accidentally i became transit,
> whoops!' mistakes.

... and I suspect that basically everyone who actually run networks
have done this (and probably more than once.)

My first time was in around 1997 or so - I managed to become transit
(on my Cisco AGS+!) between Global Naps and (IIRC) PSI.

I was turning up Global Naps as a peer, so I log on and type:
router bgp 8120
neighbor 192.0.2.1 peer-as 1784

... and, as I press enter, one of the sysadmin folk turns around and
asks me to hand him a sharpie. While doing so I bump my coffee mug,
spilling 3 week old coffee (and a very cool mold colony I was
culturing) all over my desk. What with the cursing and running to find
paper towels and similar I don't come back to the router for a minute
or two... by which time I can mysteriously no longer reach it. Turns
out that becoming transit between 2 (at the time) large providers over
a T1 makes your router unavailable. Eventually BGP falls down (because
keepalives get starved), and then, before you are able to login again,
it comes up.


Stuff like this happens all the time - bringing peers up without
policy is a: really easy to accidentally do and b: hurts both the
person doing it, and everyone caught in the collateral damage.

>
> bgpsec also doesn't protect against this scenario.
>
> There have been a few years worth of papers/analysis out of academia (and at
> least 2 drafts in the ietf) talking about the above.
>
>>
>> The other one could be as simple as "ebgp policy auto" where based in the
>> IRRDB and your peer's AS router can build a policy automagically using say
>> BGPQ3.
>>
>
> are you suggesting that the router build it's filtering directly (on it's
> own) from an IRRdb? that seems interesting, but also fraught with peril...
>
> I also see problems in setting up the configuration parts for this, for a
> single network it probably isn't rough, but for a more generic solution it's
> going to involve more configuration toggling than just enabling a policy on
> the peerings. At least you'd need to account for:
>   1) which irrdb to pull content from
>   2) which protocol to use to do that pulling
>   3) authentication?
>   4) results qualifications (larger than X, smaller than Y, general content
> sanity)
>   5) how to match/query the irrdb for the particular peerings on this device
>   6) timeouts for operations
>   7) scheduling of operations
>   8) security bits around the new 'service' enabled on this device
>
> there are other things to account for as well...

   9) making sure that you have announced just enough (and received)
just enough that you can actually reach the irrdb

I'm saddened that something which is basically a trigger safety to
make it harder to shoot myself in the foot is this hard....

W

>
>>
>> http://snar.spb.ru/prog/bgpq3/
>>
>
> that's very vendor specific :(
>
>>
>> Otherwise while Jared, you and perhaps most folks on this list already
>> have automated ways to build nice and accurate policies I suspect they are
>> those which do not. And those would either put "allow all" or will now start
>> looking for hints "what do I put in".
>>
>
> vendors who sold gear could probably offer solutions in this space.
>
>>
>> And if the end result is what you are doing twice a day why router's can't
>> do it themselves assuming IRRDB or any other src of truth is accurate ?
>>
>
> 'how often does this data change?'
> 'how often do I want to refresh peering data on devices (from neighbors)'
> 'what is the sla for this part of the service'
>
> Some folk do it more 'dynamically' (some providers update 4 or 6 times day),
> some folk do it 'less dynamically' (email nacr-list@uu.net .. data updated
> in 24hrs)
>
> 'why not do it more!' has lots of reasons in both directions, but really
> that's not the point of this draft anyway.
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf


From nobody Wed Apr 26 14:52:19 2017
Return-Path: <aa@highloadlab.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D091128B92 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 14:52:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=highloadlab-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KgCjHhniGc85 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 14:52:15 -0700 (PDT)
Received: from mail-lf0-x22b.google.com (mail-lf0-x22b.google.com [IPv6:2a00:1450:4010:c07::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5847D128B8F for <idr@ietf.org>; Wed, 26 Apr 2017 14:52:15 -0700 (PDT)
Received: by mail-lf0-x22b.google.com with SMTP id t144so7713512lff.1 for <idr@ietf.org>; Wed, 26 Apr 2017 14:52:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=highloadlab-com.20150623.gappssmtp.com; s=20150623; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=zwivG++bQgngqV2LP5ZbOyzgbb0hMe5odBHjfsTWYhM=; b=ss9sV9XK5UsHkQvTe1xApPe9+TCaYg+6UWEQ0c/sLWLMvXO6NyzvHklsW7i1bGuHPt TDyWBunfOQ+JbjEPMT2SxIdXvvr+bg22Zat7yz4Gk+iP2waeS//NMFw305G/tBqXa4eS b5+PPVGPPCUSqv4JeY18LyV/EvqOUM/z/hAJPFgrZmppyJJKSCLAZH8+3oI1b+B0STZt krxynrN6EP42ik+Z9G0wb+ChofVithpUxGKmPzw7gB8PeWN1N+KjoqRC5TM82vUj2LQn r+FB+4feuxrflDURs48BDiOd+yvhLR0xnN0xP5c67xD6lvFG19EdRjJ1kCO4LtAu8NEy Bz9w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=zwivG++bQgngqV2LP5ZbOyzgbb0hMe5odBHjfsTWYhM=; b=RdAttwtAWo5SrwnrzPWoWzJ1x/2UrqxIxMPtL68de4ik533dg+aN7d4jZIaoKVmi+J YWFY1lBhOFsqt0CMXdirSOQgf+cdFgxYuGhYODs53OgmoNKIx/AJOTzHncIz1Y7OGZYH J4thxs3+6Aapdp2BdPLzWoq6igjoFC5RQemGrrA+dd2rHGhpeKr9lUTjV0+ecp0qGZAd RfniA+fqbfCyQ3kjS5TN7C4Jd0ecm0h5W5jSeRRcb1Q6JPJvxo47MV8KUcBqtUIN1jU8 w6wLq6J54NHOmGDA9+DsTFeY6MqKI+Qu2kQ+aH6XhOITGTuNkbhCrZpvzC8G/6d53SjX BZBQ==
X-Gm-Message-State: AN3rC/7dxf5aXMFASvy3U9YzCkSjx232EjRXjZ0jqYCQZ8MyZnUWDrEj I9xzJk8V9jsDcO4x5qdg55MqfLglkw==
X-Received: by 10.46.5.143 with SMTP id 137mr881654ljf.49.1493243533498; Wed, 26 Apr 2017 14:52:13 -0700 (PDT)
MIME-Version: 1.0
Sender: aa@highloadlab.com
Received: by 10.46.82.85 with HTTP; Wed, 26 Apr 2017 14:52:12 -0700 (PDT)
X-Originating-IP: [46.188.120.33]
In-Reply-To: <CAHw9_iKhRQpEGigqvqYoF0ca9D=-2VmESO8Fp4P_p1tZqpJgXQ@mail.gmail.com>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com> <CAHw9_iKhRQpEGigqvqYoF0ca9D=-2VmESO8Fp4P_p1tZqpJgXQ@mail.gmail.com>
From: Alexander Azimov <aa@qrator.net>
Date: Thu, 27 Apr 2017 00:52:12 +0300
X-Google-Sender-Auth: JBTvm1i3e-du90SEBTbXk_Wiavc
Message-ID: <CAHgCvCNRYyH9wyT=vtVk34_Wc_rqrX0z1D9FCx+cZzLBOXmFLw@mail.gmail.com>
To: Warren Kumari <warren@kumari.net>
Cc: Christopher Morrow <morrowc.lists@gmail.com>, idr wg <idr@ietf.org>,  Robert Raszuk <robert@raszuk.net>
Content-Type: multipart/alternative; boundary=001a114a6f9a60b331054e18da9d
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/y6vRkxsius0lEPnI7Ca5U2BgUJs>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 21:52:18 -0000

--001a114a6f9a60b331054e18da9d
Content-Type: text/plain; charset=UTF-8

Hi all,


While I do like idea of making simple fix to avoid leaks of full table
(this how I understand the goal of this document) I'm afraid that this will
only result in change from absence of policy to empty policy. This
requirement of policy existence will not automatically result in
requirement of understanding of its purpose.



Additionally, I would like to argue that full table leaks are still common
now. They do exist, but they are rare, thanks to policies at upstream
providers, or, at least prefix limit.

2017-04-26 22:17 GMT+03:00 Warren Kumari <warren@kumari.net>:

> On Wed, Apr 26, 2017 at 10:08 AM, Christopher Morrow
> <morrowc.lists@gmail.com> wrote:
> >
> >
> > On Wed, Apr 26, 2017 at 9:56 AM, Robert Raszuk <robert@raszuk.net>
> wrote:
> >>>
> >>> > And if you are customer and have 4 prefixes in BGP table thing are
> >>> > fine. If
> >>> > you by accident become transit and advertise fulm table around I
> think
> >>> > we
> >>> > can do better in BGP to protect from it then mandate policy.
> >>>
> >>> Evidence shows that, as of today, we can not.
> >>
> >>
> >> Have anyone actually tried ?
> >>
> >> The BGP origin validation was at least one attempt.
> >>
> >
> > origin validation doesn't protect against 'accidentally i became transit,
> > whoops!' mistakes.
>
> ... and I suspect that basically everyone who actually run networks
> have done this (and probably more than once.)
>
> My first time was in around 1997 or so - I managed to become transit
> (on my Cisco AGS+!) between Global Naps and (IIRC) PSI.
>
> I was turning up Global Naps as a peer, so I log on and type:
> router bgp 8120
> neighbor 192.0.2.1 peer-as 1784
>
> ... and, as I press enter, one of the sysadmin folk turns around and
> asks me to hand him a sharpie. While doing so I bump my coffee mug,
> spilling 3 week old coffee (and a very cool mold colony I was
> culturing) all over my desk. What with the cursing and running to find
> paper towels and similar I don't come back to the router for a minute
> or two... by which time I can mysteriously no longer reach it. Turns
> out that becoming transit between 2 (at the time) large providers over
> a T1 makes your router unavailable. Eventually BGP falls down (because
> keepalives get starved), and then, before you are able to login again,
> it comes up.
>
>
> Stuff like this happens all the time - bringing peers up without
> policy is a: really easy to accidentally do and b: hurts both the
> person doing it, and everyone caught in the collateral damage.
>
> >
> > bgpsec also doesn't protect against this scenario.
> >
> > There have been a few years worth of papers/analysis out of academia
> (and at
> > least 2 drafts in the ietf) talking about the above.
> >
> >>
> >> The other one could be as simple as "ebgp policy auto" where based in
> the
> >> IRRDB and your peer's AS router can build a policy automagically using
> say
> >> BGPQ3.
> >>
> >
> > are you suggesting that the router build it's filtering directly (on it's
> > own) from an IRRdb? that seems interesting, but also fraught with
> peril...
> >
> > I also see problems in setting up the configuration parts for this, for a
> > single network it probably isn't rough, but for a more generic solution
> it's
> > going to involve more configuration toggling than just enabling a policy
> on
> > the peerings. At least you'd need to account for:
> >   1) which irrdb to pull content from
> >   2) which protocol to use to do that pulling
> >   3) authentication?
> >   4) results qualifications (larger than X, smaller than Y, general
> content
> > sanity)
> >   5) how to match/query the irrdb for the particular peerings on this
> device
> >   6) timeouts for operations
> >   7) scheduling of operations
> >   8) security bits around the new 'service' enabled on this device
> >
> > there are other things to account for as well...
>
>    9) making sure that you have announced just enough (and received)
> just enough that you can actually reach the irrdb
>
> I'm saddened that something which is basically a trigger safety to
> make it harder to shoot myself in the foot is this hard....
>
> W
>
> >
> >>
> >> http://snar.spb.ru/prog/bgpq3/
> >>
> >
> > that's very vendor specific :(
> >
> >>
> >> Otherwise while Jared, you and perhaps most folks on this list already
> >> have automated ways to build nice and accurate policies I suspect they
> are
> >> those which do not. And those would either put "allow all" or will now
> start
> >> looking for hints "what do I put in".
> >>
> >
> > vendors who sold gear could probably offer solutions in this space.
> >
> >>
> >> And if the end result is what you are doing twice a day why router's
> can't
> >> do it themselves assuming IRRDB or any other src of truth is accurate ?
> >>
> >
> > 'how often does this data change?'
> > 'how often do I want to refresh peering data on devices (from neighbors)'
> > 'what is the sla for this part of the service'
> >
> > Some folk do it more 'dynamically' (some providers update 4 or 6 times
> day),
> > some folk do it 'less dynamically' (email nacr-list@uu.net .. data
> updated
> > in 24hrs)
> >
> > 'why not do it more!' has lots of reasons in both directions, but really
> > that's not the point of this draft anyway.
> >
> > _______________________________________________
> > Idr mailing list
> > Idr@ietf.org
> > https://www.ietf.org/mailman/listinfo/idr
> >
>
>
>
> --
> I don't think the execution is relevant when it was obviously a bad
> idea in the first place.
> This is like putting rabid weasels in your pants, and later expressing
> regret at having chosen those particular rabid weasels and that pair
> of pants.
>    ---maf
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>



-- 
| Alexander Azimov  | HLL l QRATOR
| tel.: +7 499 241 81 92
| mob.: +7 915 360 08 86
| skype: mitradir
| mailto: aa@qrator.net
| visit: www.qrator.net

--001a114a6f9a60b331054e18da9d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><p class=3D"MsoNormal"><span lang=3D"EN-US">Hi all,</span>=
</p><p class=3D"MsoNormal"><span lang=3D"EN-US"><br></span></p><p class=3D"=
MsoNormal"><span lang=3D"EN-US">While I do
like idea of making simple fix to avoid leaks of full table (this how I
understand the goal of this document) I&#39;m afraid that this will only re=
sult in
change from absence of policy to empty policy. This requirement of policy e=
xistence
will not automatically result in requirement of understanding of its purpos=
e.<span></span></span></p>

<p class=3D"MsoNormal"><span lang=3D"EN-US">=C2=A0</span></p>

<p class=3D"MsoNormal"><span lang=3D"EN-US">Additionally,
I would like to argue that full table leaks are still common now. They do e=
xist, but they
are rare, thanks to policies at upstream providers, or, at least prefix lim=
it.</span></p></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quot=
e">2017-04-26 22:17 GMT+03:00 Warren Kumari <span dir=3D"ltr">&lt;<a href=
=3D"mailto:warren@kumari.net" target=3D"_blank">warren@kumari.net</a>&gt;</=
span>:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bord=
er-left:1px #ccc solid;padding-left:1ex"><span class=3D"">On Wed, Apr 26, 2=
017 at 10:08 AM, Christopher Morrow<br>
&lt;<a href=3D"mailto:morrowc.lists@gmail.com">morrowc.lists@gmail.com</a>&=
gt; wrote:<br>
&gt;<br>
&gt;<br>
&gt; On Wed, Apr 26, 2017 at 9:56 AM, Robert Raszuk &lt;<a href=3D"mailto:r=
obert@raszuk.net">robert@raszuk.net</a>&gt; wrote:<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; &gt; And if you are customer and have 4 prefixes in BGP table =
thing are<br>
&gt;&gt;&gt; &gt; fine. If<br>
&gt;&gt;&gt; &gt; you by accident become transit and advertise fulm table a=
round I think<br>
&gt;&gt;&gt; &gt; we<br>
&gt;&gt;&gt; &gt; can do better in BGP to protect from it then mandate poli=
cy.<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; Evidence shows that, as of today, we can not.<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; Have anyone actually tried ?<br>
&gt;&gt;<br>
&gt;&gt; The BGP origin validation was at least one attempt.<br>
&gt;&gt;<br>
&gt;<br>
&gt; origin validation doesn&#39;t protect against &#39;accidentally i beca=
me transit,<br>
&gt; whoops!&#39; mistakes.<br>
<br>
</span>... and I suspect that basically everyone who actually run networks<=
br>
have done this (and probably more than once.)<br>
<br>
My first time was in around 1997 or so - I managed to become transit<br>
(on my Cisco AGS+!) between Global Naps and (IIRC) PSI.<br>
<br>
I was turning up Global Naps as a peer, so I log on and type:<br>
router bgp 8120<br>
neighbor 192.0.2.1 peer-as 1784<br>
<br>
... and, as I press enter, one of the sysadmin folk turns around and<br>
asks me to hand him a sharpie. While doing so I bump my coffee mug,<br>
spilling 3 week old coffee (and a very cool mold colony I was<br>
culturing) all over my desk. What with the cursing and running to find<br>
paper towels and similar I don&#39;t come back to the router for a minute<b=
r>
or two... by which time I can mysteriously no longer reach it. Turns<br>
out that becoming transit between 2 (at the time) large providers over<br>
a T1 makes your router unavailable. Eventually BGP falls down (because<br>
keepalives get starved), and then, before you are able to login again,<br>
it comes up.<br>
<br>
<br>
Stuff like this happens all the time - bringing peers up without<br>
policy is a: really easy to accidentally do and b: hurts both the<br>
person doing it, and everyone caught in the collateral damage.<br>
<span class=3D""><br>
&gt;<br>
&gt; bgpsec also doesn&#39;t protect against this scenario.<br>
&gt;<br>
&gt; There have been a few years worth of papers/analysis out of academia (=
and at<br>
&gt; least 2 drafts in the ietf) talking about the above.<br>
&gt;<br>
&gt;&gt;<br>
&gt;&gt; The other one could be as simple as &quot;ebgp policy auto&quot; w=
here based in the<br>
&gt;&gt; IRRDB and your peer&#39;s AS router can build a policy automagical=
ly using say<br>
&gt;&gt; BGPQ3.<br>
&gt;&gt;<br>
&gt;<br>
&gt; are you suggesting that the router build it&#39;s filtering directly (=
on it&#39;s<br>
&gt; own) from an IRRdb? that seems interesting, but also fraught with peri=
l...<br>
&gt;<br>
&gt; I also see problems in setting up the configuration parts for this, fo=
r a<br>
&gt; single network it probably isn&#39;t rough, but for a more generic sol=
ution it&#39;s<br>
&gt; going to involve more configuration toggling than just enabling a poli=
cy on<br>
&gt; the peerings. At least you&#39;d need to account for:<br>
&gt;=C2=A0 =C2=A01) which irrdb to pull content from<br>
&gt;=C2=A0 =C2=A02) which protocol to use to do that pulling<br>
&gt;=C2=A0 =C2=A03) authentication?<br>
&gt;=C2=A0 =C2=A04) results qualifications (larger than X, smaller than Y, =
general content<br>
&gt; sanity)<br>
&gt;=C2=A0 =C2=A05) how to match/query the irrdb for the particular peering=
s on this device<br>
&gt;=C2=A0 =C2=A06) timeouts for operations<br>
&gt;=C2=A0 =C2=A07) scheduling of operations<br>
&gt;=C2=A0 =C2=A08) security bits around the new &#39;service&#39; enabled =
on this device<br>
&gt;<br>
&gt; there are other things to account for as well...<br>
<br>
</span>=C2=A0 =C2=A09) making sure that you have announced just enough (and=
 received)<br>
just enough that you can actually reach the irrdb<br>
<br>
I&#39;m saddened that something which is basically a trigger safety to<br>
make it harder to shoot myself in the foot is this hard....<br>
<br>
W<br>
<span class=3D"im HOEnZb"><br>
&gt;<br>
&gt;&gt;<br>
&gt;&gt; <a href=3D"http://snar.spb.ru/prog/bgpq3/" rel=3D"noreferrer" targ=
et=3D"_blank">http://snar.spb.ru/prog/bgpq3/</a><br>
&gt;&gt;<br>
&gt;<br>
&gt; that&#39;s very vendor specific :(<br>
&gt;<br>
&gt;&gt;<br>
&gt;&gt; Otherwise while Jared, you and perhaps most folks on this list alr=
eady<br>
&gt;&gt; have automated ways to build nice and accurate policies I suspect =
they are<br>
&gt;&gt; those which do not. And those would either put &quot;allow all&quo=
t; or will now start<br>
&gt;&gt; looking for hints &quot;what do I put in&quot;.<br>
&gt;&gt;<br>
&gt;<br>
&gt; vendors who sold gear could probably offer solutions in this space.<br=
>
&gt;<br>
&gt;&gt;<br>
&gt;&gt; And if the end result is what you are doing twice a day why router=
&#39;s can&#39;t<br>
&gt;&gt; do it themselves assuming IRRDB or any other src of truth is accur=
ate ?<br>
&gt;&gt;<br>
&gt;<br>
&gt; &#39;how often does this data change?&#39;<br>
&gt; &#39;how often do I want to refresh peering data on devices (from neig=
hbors)&#39;<br>
&gt; &#39;what is the sla for this part of the service&#39;<br>
&gt;<br>
&gt; Some folk do it more &#39;dynamically&#39; (some providers update 4 or=
 6 times day),<br>
&gt; some folk do it &#39;less dynamically&#39; (email <a href=3D"mailto:na=
cr-list@uu.net">nacr-list@uu.net</a> .. data updated<br>
&gt; in 24hrs)<br>
&gt;<br>
&gt; &#39;why not do it more!&#39; has lots of reasons in both directions, =
but really<br>
&gt; that&#39;s not the point of this draft anyway.<br>
&gt;<br>
</span><span class=3D"im HOEnZb">&gt; ______________________________<wbr>__=
_______________<br>
&gt; Idr mailing list<br>
&gt; <a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferre=
r" target=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
&gt;<br>
<br>
<br>
<br>
</span><span class=3D"HOEnZb"><font color=3D"#888888">--<br>
I don&#39;t think the execution is relevant when it was obviously a bad<br>
idea in the first place.<br>
This is like putting rabid weasels in your pants, and later expressing<br>
regret at having chosen those particular rabid weasels and that pair<br>
of pants.<br>
=C2=A0 =C2=A0---maf<br>
</font></span><div class=3D"HOEnZb"><div class=3D"h5"><br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>=
<div class=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=
=3D"ltr"><div style=3D"font-family:Helvetica;font-size:12px;border-collapse=
:collapse"><font color=3D"#999999">| Alexander Azimov =C2=A0| HLL l QRATOR<=
/font></div><div style=3D"font-family:Helvetica;font-size:12px;border-colla=
pse:collapse"><font color=3D"#999999">| tel.: +7 499 241 81 92</font></div>=
<div style=3D"font-family:Helvetica;font-size:12px;border-collapse:collapse=
"><font color=3D"#999999">| mob.: +7 915 360 08 86</font></div><div style=
=3D"font-family:Helvetica;font-size:12px;border-collapse:collapse"><font co=
lor=3D"#999999">| skype: mitradir</font></div><div style=3D"font-family:Hel=
vetica;font-size:12px;border-collapse:collapse"><font color=3D"#999999">| m=
ailto:=C2=A0<a href=3D"mailto:aa@qrator.net" target=3D"_blank">aa@qrator.ne=
t</a></font></div><div style=3D"font-family:Helvetica;font-size:12px;border=
-collapse:collapse"><font color=3D"#999999">| visit:=C2=A0<a href=3D"http:/=
/www.qrator.net/" target=3D"_blank">www.qrator.net</a></font></div></div></=
div>
</div>

--001a114a6f9a60b331054e18da9d--


From nobody Wed Apr 26 16:45:16 2017
Return-Path: <crimson@sidehack.sat.gweep.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83D86129487 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 16:45:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lwoIEJoEyA7o for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 16:45:14 -0700 (PDT)
Received: from sidehack.sat.gweep.net (sidehack.sat.gweep.net [72.93.233.150]) by ietfa.amsl.com (Postfix) with SMTP id 1B8D5126B71 for <idr@ietf.org>; Wed, 26 Apr 2017 16:45:13 -0700 (PDT)
Received: (qmail 25904 invoked by uid 524); 26 Apr 2017 19:44:09 -0400
Date: Wed, 26 Apr 2017 19:44:09 -0400
From: Joe Provo <jzp-idr@rsuc.gweep.net>
To: "John G. Scudder" <jgs@juniper.net>
Cc: Christopher Morrow <morrowc.lists@gmail.com>, idr wg <idr@ietf.org>, Robert Raszuk <robert@raszuk.net>
Message-ID: <20170426234408.GA36142@gweep.net>
Reply-To: jzp-idr@rsuc.gweep.net
References: <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com> <25665E85-FF15-48FA-BF24-DB0EDB882EEB@juniper.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <25665E85-FF15-48FA-BF24-DB0EDB882EEB@juniper.net>
X-PGP-Key: http://www.gweep.net/~crimson/pgp.txt
X-Disclaimer: "I'm the only one foolish enough to claim these opinions."
Organization: RSUC - Hello to all my friends in domestic surveillance!
X-Do-Not-Email-Here: jzp@suespammers.org
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/4kYDDorwIL9RFm1z4MKTf6_D53Q>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2017 23:45:15 -0000

On Wed, Apr 26, 2017 at 11:02:59AM -0400, John G. Scudder wrote:
> #include individual_contributor_disclaimer
> 
> On Apr 26, 2017, at 10:08 AM, Christopher Morrow <morrowc.lists@gmail.com> wrote:
> > 'why not do it more!' has lots of reasons in both directions, but really that's not the point of this draft anyway.
> 
> Seems that way to me, too. 
> 
> AFAICT:
> 
> - bgp-reject is a case of trying to patch one special case, but
>   an important special case. If the special case is important enough,
>   the cost/benefit analysis works out.
> - Perfect is often the enemy of good.
> - The case Robert has just raised ("it's difficult for providers
>   to filter their customers") is EXACTLY WHY bgp-reject exists, to
>   put the onus on the customer to configure a filter.
> - Putting all our eggs in the basket of "perfect filtering by
>   providers" is known from experience to be imprudent (see also:
>   BCP-38).

This.

My initial thought was why are we still talking about this as 
if it were academic? It was a good idea when the first version 
floated in 2015 and it is an even better idea with two more 
years of operational damage and instability to the global 
Internet.

Won't you think of the packets?  For the low cost of a default
change, we can get ahead of the misery of users when their 
packets are misrouted by fail-open policies. Let's help them
find the best path to their dst. 

-- 
Posted from my personal account - see X-Disclaimer header.
Joe Provo / Gweep / Earthling 


From nobody Wed Apr 26 21:57:19 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCDAB13159C for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 21:57:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level: 
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LkPd9aOcDYxI for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 21:57:15 -0700 (PDT)
Received: from uplift.swm.pp.se (ipv6.swm.pp.se [IPv6:2a00:801::f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1C1B13159B for <idr@ietf.org>; Wed, 26 Apr 2017 21:57:15 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id ABB18A6; Thu, 27 Apr 2017 06:57:12 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493269032; bh=Ppw8LRQQp692dsFbmiZKY8a6Hb/J5QCXtI7wm4eBdcI=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=UV86uhjkVH/cW+04lwGrNqMMoJ86+ydbX5GCNnvOBcZrxQ/HiQBOJdiq++Cuge0oS FE2ocA5Dqh/Yb2Akc+JYWqoH60b70UueWxShCaIZnrmspF40edRh1Pm3yOXPM2rCXM TUBgKyqAdBKx5hiiG6VCqCY+glVlFdQb6bhB/iA8=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id A60FEA4; Thu, 27 Apr 2017 06:57:12 +0200 (CEST)
Date: Thu, 27 Apr 2017 06:57:12 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Warren Kumari <warren@kumari.net>
cc: idr wg <idr@ietf.org>
In-Reply-To: <CAHw9_iKhRQpEGigqvqYoF0ca9D=-2VmESO8Fp4P_p1tZqpJgXQ@mail.gmail.com>
Message-ID: <alpine.DEB.2.02.1704270653291.5591@uplift.swm.pp.se>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com> <CAHw9_iKhRQpEGigqvqYoF0ca9D=-2VmESO8Fp4P_p1tZqpJgXQ@mail.gmail.com>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/9px2pS3ApAHrjPlB9D4EvnBpahI>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 04:57:18 -0000

On Wed, 26 Apr 2017, Warren Kumari wrote:

>
> I was turning up Global Naps as a peer, so I log on and type:
> router bgp 8120
> neighbor 192.0.2.1 peer-as 1784
>
> ... and, as I press enter, one of the sysadmin folk turns around and
> asks me to hand him a sharpie. While doing so I bump my coffee mug,
> spilling 3 week old coffee (and a very cool mold colony I was
> culturing) all over my desk. What with the cursing and running to find
> paper towels and similar I don't come back to the router for a minute
> or two... by which time I can mysteriously no longer reach it. Turns
> out that becoming transit between 2 (at the time) large providers over
> a T1 makes your router unavailable. Eventually BGP falls down (because
> keepalives get starved), and then, before you are able to login again,
> it comes up.

This is a perfect example from the real world why a fail-close design is 
needed. What you described, we all have happened to us if we've worked 
long enough in this field.

Trains have brakes that need air pressure to release them. If hose breaks, 
compressor breaks, whatever breaks, the brakes are applied.

A BGP session should never come up and pass prefixes any direction without 
a policy.

Oh btw, another story. I've had happen to me several times that all my 
sessions were flapped causing large outage, because I added or removed 
address family from a peer-group. Why is this still a thing? Why can't we 
dynamically add or remove address families from a running session?

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Wed Apr 26 22:18:29 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 876BB1315A9 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 22:18:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level: 
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RmpElQTClk8O for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 22:18:26 -0700 (PDT)
Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B43C131594 for <idr@ietf.org>; Wed, 26 Apr 2017 22:18:26 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 80A5FA6; Thu, 27 Apr 2017 07:18:24 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493270304; bh=XfdL9h2CvFrgiJVdYThhe2EKecJxQuVvtaZ1Fh56jFE=; h=Date:From:To:Subject:From; b=Vi+buPKUN9qViF2kc3KW1tiQwbRXzYXXzYCf/FD/5avAUSDf6PiPKSAwBDGI+vgoV fAD3A8mZgSFqGa9Qd3+WUqAbSDxFMNPZHKOGbX86tncrwWnbqJu3HwT4eLz/j57h/8 ZGDVlsTpuv+UUZ8x7JcQQzXr5raSylSSmSZOQ4Pg=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 7CB75A4 for <idr@ietf.org>; Thu, 27 Apr 2017 07:18:24 +0200 (CEST)
Date: Thu, 27 Apr 2017 07:18:24 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: idr@ietf.org
Message-ID: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Y2BGqX1td4qX77OUSHVKHd_Mxro>
Subject: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 05:18:27 -0000

Hi,

disregard the part in my last email about asking why all bgp sessions in a 
peer group are flapped when one changes the config of that peer group. 
Let's discuss that here instead.

If I add "address-family ipv4 multicast" to my peer-group and it wasn't 
there before, all router OSes I know will just reset all the sessions. 
This is baffling.

I see two problems:

1. Why can't capabilities be renegotiated without BGP session restaart?

2. Why doesn't it require a command to flap the sessions to adapt to the 
new configuration? If I want to run-through my changed policy-map, I have 
to "clear soft in" (or out). Why isn't there a "clear 
all-sessions-where-capabilities-have-changed" (paraphrasing).

Current behaviour is very disruptive. You change a line of config that you 
might think is a minor change, and BOOM, all your sessions are reset and 
you have a many-minutes outage.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Wed Apr 26 22:33:39 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6AFA1315A8 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 22:33:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LfUHpIlhMX9Q for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 22:33:36 -0700 (PDT)
Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92B6F1315A5 for <idr@ietf.org>; Wed, 26 Apr 2017 22:33:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1165; q=dns/txt; s=iport; t=1493271216; x=1494480816; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=xEFlF7CE1M8ik1ZXWt9y/HEqkkabO1PpMXNbTa1JqPo=; b=EanC0uHBig2VxCYdt6BadNitxAOTGOSBWmYjxcGabkTx0L2uk6bgafEj uBGAiS3goRHY9xXZ+awQlG41bWaqRE6kIDGhiu2lrZImUR3yKUBW1h5g2 2GyvkqjVuuGAM6netZmCLQq+FDUDbOg17jdGh+chrzMZKtDfFdZAyPDYe w=;
X-IronPort-AV: E=Sophos;i="5.37,257,1488844800"; d="scan'208";a="413412682"
Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 27 Apr 2017 05:33:36 +0000
Received: from [10.82.220.141] (rtp-vpn3-1160.cisco.com [10.82.220.141]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v3R5XZ3n000714; Thu, 27 Apr 2017 05:33:35 GMT
To: Mikael Abrahamsson <swmike@swm.pp.se>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se>
Cc: idr@ietf.org, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com>
Date: Wed, 26 Apr 2017 22:33:34 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/evB3NTmqyWSsLpVVzI4n9UR4fbY>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 05:33:38 -0000

Hi, Mikael:

Please take a look at the "BGP Dynamic Capability" draft:

   https://www.ietf.org/archive/id/draft-ietf-idr-dynamic-cap-14.txt

Regards,  -- Enke

On 4/26/17 10:18 PM, Mikael Abrahamsson wrote:
> 
> Hi,
> 
> disregard the part in my last email about asking why all bgp sessions in a peer group are 
> flapped when one changes the config of that peer group. Let's discuss that here instead.
> 
> If I add "address-family ipv4 multicast" to my peer-group and it wasn't there before, all
> router OSes I know will just reset all the sessions. This is baffling.
> 
> I see two problems:
> 
> 1. Why can't capabilities be renegotiated without BGP session restaart?
> 
> 2. Why doesn't it require a command to flap the sessions to adapt to the new configuration?
> If I want to run-through my changed policy-map, I have to "clear soft in" (or out). Why isn't
> there a "clear all-sessions-where-capabilities-have-changed" (paraphrasing).
> 
> Current behaviour is very disruptive. You change a line of config that you might think is a
> minor change, and BOOM, all your sessions are reset and you have a many-minutes outage.
> 


From nobody Wed Apr 26 23:14:14 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CE67127071 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 23:14:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level: 
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6YGC1hIydahA for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 23:14:10 -0700 (PDT)
Received: from uplift.swm.pp.se (ipv6.swm.pp.se [IPv6:2a00:801::f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 15671120326 for <idr@ietf.org>; Wed, 26 Apr 2017 23:14:09 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 03EF7A6; Thu, 27 Apr 2017 08:14:07 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493273648; bh=1cwd5HFR7cu+oMIxhSwrlnuxAQZfbZgosGjbfc5SLYU=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=MRySGf6M8nFd8ko/GDPhvYDJIS2QCXn9YIWa8WLhMQvYlpgmIMpgh9SuZqa6+SRS4 cbpoSpayDg4ttwmYF5GjTg1mI8hdriRX8aHwr6D8lWCfQanSrHsxQ3cifCfUOtTumv 71qAX2zgWaQ01tkXtY8yVyR7qxJDtqjCSZe/CK5E=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id F30F3A4; Thu, 27 Apr 2017 08:14:07 +0200 (CEST)
Date: Thu, 27 Apr 2017 08:14:07 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Enke Chen <enkechen@cisco.com>
cc: idr@ietf.org
In-Reply-To: <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com>
Message-ID: <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/rCozn0tnTmjckx1OnFr0YBfAsp4>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 06:14:12 -0000

On Wed, 26 Apr 2017, Enke Chen wrote:

> Hi, Mikael:
>
> Please take a look at the "BGP Dynamic Capability" draft:
>
>   https://www.ietf.org/archive/id/draft-ietf-idr-dynamic-cap-14.txt

So this is a draft first posted in 2001, with a last revision in 2011.

What's the back story here? This is obviously a well-known understood 
problem then for 16 years already, why don't we still have this in 2017?

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Wed Apr 26 23:18:02 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8F60128656 for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 23:18:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MjYekQfhMLEI for <idr@ietfa.amsl.com>; Wed, 26 Apr 2017 23:18:00 -0700 (PDT)
Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A790127071 for <idr@ietf.org>; Wed, 26 Apr 2017 23:18:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=586; q=dns/txt; s=iport; t=1493273880; x=1494483480; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=s08mscB3+gCyoBPFr1EjCKcf1SUgQe9+gYb0O014cT4=; b=GeuucFJhi0GjdQxZNKFRA1o8i3Jyrk45XXSKsaUkbB9etH/fHk0TnfzZ 9tDBe1GpgN3D7LMF2HxbeELRwdKIAzmwPPk+UySb0BpDdJkdHaWB06VRp 1EjWcc3d4fVAqxMSfU3vDjUXd33ycO6sidPRxDrfVvkATdPKQ5hxzavim c=;
X-IronPort-AV: E=Sophos;i="5.37,257,1488844800"; d="scan'208";a="417764681"
Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 27 Apr 2017 06:17:59 +0000
Received: from [10.82.220.141] (rtp-vpn3-1160.cisco.com [10.82.220.141]) by rcdn-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v3R6Hwop010422; Thu, 27 Apr 2017 06:17:59 GMT
To: Mikael Abrahamsson <swmike@swm.pp.se>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com> <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se>
Cc: idr@ietf.org, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <cf8fc34c-7de7-89a0-9c71-05b56037ec81@cisco.com>
Date: Wed, 26 Apr 2017 23:17:58 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/_GOk7qLlaMYq3UO-ClyDPcj3mMM>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 06:18:01 -0000

Low demand. The feature request has never bubbled to the top tier for implementation.

-- Enke

On 4/26/17 11:14 PM, Mikael Abrahamsson wrote:
> On Wed, 26 Apr 2017, Enke Chen wrote:
> 
>> Hi, Mikael:
>>
>> Please take a look at the "BGP Dynamic Capability" draft:
>>
>>   https://www.ietf.org/archive/id/draft-ietf-idr-dynamic-cap-14.txt
> 
> So this is a draft first posted in 2001, with a last revision in 2011.
> 
> What's the back story here? This is obviously a well-known understood problem then
> for 16 years already, why don't we still have this in 2017?
> 


From nobody Thu Apr 27 03:02:09 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C80B12894A for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 03:02:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EPJULhOJCWvu for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 03:02:06 -0700 (PDT)
Received: from mail-io0-x22e.google.com (mail-io0-x22e.google.com [IPv6:2607:f8b0:4001:c06::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC08D1204DA for <idr@ietf.org>; Thu, 27 Apr 2017 03:02:06 -0700 (PDT)
Received: by mail-io0-x22e.google.com with SMTP id r16so19444122ioi.2 for <idr@ietf.org>; Thu, 27 Apr 2017 03:02:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=FbcDsnEJI6iyJcwggl28Auov5i8RJ/+h3tlSiY0LmdQ=; b=nxdnU7fa7SMsk3oFWlF5aUniaB3jGYQ8S+tgB2vuJczfkm51VJTccFXaGwu+2AvAKG 2HTecDTijDhjTXKWkOdGHWm2PFPTl8giWxqjhxHt6LUjtJSeOMMk2tqlTuVOd0dbTBsh Hgs4zq9umairB91jthvVddngPJwaVjGnjdnRf1PSvrdogQWb4kd727UOGptI2anvWkKL XUgAKjhq3YgQRMcdkT8Ij/rZnIokVOeA92ST3mIv/qlO2hbEedD/imdVbYVH9cNk9+SC wPYOLVTI4uTdG5Q5VKv9OGdJMOIOJ6OnXpd1WFjMHiKImR4T2kf1LCTSm9av4XK07fZ1 w3tw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=FbcDsnEJI6iyJcwggl28Auov5i8RJ/+h3tlSiY0LmdQ=; b=ChfOEvpyQICtkkB6BqUfOfoVUx512EYf4WKio3ENZzgF2VmyeESNgjhGUJXzFXJX6+ itoT52CdjbiCdvpIXpuF9ny/2yY1xWGX0YaxmluJZco66SOcy471ZlE9icg7Cp/wvtM1 00lji2ZcZXfnjrvTt7Mxcek3yYdk8uociPZpKdnkYf2sPe+aHMtJN4B/iBbzG7ceW4Ih +uYieickDL/2wDfbXs24oZWdwLtcP2kq3ZZvIw6ZH5WG5nMC0EYu3WHrphpjtMLmYt06 FkRO8D3y+Vk38HqrROU2WVEvBkTWC0ni7fZcosEkkf8PKiwjqMomhYqx4xzn0duo58A7 YDHA==
X-Gm-Message-State: AN3rC/6HkJmwFCHgzBaqcqEoOsdDrPTHJNiV1HG3XTA/pddSTPQtks3n poZiHWcuthxMVtwIowPGihJOOG2apKw0
X-Received: by 10.107.5.207 with SMTP id 198mr3598237iof.186.1493287326123; Thu, 27 Apr 2017 03:02:06 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.62.24 with HTTP; Thu, 27 Apr 2017 03:02:03 -0700 (PDT)
Received: by 10.79.62.24 with HTTP; Thu, 27 Apr 2017 03:02:03 -0700 (PDT)
In-Reply-To: <alpine.DEB.2.02.1704270653291.5591@uplift.swm.pp.se>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com> <CAHw9_iKhRQpEGigqvqYoF0ca9D=-2VmESO8Fp4P_p1tZqpJgXQ@mail.gmail.com> <alpine.DEB.2.02.1704270653291.5591@uplift.swm.pp.se>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 27 Apr 2017 06:02:03 -0400
X-Google-Sender-Auth: -dBEODQrrypEmdCm_Fa8FhdNjDw
Message-ID: <CA+b+ER=tmfqANDb1-uE8UAgMD0fnSwbrYrXr27_oFwuc47Xvew@mail.gmail.com>
To: Mikael Abrahamsson <swmike@swm.pp.se>
Cc: Warren Kumari <warren@kumari.net>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a113ebcb89f0a19054e230c4b
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/sXmyHZjXlkxN5JhBOrHiHhQeCJ4>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 10:02:08 -0000

--001a113ebcb89f0a19054e230c4b
Content-Type: text/plain; charset=UTF-8

> Why can't we dynamically add or
> remove address families from a
> running session?

On your last point ... has been tried via dynamic capabilities ... Failed
to get properly implemented by multiple vendors ;(

https://tools.ietf.org/html/draft-ietf-idr-dynamic-cap-14

//R.

PS. Btw multisessions attempt falls into same category.

https://tools.ietf.org/html/draft-ietf-idr-bgp-multisession-07




On Apr 27, 2017 12:57 AM, "Mikael Abrahamsson" <swmike@swm.pp.se> wrote:

On Wed, 26 Apr 2017, Warren Kumari wrote:


> I was turning up Global Naps as a peer, so I log on and type:
> router bgp 8120
> neighbor 192.0.2.1 peer-as 1784
>
> ... and, as I press enter, one of the sysadmin folk turns around and
> asks me to hand him a sharpie. While doing so I bump my coffee mug,
> spilling 3 week old coffee (and a very cool mold colony I was
> culturing) all over my desk. What with the cursing and running to find
> paper towels and similar I don't come back to the router for a minute
> or two... by which time I can mysteriously no longer reach it. Turns
> out that becoming transit between 2 (at the time) large providers over
> a T1 makes your router unavailable. Eventually BGP falls down (because
> keepalives get starved), and then, before you are able to login again,
> it comes up.
>

This is a perfect example from the real world why a fail-close design is
needed. What you described, we all have happened to us if we've worked long
enough in this field.

Trains have brakes that need air pressure to release them. If hose breaks,
compressor breaks, whatever breaks, the brakes are applied.

A BGP session should never come up and pass prefixes any direction without
a policy.

Oh btw, another story. I've had happen to me several times that all my
sessions were flapped causing large outage, because I added or removed
address family from a peer-group. Why is this still a thing? Why can't we
dynamically add or remove address families from a running session?


-- 
Mikael Abrahamsson    email: swmike@swm.pp.se

_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr

--001a113ebcb89f0a19054e230c4b
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div dir=3D"auto"><span style=3D"font-family:sans-serif">=
&gt; Why can&#39;t we dynamically add or=C2=A0</span></div><div dir=3D"auto=
"><span style=3D"font-family:sans-serif">&gt; remove address families from =
a</span></div><div dir=3D"auto"><span style=3D"font-family:sans-serif">&gt;=
 running session?</span><br></div><div dir=3D"auto"><br></div><div>On your =
last point ... has been tried via dynamic capabilities ... Failed to get pr=
operly implemented by multiple vendors ;(<div dir=3D"auto"><br></div><div d=
ir=3D"auto"><a href=3D"https://tools.ietf.org/html/draft-ietf-idr-dynamic-c=
ap-14" target=3D"_blank">https://tools.ietf.org/html/<wbr>draft-ietf-idr-dy=
namic-cap-14</a><br></div><div dir=3D"auto"><br></div><div dir=3D"auto">//R=
.</div><div dir=3D"auto"><br></div><div dir=3D"auto">PS. Btw multisessions =
attempt falls into same category.</div><div dir=3D"auto"><br></div><div dir=
=3D"auto"><a href=3D"https://tools.ietf.org/html/draft-ietf-idr-bgp-multise=
ssion-07">https://tools.ietf.org/html/draft-ietf-idr-bgp-multisession-07</a=
><br></div><div dir=3D"auto"><br></div><div dir=3D"auto"><br></div><div dir=
=3D"auto"><br></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quot=
e">On Apr 27, 2017 12:57 AM, &quot;Mikael Abrahamsson&quot; &lt;<a href=3D"=
mailto:swmike@swm.pp.se" target=3D"_blank">swmike@swm.pp.se</a>&gt; wrote:<=
br type=3D"attribution"><blockquote class=3D"m_-5272231580478981712quote" s=
tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div=
 class=3D"m_-5272231580478981712quoted-text">On Wed, 26 Apr 2017, Warren Ku=
mari wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
<br>
I was turning up Global Naps as a peer, so I log on and type:<br>
router bgp 8120<br>
neighbor 192.0.2.1 peer-as 1784<br>
<br>
... and, as I press enter, one of the sysadmin folk turns around and<br>
asks me to hand him a sharpie. While doing so I bump my coffee mug,<br>
spilling 3 week old coffee (and a very cool mold colony I was<br>
culturing) all over my desk. What with the cursing and running to find<br>
paper towels and similar I don&#39;t come back to the router for a minute<b=
r>
or two... by which time I can mysteriously no longer reach it. Turns<br>
out that becoming transit between 2 (at the time) large providers over<br>
a T1 makes your router unavailable. Eventually BGP falls down (because<br>
keepalives get starved), and then, before you are able to login again,<br>
it comes up.<br>
</blockquote>
<br></div>
This is a perfect example from the real world why a fail-close design is ne=
eded. What you described, we all have happened to us if we&#39;ve worked lo=
ng enough in this field.<br>
<br>
Trains have brakes that need air pressure to release them. If hose breaks, =
compressor breaks, whatever breaks, the brakes are applied.<br>
<br>
A BGP session should never come up and pass prefixes any direction without =
a policy.<br>
<br>
Oh btw, another story. I&#39;ve had happen to me several times that all my =
sessions were flapped causing large outage, because I added or removed addr=
ess family from a peer-group. Why is this still a thing? Why can&#39;t we d=
ynamically add or remove address families from a running session?<div class=
=3D"m_-5272231580478981712quoted-text"><br>
<br>
-- <br>
Mikael Abrahamsson=C2=A0 =C2=A0 email: <a href=3D"mailto:swmike@swm.pp.se" =
target=3D"_blank">swmike@swm.pp.se</a><br>
<br></div><div class=3D"m_-5272231580478981712elided-text">
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/idr</a><br>
</div></blockquote></div><br></div></div></div>

--001a113ebcb89f0a19054e230c4b--


From nobody Thu Apr 27 06:44:38 2017
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 099ED12951D; Thu, 27 Apr 2017 06:44:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZtgHV1IR1jug; Thu, 27 Apr 2017 06:44:35 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9279B129519; Thu, 27 Apr 2017 06:44:35 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id 621A4B81C7F; Thu, 27 Apr 2017 06:44:11 -0700 (PDT)
To: jgs@juniper.net, yakov@juniper.net, tony.li@tony.li, skh@nexthop.com
X-PHP-Originating-Script: 30:errata_mail_lib.php
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: aretana@cisco.com, iesg@ietf.org, idr@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset=UTF-8
Message-Id: <20170427134411.621A4B81C7F@rfc-editor.org>
Date: Thu, 27 Apr 2017 06:44:11 -0700 (PDT)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/hTtD5B7slvdHur54IuLQY_KVO1s>
Subject: [Idr] [Errata Held for Document Update] RFC4271 (5000)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 13:44:37 -0000

The following errata report has been held for document update 
for RFC4271, "A Border Gateway Protocol 4 (BGP-4)". 

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=4271&eid=5000

--------------------------------------
Status: Held for Document Update
Type: Technical

Reported by: John Scudder <jgs@juniper.net>
Date Reported: 2017-04-19
Held by: Alvaro Retana (IESG)

Section: 9.1.1

Original Text
-------------
      If the route is learned from an external peer, then the local BGP
      speaker computes the degree of preference based on preconfigured
      policy information.  If the return value indicates the route is
      ineligible, the route MAY NOT serve as an input to the next phase
      of route selection; otherwise, the return value MUST be used as
      the LOCAL_PREF value in any IBGP readvertisement.


Corrected Text
--------------
      If the route is learned from an external peer, then the local BGP
      speaker computes the degree of preference based on preconfigured
      policy information.  If the return value indicates the route is
      ineligible, the route MUST NOT serve as an input to the next phase
      of route selection; otherwise, the return value MUST be used as
      the LOCAL_PREF value in any IBGP readvertisement.


Notes
-----
The original text uses "MAY NOT" capitalized as if it were an RFC 2119 keyword. However, RFC 2119 does not have any defined meaning for "MAY NOT". If a reader were to interpret this text as suggesting it is optional -- meaning, in effect, "the route MAY serve as an input to the next phase of route selection" -- that would be wrong and potentially problematic.

The minimal correction would be to use lower-case "may not", which makes the proper meaning reasonably clear. However, the English construct "may not" is notoriously ambiguous, therefore the proposed correction is "MUST NOT".

=====
After consultation with the idr WG, it was confirmed that the correct interpretation (based on implementation experience) is "MUST NOT".  --- Alvaro.

--------------------------------------
RFC4271 (draft-ietf-idr-bgp4-26)
--------------------------------------
Title               : A Border Gateway Protocol 4 (BGP-4)
Publication Date    : January 2006
Author(s)           : Y. Rekhter, Ed., T. Li, Ed., S. Hares, Ed.
Category            : DRAFT STANDARD
Source              : Inter-Domain Routing
Area                : Routing
Stream              : IETF
Verifying Party     : IESG


From nobody Thu Apr 27 06:45:03 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D42EF129520 for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 06:45:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.699
X-Spam-Level: 
X-Spam-Status: No, score=-1.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JwBRZB-Xy3x1 for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 06:45:00 -0700 (PDT)
Received: from mail-io0-x229.google.com (mail-io0-x229.google.com [IPv6:2607:f8b0:4001:c06::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1110C1294F7 for <idr@ietf.org>; Thu, 27 Apr 2017 06:44:59 -0700 (PDT)
Received: by mail-io0-x229.google.com with SMTP id k87so22939901ioi.0 for <idr@ietf.org>; Thu, 27 Apr 2017 06:44:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=rRF4CTsGMPGa0mX3WoXdbK+eXXvytYCa4t3i6X9VacU=; b=JI6gXvH2ztw6sJAmAw4zn857ufTisCB0imRBf0FMJpwbdmV9n4bC7jTaWVDcRStBle a/7+26WKRPVNdKHOb8KzmjzNaTT7f/Viui70HWpU9i5sVQmi5ntBRyxHRkZgdFD/+H94 vWtSRpiFp/dNofZz9df0gEM9fmNK1nHO9uA0p0p/yKQ7+SNX+LyYJnKKcknI5499gCnG DnUKACdUGIcoY1GUh/IqvCMCm0sQKmqKJ4eZ2EwBR4uclPexMKQIC4ca4JATDKV4aTsG 6Rv253gLBcsYZldCGtYRvODN08yJZH5du3QMlSfGqWXgp+9f4NPib2FxctzYR6vxBtxY 4cWA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=rRF4CTsGMPGa0mX3WoXdbK+eXXvytYCa4t3i6X9VacU=; b=tYlC5CQIVFRqYtN329SIJwnNmnIO0oRe3TKYrMBR7K9FzMLnMVbd0M8lPvpIz6vYFl WyG/SmP260q83BrB0RFRSX5hT30Waa/AgYtkw6Jp2LAQaIXgLxsNa090YyDpM1feD1ya dIyWLNLxFME66u9BT51EbGbf+2J7cSO3PX7tnO+mmkA5mXvLvhKjxXF1binqR6SdHae4 HmSYrr7/vE2eiOcX/NgJHdaL4mzpMZ9+mILhJMXO9Ad86s1E4Ze8XphkuiIezCkCjhM5 0x2dZjM3HuLVJw5kKJTpGj9ghBj58u4Mp5OCILK2jtzxabYxkEW4JOeW6g4kluExnZ9Z aK9Q==
X-Gm-Message-State: AN3rC/49IewAfm36oMaWK6PeTGN2VWv4QCwHPQoWdXg3VmfyyODUnr7S 11P79iYkD6sKyipU2C0X4Rc9mqnw1Q==
X-Received: by 10.107.5.12 with SMTP id 12mr154320iof.186.1493300698432; Thu, 27 Apr 2017 06:44:58 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.62.24 with HTTP; Thu, 27 Apr 2017 06:44:57 -0700 (PDT)
In-Reply-To: <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com> <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 27 Apr 2017 09:44:57 -0400
X-Google-Sender-Auth: YmODRNTsUIaHVWnmqjUpJXCFRkk
Message-ID: <CA+b+ERnfz9kVgJQBhwD2atq1yz+0fWCwYn8P7RsWuZdeqRfU-g@mail.gmail.com>
To: Mikael Abrahamsson <swmike@swm.pp.se>
Cc: Enke Chen <enkechen@cisco.com>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a113ef634ac721a054e262983
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/zA5p6u0xhOjVX6_M3mLIDM_GnFs>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 13:45:02 -0000

--001a113ef634ac721a054e262983
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

> What's the back story here? This is obviously a well-known understood
> problem then for 16 years already, why don't we still have this in 2017?


=E2=80=8BSince you asked :) ....

1. Actually number of customers asked for it various vendors however non of
them showed sufficient money so naturally features which are not associated
with significant revenue are not that high on anyone's list (unless BGP
code you are maintaining is your hobby).

2. If we talking intra-domian in most cases =E2=80=8Byou go via RRs. And it=
 is a
good practice to configure your RR side either with multiple loopbacks or
even different contexts for each address family so each SAFI is independent
from one another. That way within your domain you can add/delete AFI/SAFIs
without impacting others. Moreover in case of using multiple context (VMs
or LXCs for reflection) you get multithreading across SAFIs for free too.

3. And last in general what really matters is to continue forwarding
packets and not to impact your other peers by BGP session reset. And here
comes quite well supported feature BGP Graceful Restart (RFC4724) It is
applicable for both iBGP and eBGP peers. And honestly many networks still
do not have it enabled even though it has been shipping for long time in
most major BGP code basis.

Kind regards,
Robert.

--001a113ef634ac721a054e262983
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><div=
>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;b=
order-left:1px #ccc solid;padding-left:1ex">What&#39;s the back story here?=
 This is obviously a well-known understood problem then for 16 years alread=
y, why don&#39;t we still have this in 2017?</blockquote><div><br></div><di=
v><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-se=
rif;font-size:small">=E2=80=8BSince you asked :) ....</div><div class=3D"gm=
ail_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:smal=
l"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,helvet=
ica,sans-serif;font-size:small">1. Actually number of customers asked for i=
t various vendors however non of them showed sufficient money so naturally =
features which are not associated with significant revenue are not that hig=
h on anyone&#39;s list (unless BGP code you are maintaining is your hobby).=
=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:arial,helveti=
ca,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small">2. If we talkin=
g intra-domian in most cases =E2=80=8Byou go via RRs. And it is a good prac=
tice to configure your RR side either with multiple loopbacks or even diffe=
rent contexts for each address family so each SAFI is independent from one =
another. That way within your domain you can add/delete AFI/SAFIs without i=
mpacting others. Moreover in case of using multiple context (VMs or LXCs fo=
r reflection) you get multithreading across SAFIs for free too.=C2=A0</div>=
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small"><br></div><div class=3D"gmail_default" style=3D"font-fam=
ily:arial,helvetica,sans-serif;font-size:small">3. And last in general what=
 really matters is to continue forwarding packets and not to impact your ot=
her peers by BGP session reset. And here comes quite well supported feature=
 BGP Graceful Restart (RFC4724) It is applicable for both iBGP and eBGP pee=
rs. And honestly many networks still do not have it enabled even though it =
has been shipping for long time in most major BGP code basis.=C2=A0</div><d=
iv class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;=
font-size:small"><br></div><div class=3D"gmail_default" style=3D"font-famil=
y:arial,helvetica,sans-serif;font-size:small">Kind regards,</div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small">Robert.</div><div class=3D"gmail_default" style=3D"font-family:ari=
al,helvetica,sans-serif;font-size:small"><br></div><br></div></div></div></=
div>

--001a113ef634ac721a054e262983--


From nobody Thu Apr 27 06:50:05 2017
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 557E3129479; Thu, 27 Apr 2017 06:49:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2-Ug-LVFiSxT; Thu, 27 Apr 2017 06:49:56 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23AF4127B57; Thu, 27 Apr 2017 06:49:51 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id D8032B81D1B; Thu, 27 Apr 2017 06:49:26 -0700 (PDT)
To: jgs@juniper.net, yakov@juniper.net, tony.li@tony.li, skh@nexthop.com
X-PHP-Originating-Script: 30:errata_mail_lib.php
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: aretana@cisco.com, iesg@ietf.org, idr@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset=UTF-8
Message-Id: <20170427134926.D8032B81D1B@rfc-editor.org>
Date: Thu, 27 Apr 2017 06:49:26 -0700 (PDT)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Rj_DOrpjqbaGG0apztvuiimzIiA>
Subject: [Idr] [Errata Held for Document Update] RFC4271 (5001)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 13:49:57 -0000

The following errata report has been held for document update 
for RFC4271, "A Border Gateway Protocol 4 (BGP-4)". 

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=4271&eid=5001

--------------------------------------
Status: Held for Document Update
Type: Editorial

Reported by: John Scudder <jgs@juniper.net>
Date Reported: 2017-04-19
Held by: Alvaro Retana (IESG)

Section: 5

Original Text
-------------
   BGP implementations MUST recognize all well-known attributes.  Some
   of these attributes are mandatory and MUST be included in every
   UPDATE message that contains NLRI.  Others are discretionary and MAY
   or MAY NOT be sent in a particular UPDATE message.


Corrected Text
--------------
   BGP implementations MUST recognize all well-known attributes.  Some
   of these attributes are mandatory and MUST be included in every
   UPDATE message that contains NLRI.  Others are discretionary and may
   or may not be sent in a particular UPDATE message.

Notes
-----
The original text uses "MAY NOT" capitalized as if it were an RFC 2119 keyword. However, RFC 2119 does not have any defined meaning for "MAY NOT". In context, it is unlikely the reader would be at risk of misinterpreting the text, but nonetheless it's a misuse of RFC 2119 terminology and difficult to parse if reading closely.

(The replacement text was suggested by Eric Rosen; thanks.)

=====
I updated the Corrected Text to simply use lower case wording, eliminating any rfc2119-related confusion. -- Alvaro.

--------------------------------------
RFC4271 (draft-ietf-idr-bgp4-26)
--------------------------------------
Title               : A Border Gateway Protocol 4 (BGP-4)
Publication Date    : January 2006
Author(s)           : Y. Rekhter, Ed., T. Li, Ed., S. Hares, Ed.
Category            : DRAFT STANDARD
Source              : Inter-Domain Routing
Area                : Routing
Stream              : IETF
Verifying Party     : IESG


From nobody Thu Apr 27 09:47:48 2017
Return-Path: <kotikalapudi.sriram@nist.gov>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7414C129B2A; Thu, 27 Apr 2017 09:47:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.89
X-Spam-Level: 
X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id He5HYjHXc0nK; Thu, 27 Apr 2017 09:47:44 -0700 (PDT)
Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0130.outbound.protection.outlook.com [23.103.201.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DD2E1294A2; Thu, 27 Apr 2017 09:45:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=0mCpkm4U7v/d60M9wh7cMr2mi2hulH2eoI1rHUmKyNM=; b=iCwfChBKemBwnQlwrGjEYteiQ2qwUtt3tWfdohDKS9JW4Gae/41i7rfe8D3nPqPCHae7DQ9gCeeMGLGoCUIjLxTL4fqr4EMBtzKAPysZMdOQp+jCYjYKYAJ/nfzlvrS04M8BW0/1gX+INj9I2la7TlQgs+mue36kH+5x18YStbw=
Received: from DM2PR09MB0446.namprd09.prod.outlook.com (10.161.252.145) by DM2PR09MB0445.namprd09.prod.outlook.com (10.161.252.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1047.13; Thu, 27 Apr 2017 16:45:45 +0000
Received: from DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) by DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) with mapi id 15.01.1047.019; Thu, 27 Apr 2017 16:45:45 +0000
From: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>
To: "sidr@ietf.org" <sidr@ietf.org>
CC: "sidr-chairs@ietf.org" <sidr-chairs@ietf.org>, "draft-ietf-sidr-bgpsec-protocol@ietf.org" <draft-ietf-sidr-bgpsec-protocol@ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, "idr@ietf.org" <idr@ietf.org>, "Alvaro Retana (aretana)" <aretana@cisco.com>
Thread-Topic: New Version Notification for draft-ietf-sidr-bgpsec-protocol-23.txt
Thread-Index: AdK/dE/cGtE4Kf42TSynIyaLjwDTjg==
Date: Thu, 27 Apr 2017 16:45:45 +0000
Message-ID: <DM2PR09MB0446CC70EFBC50E160FAFB5484100@DM2PR09MB0446.namprd09.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=nist.gov;
x-originating-ip: [129.6.140.122]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM2PR09MB0445; 7:Mh9tAMFOU59pud2vGtBBIW4fZQI6cQlbMnH5CgaM6SzuaiWgSQHEBBdAAeDwBNVzicuqIT20MtlYtwZZ1NO2mcHjokZXOjqBZ24UJgMEmCBGPAvI1PIrt8TxnKIEZxxOgfBTf7RwhMyh9lemgBx94C/ovRwAus3nUrBMu/4MS6HdgWlJGW5wKrj8eJ7POMvqKYL/G8cdhS9J9WbZdrE7EktXV/yd0C8mLGCtSP3ayKn/NJs1xBe3ol8fIo33GRP9mTekDvwT2qC+P+mlXCBg/otS36wTWpur3wRiTCBCNLlYY7xgNstSaWkhRVdTSrn+rE6bE+ulvjvi1niPyhvTSg==
x-ms-office365-filtering-correlation-id: 26b3942e-caf8-4675-e09e-08d48d8cd9bb
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081)(201702281549075); SRVR:DM2PR09MB0445; 
x-microsoft-antispam-prvs: <DM2PR09MB0445A15E07F77B90FF2F475184100@DM2PR09MB0445.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(65766998875637)(120809045254105)(192374486261705)(95692535739014)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(6055026)(6041248)(20161123564025)(20161123560025)(20161123555025)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(6072148); SRVR:DM2PR09MB0445; BCL:0; PCL:0; RULEID:; SRVR:DM2PR09MB0445; 
x-forefront-prvs: 029097202E
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39850400002)(39450400003)(39400400002)(39410400002)(39840400002)(39860400002)(377424004)(13464003)(377454003)(54164003)(24454002)(66066001)(3660700001)(50986999)(54356999)(7736002)(33656002)(189998001)(7110500001)(53546009)(10710500007)(122556002)(3280700002)(77096006)(4326008)(2906002)(25786009)(1730700003)(8936002)(606005)(2351001)(86362001)(229853002)(8676002)(81166006)(6506006)(6436002)(7906003)(2900100001)(7696004)(6916009)(110136004)(9686003)(2473003)(5890100001)(99286003)(55016002)(54896002)(6306002)(236005)(5640700003)(54906002)(38730400002)(230783001)(5630700001)(790700001)(6116002)(102836003)(97736004)(74316002)(5660300001)(3846002)(15650500001)(53936002)(2501003)(2420400007); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR09MB0445; H:DM2PR09MB0446.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_DM2PR09MB0446CC70EFBC50E160FAFB5484100DM2PR09MB0446namp_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Apr 2017 16:45:45.2457 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR09MB0445
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/zN0m9F83QzDSKUuUqWOwpAO3Om0>
Subject: [Idr] FW: New Version Notification for draft-ietf-sidr-bgpsec-protocol-23.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 16:47:47 -0000

--_000_DM2PR09MB0446CC70EFBC50E160FAFB5484100DM2PR09MB0446namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_DM2PR09MB0446CC70EFBC50E160FAFB5484100DM2PR09MB0446namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_DM2PR09MB0446CC70EFBC50E160FAFB5484100DM2PR09MB0446namp_--


From nobody Thu Apr 27 10:25:16 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32DC1129B35 for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 10:25:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id psaFIo79HR7T for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 10:25:14 -0700 (PDT)
Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 704F1129B45 for <idr@ietf.org>; Thu, 27 Apr 2017 10:22:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1507; q=dns/txt; s=iport; t=1493313749; x=1494523349; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=fNJSUmz+OTxYTcYA0NNxVZiwwm9CpcZvH8X5yL2PHsU=; b=A5NwCUVVTpdrJ4vC1FLQ+0nwTHWcTNSgvms25bwoVOiBzTtr/v3HcLo9 8VVWLMtHPe5rerhskTgQ+TCEO9uHyD01cEB9JA+RnMINQgD3Wmy0yRcfO l3GQ4qc9ovvmU7upiOVky+PJ2EB597dWP/mbzpkzptf9+G7pgohx1wH4P M=;
X-IronPort-AV: E=Sophos;i="5.37,384,1488844800"; d="scan'208";a="241510818"
Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 27 Apr 2017 17:22:28 +0000
Received: from [10.82.250.87] (rtp-vpn6-597.cisco.com [10.82.250.87]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v3RHMRUS009018; Thu, 27 Apr 2017 17:22:28 GMT
To: Robert Raszuk <robert@raszuk.net>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com> <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se> <CA+b+ERnfz9kVgJQBhwD2atq1yz+0fWCwYn8P7RsWuZdeqRfU-g@mail.gmail.com>
Cc: Mikael Abrahamsson <swmike@swm.pp.se>, idr wg <idr@ietf.org>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <e79bcc96-cd21-6370-a9da-40e58068a8a6@cisco.com>
Date: Thu, 27 Apr 2017 10:22:27 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <CA+b+ERnfz9kVgJQBhwD2atq1yz+0fWCwYn8P7RsWuZdeqRfU-g@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/bSPeim0V0hFY_btIXql1RlGYvTo>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 17:25:15 -0000

Certainly with GR, the need for "Dynamic Capability" is significantly reduced.

Thanks.  -- Enke

On 4/27/17 6:44 AM, Robert Raszuk wrote:
>  
> 
>     What's the back story here? This is obviously a well-known understood problem then for 16 years already, why don't we still have this in 2017?
> 
> 
> ​Since you asked :) ....
> 
> 1. Actually number of customers asked for it various vendors however non of them showed sufficient money so naturally features which are not associated with significant revenue are not that high on anyone's list (unless BGP code you are maintaining is your hobby). 
> 
> 2. If we talking intra-domian in most cases ​you go via RRs. And it is a good practice to configure your RR side either with multiple loopbacks or even different contexts for each address family so each SAFI is independent from one another. That way within your domain you can add/delete AFI/SAFIs without impacting others. Moreover in case of using multiple context (VMs or LXCs for reflection) you get multithreading across SAFIs for free too. 
> 
> 3. And last in general what really matters is to continue forwarding packets and not to impact your other peers by BGP session reset. And here comes quite well supported feature BGP Graceful Restart (RFC4724) It is applicable for both iBGP and eBGP peers. And honestly many networks still do not have it enabled even though it has been shipping for long time in most major BGP code basis. 
> 
> Kind regards,
> Robert.
> 
> 


From nobody Thu Apr 27 12:30:05 2017
Return-Path: <warren@kumari.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23CDD129C26 for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 12:30:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=kumari-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id onUBbkEpNlqq for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 12:30:01 -0700 (PDT)
Received: from mail-qk0-x229.google.com (mail-qk0-x229.google.com [IPv6:2607:f8b0:400d:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E1A7129477 for <idr@ietf.org>; Thu, 27 Apr 2017 12:26:53 -0700 (PDT)
Received: by mail-qk0-x229.google.com with SMTP id h123so36280775qke.0 for <idr@ietf.org>; Thu, 27 Apr 2017 12:26:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kumari-net.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=q1pviIH8yw0ihQzWZ657WYAB5FmzN9Ix5+pDNIZU+aY=; b=Yu4a0ZxenPocNEUaeXNACu2l2QUdHDdypvZ3aSTsW40qDkrYZkM0f5ltAuCXbx6pIH v00nTUzarbE08A8N2rerBvrVeilOmCFCopdDFnktUbk5mPjG7p4Gc5WQu8iXebSgaOS/ 7oEl8ttABtu64rZZ2mFipquvytqu32lCzZXMnTUEHGK+tHTeZ8zSCbQWMMA7yLVlm4AM oKt0lOAhtgYxoWvQ0TruW1//QesBHZoYPCzrn1l1wOUKNgNu8oMHFP6iSYNQa2mH2K5j RMdqg/OlWaeTfeIiPtZvai6T3Imlro0aiwWuuQH7K4c5bxZJwO2KQ0befRnpZYwbK2nj 3yWQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=q1pviIH8yw0ihQzWZ657WYAB5FmzN9Ix5+pDNIZU+aY=; b=k3z0/kwwBjwfpeXHke1NAaD0s0lbkgq/xe8Ef5nBLOdcfAeYhrpdNeUg1NKMsPRI/2 AY/aPFXMLDE9d2CZ566UNLg1Am5YfdKHzkLmUqFY6mMVBtqjnjPxTJe0F/iHI9KY95G7 9l1ecCZ1WyYGwlgRa1kIYInZ8EX2cuILcwpRt9IU6odsrFYwH4GTv4B++wmEGfvYvI3c golmzvLTpVSV1GrGNujiqL9fUZlsMmDaRvZo237YKud+R/r5mlqS/iGEtMC/F7NfNJ1b ry1Z9MtKBVLumOb329Ti1HoALN6fF043GwT2I7fUL1tKgvL3BcpoIL5PTUkJsKMGe3qt 89UQ==
X-Gm-Message-State: AN3rC/5zxGgv9kvOOAa4XmI9CbPuuAZBnx+f0FfD12qYEzAk24qhjjh+ aWfcQpVDLJDweGpWSrJ11J0InCdNPSTP
X-Received: by 10.233.223.134 with SMTP id t128mr7023471qkf.64.1493321212068;  Thu, 27 Apr 2017 12:26:52 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.12.189.164 with HTTP; Thu, 27 Apr 2017 12:26:11 -0700 (PDT)
In-Reply-To: <CAHgCvCNRYyH9wyT=vtVk34_Wc_rqrX0z1D9FCx+cZzLBOXmFLw@mail.gmail.com>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com> <CAHw9_iKhRQpEGigqvqYoF0ca9D=-2VmESO8Fp4P_p1tZqpJgXQ@mail.gmail.com> <CAHgCvCNRYyH9wyT=vtVk34_Wc_rqrX0z1D9FCx+cZzLBOXmFLw@mail.gmail.com>
From: Warren Kumari <warren@kumari.net>
Date: Thu, 27 Apr 2017 15:26:11 -0400
Message-ID: <CAHw9_i+1HA=o+Lh7NgUxzD-OFq8u6kR5Se5z=tHttkVQ_QaSzg@mail.gmail.com>
To: Alexander Azimov <aa@qrator.net>
Cc: Christopher Morrow <morrowc.lists@gmail.com>, idr wg <idr@ietf.org>,  Robert Raszuk <robert@raszuk.net>
Content-Type: text/plain; charset=UTF-8
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/UmGXHKeYKXjTX7AeoW3F9Os4K3c>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 19:30:04 -0000

On Wed, Apr 26, 2017 at 5:52 PM, Alexander Azimov <aa@qrator.net> wrote:
> Hi all,
>
>
> While I do like idea of making simple fix to avoid leaks of full table (this
> how I understand the goal of this document) I'm afraid that this will only
> result in change from absence of policy to empty policy.

Empty policy is fine -- I have a number of sessions where I
intentionally have no policy. What I don't want to have happen is
*accidental* sessions without policy -- because, Murphy's law says
that that will happen wherever it is most likely to hurt / just as I
get onto a plane / right before a RIPE / NANOG meeting, so all my
closest friends can point and jeer.


> This requirement of
> policy existence will not automatically result in requirement of
> understanding of its purpose.

Yup, 'tis a well known adage that you can't fix stupid. I don't think
of this as forcing people to design perfect (or even sane) policy; I
think that it is more like the covers on electrical outlets. Sure, I
can find a screwdriver and wiggle it about in the socket[0], but the
holes are small enough that I shouldn't accidentally electrocute
myself while plugging in my laptop....

>
>
>
> Additionally, I would like to argue that full table leaks are still common
> now. They do exist, but they are rare, thanks to policies at upstream
> providers, or, at least prefix limit.

They are rarer these days -- but they do still happen. This doesn't
only stop full table leaks though -- it also stops the stupid "whoops,
I just announced all my networks to provider X, I only meant to
announce this /24, but I didn't get a chance to apply policy yet..."

W

>
>
> 2017-04-26 22:17 GMT+03:00 Warren Kumari <warren@kumari.net>:
>>
>> On Wed, Apr 26, 2017 at 10:08 AM, Christopher Morrow
>> <morrowc.lists@gmail.com> wrote:
>> >
>> >
>> > On Wed, Apr 26, 2017 at 9:56 AM, Robert Raszuk <robert@raszuk.net>
>> > wrote:
>> >>>
>> >>> > And if you are customer and have 4 prefixes in BGP table thing are
>> >>> > fine. If
>> >>> > you by accident become transit and advertise fulm table around I
>> >>> > think
>> >>> > we
>> >>> > can do better in BGP to protect from it then mandate policy.
>> >>>
>> >>> Evidence shows that, as of today, we can not.
>> >>
>> >>
>> >> Have anyone actually tried ?
>> >>
>> >> The BGP origin validation was at least one attempt.
>> >>
>> >
>> > origin validation doesn't protect against 'accidentally i became
>> > transit,
>> > whoops!' mistakes.
>>
>> ... and I suspect that basically everyone who actually run networks
>> have done this (and probably more than once.)
>>
>> My first time was in around 1997 or so - I managed to become transit
>> (on my Cisco AGS+!) between Global Naps and (IIRC) PSI.
>>
>> I was turning up Global Naps as a peer, so I log on and type:
>> router bgp 8120
>> neighbor 192.0.2.1 peer-as 1784
>>
>> ... and, as I press enter, one of the sysadmin folk turns around and
>> asks me to hand him a sharpie. While doing so I bump my coffee mug,
>> spilling 3 week old coffee (and a very cool mold colony I was
>> culturing) all over my desk. What with the cursing and running to find
>> paper towels and similar I don't come back to the router for a minute
>> or two... by which time I can mysteriously no longer reach it. Turns
>> out that becoming transit between 2 (at the time) large providers over
>> a T1 makes your router unavailable. Eventually BGP falls down (because
>> keepalives get starved), and then, before you are able to login again,
>> it comes up.
>>
>>
>> Stuff like this happens all the time - bringing peers up without
>> policy is a: really easy to accidentally do and b: hurts both the
>> person doing it, and everyone caught in the collateral damage.
>>
>> >
>> > bgpsec also doesn't protect against this scenario.
>> >
>> > There have been a few years worth of papers/analysis out of academia
>> > (and at
>> > least 2 drafts in the ietf) talking about the above.
>> >
>> >>
>> >> The other one could be as simple as "ebgp policy auto" where based in
>> >> the
>> >> IRRDB and your peer's AS router can build a policy automagically using
>> >> say
>> >> BGPQ3.
>> >>
>> >
>> > are you suggesting that the router build it's filtering directly (on
>> > it's
>> > own) from an IRRdb? that seems interesting, but also fraught with
>> > peril...
>> >
>> > I also see problems in setting up the configuration parts for this, for
>> > a
>> > single network it probably isn't rough, but for a more generic solution
>> > it's
>> > going to involve more configuration toggling than just enabling a policy
>> > on
>> > the peerings. At least you'd need to account for:
>> >   1) which irrdb to pull content from
>> >   2) which protocol to use to do that pulling
>> >   3) authentication?
>> >   4) results qualifications (larger than X, smaller than Y, general
>> > content
>> > sanity)
>> >   5) how to match/query the irrdb for the particular peerings on this
>> > device
>> >   6) timeouts for operations
>> >   7) scheduling of operations
>> >   8) security bits around the new 'service' enabled on this device
>> >
>> > there are other things to account for as well...
>>
>>    9) making sure that you have announced just enough (and received)
>> just enough that you can actually reach the irrdb
>>
>> I'm saddened that something which is basically a trigger safety to
>> make it harder to shoot myself in the foot is this hard....
>>
>> W
>>
>> >
>> >>
>> >> http://snar.spb.ru/prog/bgpq3/
>> >>
>> >
>> > that's very vendor specific :(
>> >
>> >>
>> >> Otherwise while Jared, you and perhaps most folks on this list already
>> >> have automated ways to build nice and accurate policies I suspect they
>> >> are
>> >> those which do not. And those would either put "allow all" or will now
>> >> start
>> >> looking for hints "what do I put in".
>> >>
>> >
>> > vendors who sold gear could probably offer solutions in this space.
>> >
>> >>
>> >> And if the end result is what you are doing twice a day why router's
>> >> can't
>> >> do it themselves assuming IRRDB or any other src of truth is accurate ?
>> >>
>> >
>> > 'how often does this data change?'
>> > 'how often do I want to refresh peering data on devices (from
>> > neighbors)'
>> > 'what is the sla for this part of the service'
>> >
>> > Some folk do it more 'dynamically' (some providers update 4 or 6 times
>> > day),
>> > some folk do it 'less dynamically' (email nacr-list@uu.net .. data
>> > updated
>> > in 24hrs)
>> >
>> > 'why not do it more!' has lots of reasons in both directions, but really
>> > that's not the point of this draft anyway.
>> >
>> > _______________________________________________
>> > Idr mailing list
>> > Idr@ietf.org
>> > https://www.ietf.org/mailman/listinfo/idr
>> >
>>
>>
>>
>> --
>> I don't think the execution is relevant when it was obviously a bad
>> idea in the first place.
>> This is like putting rabid weasels in your pants, and later expressing
>> regret at having chosen those particular rabid weasels and that pair
>> of pants.
>>    ---maf
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>
>
>
>
> --
> | Alexander Azimov  | HLL l QRATOR
> | tel.: +7 499 241 81 92
> | mob.: +7 915 360 08 86
> | skype: mitradir
> | mailto: aa@qrator.net
> | visit: www.qrator.net



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf


From nobody Thu Apr 27 12:56:46 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81DD31294D2 for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 12:56:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AWpJgICaftl9 for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 12:56:44 -0700 (PDT)
Received: from mail-it0-x230.google.com (mail-it0-x230.google.com [IPv6:2607:f8b0:4001:c0b::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76E3E129B72 for <idr@ietf.org>; Thu, 27 Apr 2017 12:53:21 -0700 (PDT)
Received: by mail-it0-x230.google.com with SMTP id 70so22259296ita.0 for <idr@ietf.org>; Thu, 27 Apr 2017 12:53:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=EuRWmvkBo3J0E2a5ABFqHh17Y1iiWeUt2Fr4OgXdyN4=; b=Gfuy1O+fb852DjwmOvpOmWi+Vp6Awnr7mrN/xzrytZ1mupcXa9zNAK8iVpJU1YKvZU d5qH40KqV0wsAoZWG03moGDAoi5e1j0943dc00PeBqWRA08cnOD85kIGAESTkDzknoSp O7zoZ00FZvZxLgelzfPor4TDN6sSuGkiDz3DEpdHsTIezfuNyZhluH0uXkYHNV++agwj as5nGnwZ0mNi5jf2Hmmqa9x+AAQlgmgAkv8tk9dAfcFOMnFft9bPpvI3bFow3K20kNwX x10uzOL8v967kjcC3pB77CRzzoPrcPfQa/7O5I16gDufVCySCHzFDpLqPpci3SsAx6bX ekiw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=EuRWmvkBo3J0E2a5ABFqHh17Y1iiWeUt2Fr4OgXdyN4=; b=KO60l965MKsSXOPB7h0fD7KsH5seoxhIIuhsxOilIGzmLDyOANOqwcbbFZNJ2DwGTo s4BLnBAfsMwpm0ZU+iI78INkGkA9A1sUS9tSu6s41XX0jwYmsOyajOaRRARctdgB6CrY dhpzizV+ntCftIkzKq7lImLa+JNKA7gxxuDL17V09PcdBKR6HT3gNhCB+tdLELz0QnQp tJq0TNP+RlLmt9DlKG180bR/tejZ9rZg8QbPia8Clsy5ZgsHfhG407WNjE89642zHIXs w9nyx3d5KkXSYy0TeLp5X0jBiQ+DO5VdXsPsX5x/hd3b+muSD2ydmgkxzt+cJuLGQeCr tUmw==
X-Gm-Message-State: AN3rC/7673YUACVY0DF5b/B2Xh64JLPo2DlOyOTkkgtc7jsD1kJOT7Qq XebOfTiWV0WaayjcO2vN8k7UjdmZYQ==
X-Received: by 10.36.46.69 with SMTP id i66mr5139500ita.59.1493322800349; Thu, 27 Apr 2017 12:53:20 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.62.24 with HTTP; Thu, 27 Apr 2017 12:53:19 -0700 (PDT)
In-Reply-To: <CAHw9_i+1HA=o+Lh7NgUxzD-OFq8u6kR5Se5z=tHttkVQ_QaSzg@mail.gmail.com>
References: <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <50353B76-1323-4828-88D6-25954DA1E344@puck.nether.net> <20170425221104.GS30063@pfrc.org> <023e01d2be72$031ac180$4001a8c0@gateway.2wire.net> <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com> <CAHw9_iKhRQpEGigqvqYoF0ca9D=-2VmESO8Fp4P_p1tZqpJgXQ@mail.gmail.com> <CAHgCvCNRYyH9wyT=vtVk34_Wc_rqrX0z1D9FCx+cZzLBOXmFLw@mail.gmail.com> <CAHw9_i+1HA=o+Lh7NgUxzD-OFq8u6kR5Se5z=tHttkVQ_QaSzg@mail.gmail.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 27 Apr 2017 15:53:19 -0400
X-Google-Sender-Auth: XHinTeqQ2gI5JRQq6HBuVaBzDXs
Message-ID: <CA+b+ERnezGCy4C6RGHZt2sP2Xv9jZX9q3uZZwAY0wNirSReD5g@mail.gmail.com>
To: Warren Kumari <warren@kumari.net>
Cc: Alexander Azimov <aa@qrator.net>, Christopher Morrow <morrowc.lists@gmail.com>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114ab26c0cebc3054e2b4f38
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/V32lNZ7J7a77u9ue-WCOWyP8_nQ>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 19:56:45 -0000

--001a114ab26c0cebc3054e2b4f38
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

>
> Empty policy is fine -- I have a number of sessions where I
> intentionally have no policy. What I don't want to have happen is
> *accidental* sessions without policy


=E2=80=8BBGP peers are usually configured using peer groups or peer templat=
es.
Policy (especially empty one) would be part of such template anyway. So
changing the default =E2=80=8Bwould not help to prevent anything once the t=
emplate
is applied. And session without template being applied would in vast
majority of cases not come up anyway.

Only in stub multi-homed small networks which someone configures peers by
hand the new default maybe will help.

As mentioned before for those cases much better would be to have BGP build
in protection.

*Example for new BGP rule: *

*IPv4 and IPv6 eBGP received routes to an AS (routes where AS_PATH contains
other then local ASN) may be advertised over eBGP session to other ASes
only when explicitly allowed by policy. *

Such change in default is actually much more practical to really help in a
lot of cases while not breaking anything to those which have little stub AS
and advertise their PI space of 4 routes. Such change also address cases
where someone just adds once "send all" to template.

Best,
Robert.

--001a114ab26c0cebc3054e2b4f38
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #c=
cc solid;padding-left:1ex">Empty policy is fine -- I have a number of sessi=
ons where I<br>
intentionally have no policy. What I don&#39;t want to have happen is<br>
*accidental* sessions without policy=C2=A0</blockquote><div><br></div><div>=
<div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-seri=
f;font-size:small">=E2=80=8BBGP peers are usually configured using peer gro=
ups or peer templates. Policy (especially empty one) would be part of such =
template anyway. So changing the default =E2=80=8Bwould not help to prevent=
 anything once the template is applied. And session without template being =
applied would in vast majority of cases not come up anyway.</div><div class=
=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-siz=
e:small"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,=
helvetica,sans-serif;font-size:small">Only in stub multi-homed small networ=
ks which someone configures peers by hand the new default maybe will help.=
=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:arial,helveti=
ca,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small">As mentioned be=
fore for those cases much better would be to have BGP build in protection.=
=C2=A0</div><div class=3D"gmail_default" style=3D"font-family:arial,helveti=
ca,sans-serif;font-size:small"><br></div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif;font-size:small"><u>Example for =
new BGP rule:=C2=A0</u></div><div class=3D"gmail_default" style=3D"font-fam=
ily:arial,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gma=
il_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small=
"><b>IPv4 and IPv6 eBGP received routes to an AS (routes where AS_PATH cont=
ains other then local ASN) may be advertised over eBGP session to other ASe=
s only when explicitly allowed by policy.=C2=A0</b></div><div class=3D"gmai=
l_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"=
><br></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetic=
a,sans-serif;font-size:small">Such change in default is actually much more =
practical to really help in a lot of cases while not breaking anything to t=
hose which have little stub AS and advertise their PI space of 4 routes. Su=
ch change also address cases where someone just adds once &quot;send all&qu=
ot; to template.</div><div class=3D"gmail_default" style=3D"font-family:ari=
al,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_defa=
ult" style=3D"font-family:arial,helvetica,sans-serif;font-size:small">Best,=
</div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,san=
s-serif;font-size:small">Robert.</div><div class=3D"gmail_default" style=3D=
"font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div cla=
ss=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;font-s=
ize:small"><br></div><div class=3D"gmail_default" style=3D"font-family:aria=
l,helvetica,sans-serif;font-size:small"><br></div><div class=3D"gmail_defau=
lt" style=3D"font-family:arial,helvetica,sans-serif;font-size:small"><br></=
div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-=
serif;font-size:small"><br></div><br></div><div>=C2=A0</div></div><br></div=
></div>

--001a114ab26c0cebc3054e2b4f38--


From nobody Thu Apr 27 13:13:59 2017
Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1BEC129543 for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 13:13:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level: 
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CB9LEbgWZGvJ for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 13:13:55 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id B83471286B1 for <idr@ietf.org>; Thu, 27 Apr 2017 13:10:14 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 0F81D1E377; Thu, 27 Apr 2017 16:17:37 -0400 (EDT)
Date: Thu, 27 Apr 2017 16:17:36 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Mikael Abrahamsson <swmike@swm.pp.se>
Cc: Enke Chen <enkechen@cisco.com>, idr@ietf.org
Message-ID: <20170427201736.GF22975@pfrc.org>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com> <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/0rnOab0-NEW3xR-ICENyf6GDpHI>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 20:13:57 -0000

On Thu, Apr 27, 2017 at 08:14:07AM +0200, Mikael Abrahamsson wrote:
> >  https://www.ietf.org/archive/id/draft-ietf-idr-dynamic-cap-14.txt
> 
> So this is a draft first posted in 2001, with a last revision in 2011.
> 
> What's the back story here? This is obviously a well-known
> understood problem then for 16 years already, why don't we still
> have this in 2017?

Part of the issue with dynamic caps was that they renegotiated capabilities
in general.  The edge cases of having to rebuild everything dynamically that
you could negotiate and still keep a peering session up was... ugly.

A simple example would be what would happen if you added or deleted the
add-paths capability. 

I know there was discussion at one point to simplify the proposal to simply
to allow new AFI/SAFI to be re-negotiated.

The BGP multisession proposal tried to cover one other piece of the
headache.  Today, if you get a failure in one AFI/SAFI, we tear down BGP.
(You're allowed to "shut it down", but such well behaved failures are
relatively few.)  By having different sessions for the AFI/SAFI, you get
structural segregation of those classes of packet formatting errors.

The issues with multisession, aside from burning precious sockets, is that
there's state that is really shared among the family types.  The question
then becomes how you share that state appropriately when the sessions can
move at different asynchronous paths.

-- Jeff


From nobody Thu Apr 27 13:57:47 2017
Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D29C5129B40 for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 13:57:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level: 
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7nw0VWayUfPV for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 13:57:44 -0700 (PDT)
Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C75A112878D for <idr@ietf.org>; Thu, 27 Apr 2017 13:54:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1782; q=dns/txt; s=iport; t=1493326451; x=1494536051; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=jxSdDWXwoielciUfkrRONpESui/R0B7My1pC8U8vjH0=; b=FdPZuymkoiVFkr/s2UH7Kk1SNBRAzWDv6DFmZh8hyYIqvi/UuhvVTJph kXWK2TnRjUsYBelxkgfBRxybt5kVtda9O5pWDZj6USW0ioimVrRwTaH7S mpASG97FtN4sYaIpDb8/TSFmCuE1O1s9X4cMbRYm2zdBJIYxWcK726vdo Y=;
X-IronPort-AV: E=Sophos;i="5.37,385,1488844800"; d="scan'208";a="241604638"
Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 27 Apr 2017 20:54:11 +0000
Received: from [10.41.56.193] ([10.41.56.193]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v3RKsAn2004319; Thu, 27 Apr 2017 20:54:11 GMT
To: Jeffrey Haas <jhaas@pfrc.org>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com> <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se> <20170427201736.GF22975@pfrc.org>
Cc: Mikael Abrahamsson <swmike@swm.pp.se>, idr@ietf.org, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <e4ad3bd2-73cd-c1f7-6ef4-8bbd974974ae@cisco.com>
Date: Thu, 27 Apr 2017 13:54:10 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <20170427201736.GF22975@pfrc.org>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/eHmxsKe7s1dSazOroou8xzV0NMo>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 20:57:46 -0000

Hi, Jeff:

On 4/27/17 1:17 PM, Jeffrey Haas wrote:
> On Thu, Apr 27, 2017 at 08:14:07AM +0200, Mikael Abrahamsson wrote:
>>>  https://www.ietf.org/archive/id/draft-ietf-idr-dynamic-cap-14.txt
>>
>> So this is a draft first posted in 2001, with a last revision in 2011.
>>
>> What's the back story here? This is obviously a well-known
>> understood problem then for 16 years already, why don't we still
>> have this in 2017?
> 
> Part of the issue with dynamic caps was that they renegotiated capabilities
> in general.  The edge cases of having to rebuild everything dynamically that
> you could negotiate and still keep a peering session up was... ugly.
> 
> A simple example would be what would happen if you added or deleted the
> add-paths capability.

That is a reasonable summary.

> 
> I know there was discussion at one point to simplify the proposal to simply
> to allow new AFI/SAFI to be re-negotiated.

If there is sufficient interest, we can limit the capability to just AFI/SAFI
without much work.  With GR though the interest seems to have dropped.

Thanks.  -- Enke

> 
> The BGP multisession proposal tried to cover one other piece of the
> headache.  Today, if you get a failure in one AFI/SAFI, we tear down BGP.
> (You're allowed to "shut it down", but such well behaved failures are
> relatively few.)  By having different sessions for the AFI/SAFI, you get
> structural segregation of those classes of packet formatting errors.
> 
> The issues with multisession, aside from burning precious sockets, is that
> there's state that is really shared among the family types.  The question
> then becomes how you share that state appropriately when the sessions can
> move at different asynchronous paths.
> 
> -- Jeff
> 


From nobody Thu Apr 27 15:54:17 2017
Return-Path: <crimson@sidehack.sat.gweep.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C87A412955B for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 15:54:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.203
X-Spam-Level: 
X-Spam-Status: No, score=-4.203 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q5HwO5V856Kv for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 15:54:12 -0700 (PDT)
Received: from sidehack.sat.gweep.net (sidehack.sat.gweep.net [72.93.233.150]) by ietfa.amsl.com (Postfix) with SMTP id 5F463129BAB for <idr@ietf.org>; Thu, 27 Apr 2017 15:51:41 -0700 (PDT)
Received: (qmail 28703 invoked by uid 524); 27 Apr 2017 18:50:17 -0400
Date: Thu, 27 Apr 2017 18:50:17 -0400
From: Joe Provo <jzp-idr@rsuc.gweep.net>
To: Warren Kumari <warren@kumari.net>
Cc: Alexander Azimov <aa@qrator.net>, idr wg <idr@ietf.org>, Robert Raszuk <robert@raszuk.net>
Message-ID: <20170427225017.GA25068@gweep.net>
Reply-To: jzp-idr@rsuc.gweep.net
References: <20170426095547.GP25069@Space.Net> <CA+b+ERk4FxB4KQ3N0xtjV6uaQptd=EGKdpbKcpoL2TH41fVSYg@mail.gmail.com> <20170426113954.GA18318@puck.nether.net> <CA+b+ER=Ej7G1EEOQ7uBU-z7LeBAGNSfPkE5yGmo+z52ncKhVdg@mail.gmail.com> <20170426125417.GU25069@Space.Net> <CA+b+ERm1iDv3+GNk+N_gqjDWsd+E4QjmfhmwDN4vQVQVZ1EMpw@mail.gmail.com> <CAL9jLaabkYUO+7jsRbfZg1fXXLHXaWr88AxGyNF+AVTLquyxTQ@mail.gmail.com> <CAHw9_iKhRQpEGigqvqYoF0ca9D=-2VmESO8Fp4P_p1tZqpJgXQ@mail.gmail.com> <CAHgCvCNRYyH9wyT=vtVk34_Wc_rqrX0z1D9FCx+cZzLBOXmFLw@mail.gmail.com> <CAHw9_i+1HA=o+Lh7NgUxzD-OFq8u6kR5Se5z=tHttkVQ_QaSzg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAHw9_i+1HA=o+Lh7NgUxzD-OFq8u6kR5Se5z=tHttkVQ_QaSzg@mail.gmail.com>
X-PGP-Key: http://www.gweep.net/~crimson/pgp.txt
X-Disclaimer: "I'm the only one foolish enough to claim these opinions."
Organization: RSUC - Quality UN*X-like systems and IP networking since 1990.
X-Do-Not-Email-Here: dumpy@spammers.can-bite-me.com
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/rFOOjOdGIxBVFxVpreoAOXb_atA>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2017 22:54:16 -0000

On Thu, Apr 27, 2017 at 03:26:11PM -0400, Warren Kumari wrote:
[snip]
> Empty policy is fine -- I have a number of sessions where I
> intentionally have no policy. What I don't want to have happen is
> *accidental* sessions without policy -- because, Murphy's law says
> that that will happen wherever it is most likely to hurt / just as I
> get onto a plane / right before a RIPE / NANOG meeting, so all my
> closest friends can point and jeer.
 
While I don't disagree, and this is INTER-domain Routing WG, I 
feel it would be remiss to not mention the applicability in the
datacenterBGP world. Fail-close drastically simplifies the deploy
and staging scenario, allowing different teams to be loosely
coupled and not require lockstep. 

I also like this in the generally-overlooked area of deprovisioning
for all applications: remove the call to policy and in one whack
the device is no longer propagating to your mesh.


-- 
Posted from my personal account - see X-Disclaimer header.
Joe Provo / Gweep / Earthling 


From nobody Thu Apr 27 21:49:37 2017
Return-Path: <loa@pi.nu>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D2F5129C0B; Thu, 27 Apr 2017 21:49:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VCDYkUTjNolz; Thu, 27 Apr 2017 21:49:19 -0700 (PDT)
Received: from pipi.pi.nu (pipi.pi.nu [83.168.239.141]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E8A83129B53; Thu, 27 Apr 2017 21:46:42 -0700 (PDT)
Received: from [192.168.1.10] (unknown [49.150.112.151]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: loa@pi.nu) by pipi.pi.nu (Postfix) with ESMTPSA id CA7A0180156A; Fri, 28 Apr 2017 06:46:37 +0200 (CEST)
To: "mpls@ietf.org" <mpls@ietf.org>, idr@ietf.org, BESS <bess@ietf.org>
References: <93a6a754-0a2e-2053-542c-a4ce8bf9213b@pi.nu>
Cc: "mpls-chairs@ietf.org" <mpls-chairs@ietf.org>, bess-chairs@ietf.org, idr-chairs@ietf.org, "<rtg-ads@ietf.org>" <rtg-ads@ietf.org>, draft-ietf-mpls-rfc3107bis@ietf.org
From: Loa Andersson <loa@pi.nu>
Message-ID: <61e452c6-80eb-ff94-878d-3152270fc032@pi.nu>
Date: Fri, 28 Apr 2017 12:46:11 +0800
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <93a6a754-0a2e-2053-542c-a4ce8bf9213b@pi.nu>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/ZLzobBvY3Qiq7cfg41SlZr6f5dw>
Subject: [Idr] Closed -- Working Group Last Call on draft-ietf-mpls-rfc3107bis
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 04:49:21 -0000

Working Groups, authors,

This working group last call is closed. We have a some comments, can the 
authors please address those and make sure that the reviewers are
comfortable with how they been addressed. And continue to post a new
version of the draft.

/Loa

On 2017-04-04 20:33, Loa Andersson wrote:
> Working Groups,
>
> This is to initiate a two week working group last call in four working
> groups on draft-ietf-mpls-rfc3107bis-01.
>
> According to agreement when we decided to host this document in the
> MPLS working group, this last call is also copied to the IDR and BESS
> working groups.
>
> Please send your comments to the mpls wg mailing list (mpls@ietf.org),
> if you are not subscribed to the mpls wg list, send to "your own"
> working group mailing list, and we'll make sure they are posted to the
> MPLS wg list.
>
> There are no IPR disclosures against this document.
>
> All the authors and contributors have stated on the working group
> mailing list that they are not aware of any other IPRs that relates
> to this document.
>
> This working group last call ends April 20, 2017.
>
>
> /Loa
> MPLS wg co-chairs

-- 


Loa Andersson                        email: loa@mail01.huawei.com
Senior MPLS Expert                          loa@pi.nu
Huawei Technologies (consultant)     phone: +46 739 81 21 64


From nobody Thu Apr 27 22:11:24 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F4E1129B7E for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 22:11:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level: 
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JpweH6qLQ9zm for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 22:11:21 -0700 (PDT)
Received: from uplift.swm.pp.se (ipv6.swm.pp.se [IPv6:2a00:801::f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13553129B61 for <idr@ietf.org>; Thu, 27 Apr 2017 22:08:52 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id AD9B4A6; Fri, 28 Apr 2017 07:08:49 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493356129; bh=fW2RVgtTIau5soCHVPZCNkq/kmKlF26ya4LgxYoI3pg=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=EgVcUMDCLWScsVAYo2ueU1laerXxwER8zWVkBt1sdsGEIsRxol/qAnBsc/M8tQqz5 B4/T6C+3yKXDJFqg3alP60HlOrCzeLiasKtVJT5LBtvRraMWl17lP+rgbxNSRIVxfR F+nK3LCqSMoTpb9Cbeo2Zt/ffse723vstPBCZRqc=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 93395A4; Fri, 28 Apr 2017 07:08:49 +0200 (CEST)
Date: Fri, 28 Apr 2017 07:08:49 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Enke Chen <enkechen@cisco.com>
cc: idr@ietf.org
In-Reply-To: <e4ad3bd2-73cd-c1f7-6ef4-8bbd974974ae@cisco.com>
Message-ID: <alpine.DEB.2.02.1704280706040.5591@uplift.swm.pp.se>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com> <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se> <20170427201736.GF22975@pfrc.org> <e4ad3bd2-73cd-c1f7-6ef4-8bbd974974ae@cisco.com>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/RDuSw774Tah4Q13Hkw8--0vz1-8>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 05:11:23 -0000

On Thu, 27 Apr 2017, Enke Chen wrote:

> If there is sufficient interest, we can limit the capability to just 
> AFI/SAFI without much work.  With GR though the interest seems to have 
> dropped.

If someone had asked me 2 days ago "If you have GR enabled on a BGP 
session and add an address family to that session, will this affect 
forwarding when the session restarts" I would have said "YES!"

But from what I'm reading here, I would have been wrong? The session would 
go down but RIB/FIB would be untouched because GR?

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Thu Apr 27 23:32:17 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E61EB128B8D for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 23:32:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r_AkRB0KcSD3 for <idr@ietfa.amsl.com>; Thu, 27 Apr 2017 23:32:14 -0700 (PDT)
Received: from mail-it0-x232.google.com (mail-it0-x232.google.com [IPv6:2607:f8b0:4001:c0b::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C2301270A0 for <idr@ietf.org>; Thu, 27 Apr 2017 23:29:39 -0700 (PDT)
Received: by mail-it0-x232.google.com with SMTP id g66so30793886ite.1 for <idr@ietf.org>; Thu, 27 Apr 2017 23:29:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=yQW3+zY+gAQ6A1Zo9cpZiW52DBsUqBPWNbUmF7O+fKs=; b=ZkiNym8mN2na0r/VxmxGhkUWtojN5nELrnfhZdoYBPDT5BW7qwwr/RqRBvm3bxTmoD 6rCPhzmgMmqnkBCY7vzP8PaHA+5LckrWVzFxniD/EMDVaP3ejZ2BnRWLGgO5/iEx5GF/ miJd8Wn8+qQ5euADQEVvxL+8Ax7zaCdqrVFGeWWoV57ZmL/V+zhGhMd3TgnpoVBt5/gT JvWDDRaNMCtYu92yWfN2dc+o2htDUOoIfealvRBvrRFLDMNucBTfmbs0705SvijFDXxJ swikTgW3/LqPCACZ+2VP3Ja6c6sWLRKMK6PaZp579O6n1WWtoA/d1HLrmqO97eaeTn5O 11+Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=yQW3+zY+gAQ6A1Zo9cpZiW52DBsUqBPWNbUmF7O+fKs=; b=jrlzgX3dLmmNDmFsKqabYxVrA0eChjAkQ8fFvk8v7ViNyXBG7619p7+VpcsGYj+eui FnOD2f+WZRzlyaBoHtF5FEqdtskAg4Essum3Z8KQNrFMUGGjwZS/bLmBt8ZlBP4pv/5f zgnexB6NQs3rdCfnb8KOsijE4soqH7uY2krVaKINj57mMinvz+LFclJ4EM0EgwPeIE1H /lHlJo/+dONL7Ebo3Cj/JQUvektf64KqDB2DWKH02HjieSjT1kbGfXyNBqlwRg2S11Jt D0ObFK3eCeEwprB1bJv5DOAjTZtKAkjHK0ZUwLJ5Tw1B7gFFu6bUSyztLS2lL21Gc379 mc8A==
X-Gm-Message-State: AN3rC/7yGPiiuPzu2oxMBsA5zrPsAEdolh582mQvHhZjlep1w7LLtU3H 56KXK1QIdIyvB2rXoVDpdjVeqQuufw==
X-Received: by 10.36.227.202 with SMTP id d193mr7344644ith.18.1493360978812; Thu, 27 Apr 2017 23:29:38 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.62.24 with HTTP; Thu, 27 Apr 2017 23:29:37 -0700 (PDT)
Received: by 10.79.62.24 with HTTP; Thu, 27 Apr 2017 23:29:37 -0700 (PDT)
In-Reply-To: <alpine.DEB.2.02.1704280706040.5591@uplift.swm.pp.se>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com> <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se> <20170427201736.GF22975@pfrc.org> <e4ad3bd2-73cd-c1f7-6ef4-8bbd974974ae@cisco.com> <alpine.DEB.2.02.1704280706040.5591@uplift.swm.pp.se>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 28 Apr 2017 02:29:37 -0400
X-Google-Sender-Auth: 0B3AvITrh7Llg9w4qhfI89FhQsI
Message-ID: <CA+b+ERn6fdTTkWWSXN4nHgs+QJevrH3Hzh54f5Sgijt-0Aei7A@mail.gmail.com>
To: Mikael Abrahamsson <swmike@swm.pp.se>
Cc: idr wg <idr@ietf.org>, Enke Chen <enkechen@cisco.com>
Content-Type: multipart/alternative; boundary=94eb2c113198a9e751054e343250
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/xT_ak5F0T8faiEHZY1EWQFoW0-M>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 06:32:16 -0000

--94eb2c113198a9e751054e343250
Content-Type: text/plain; charset=UTF-8

Hi Mikael,

Exactly.

For the duration of gr timer you continue to forward till your bgp session
restarts and finishes sending you routes with end-of-rib marker.

You also do not propagate neither new best paths nor withdraws to your
other peers during this restart limiting amount of bgp churn.

Then you compare "stale" routes with fresh ones and adjust the delta both
within your box and to peers.

Just try it out ;)

//R.



On Apr 28, 2017 01:11, "Mikael Abrahamsson" <swmike@swm.pp.se> wrote:

On Thu, 27 Apr 2017, Enke Chen wrote:

If there is sufficient interest, we can limit the capability to just
> AFI/SAFI without much work.  With GR though the interest seems to have
> dropped.
>

If someone had asked me 2 days ago "If you have GR enabled on a BGP session
and add an address family to that session, will this affect forwarding when
the session restarts" I would have said "YES!"

But from what I'm reading here, I would have been wrong? The session would
go down but RIB/FIB would be untouched because GR?


-- 
Mikael Abrahamsson    email: swmike@swm.pp.se

_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr

--94eb2c113198a9e751054e343250
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div><div dir=3D"auto">Hi Mikael,</div><div dir=3D"auto">=
<br></div>Exactly.=C2=A0</div><div dir=3D"auto"><br></div><div dir=3D"auto"=
>For the duration of gr timer you continue to forward till your bgp session=
 restarts and finishes sending you routes with end-of-rib marker.</div><div=
 dir=3D"auto"><div dir=3D"auto"><br></div><div dir=3D"auto">You also do not=
 propagate neither new best paths nor withdraws to your other peers during =
this restart limiting amount of bgp churn.</div><br><div class=3D"gmail_ext=
ra" dir=3D"auto">Then you compare &quot;stale&quot; routes with fresh ones =
and adjust the delta both within your box and to peers.</div><div class=3D"=
gmail_extra" dir=3D"auto"><br></div><div class=3D"gmail_extra" dir=3D"auto"=
>Just try it out ;)</div><div class=3D"gmail_extra" dir=3D"auto"><br></div>=
<div class=3D"gmail_extra" dir=3D"auto">//R.</div><div class=3D"gmail_extra=
" dir=3D"auto"><br></div><div class=3D"gmail_extra" dir=3D"auto"><br></div>=
<div class=3D"gmail_extra" dir=3D"auto"><br><div class=3D"gmail_quote" dir=
=3D"auto">On Apr 28, 2017 01:11, &quot;Mikael Abrahamsson&quot; &lt;<a href=
=3D"mailto:swmike@swm.pp.se">swmike@swm.pp.se</a>&gt; wrote:<br type=3D"att=
ribution"><blockquote class=3D"quote" style=3D"margin:0 0 0 .8ex;border-lef=
t:1px #ccc solid;padding-left:1ex"><div class=3D"quoted-text">On Thu, 27 Ap=
r 2017, Enke Chen wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
If there is sufficient interest, we can limit the capability to just AFI/SA=
FI without much work.=C2=A0 With GR though the interest seems to have dropp=
ed.<br>
</blockquote>
<br></div>
If someone had asked me 2 days ago &quot;If you have GR enabled on a BGP se=
ssion and add an address family to that session, will this affect forwardin=
g when the session restarts&quot; I would have said &quot;YES!&quot;<br>
<br>
But from what I&#39;m reading here, I would have been wrong? The session wo=
uld go down but RIB/FIB would be untouched because GR?<div class=3D"quoted-=
text"><br>
<br>
-- <br>
Mikael Abrahamsson=C2=A0 =C2=A0 email: <a href=3D"mailto:swmike@swm.pp.se" =
target=3D"_blank">swmike@swm.pp.se</a><br>
<br></div><div class=3D"elided-text">
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org" target=3D"_blank">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/idr</a><br>
</div></blockquote></div><br></div></div></div>

--94eb2c113198a9e751054e343250--


From nobody Fri Apr 28 00:37:13 2017
Return-Path: <swmike@swm.pp.se>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E66B129441 for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 00:37:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level: 
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NPniWb0KWHaK for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 00:37:08 -0700 (PDT)
Received: from uplift.swm.pp.se (ipv6.swm.pp.se [IPv6:2a00:801::f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B9CD12946F for <idr@ietf.org>; Fri, 28 Apr 2017 00:34:16 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id C0841A6; Fri, 28 Apr 2017 09:34:13 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1493364853; bh=JftlidwQYZMLyDCPWyMs90NyXurpkoKN87v03FPW1Fo=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=wTpijAkNzh+Tchydv+5B8qkqJumwg2HpCgzjduNtFVJNt1Z+FkbLTUlcWzOW1IF6o DPfMPOD56B68nZvlevF3XggADQYfmvtYib+7Ygs1knqtAepAKOqA1jTwP4uTtok92v 3FKzwt/BAxyHXBCyT7l3s7YX+rrdk7BUCY2hLr+Q=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id BC8BCA4; Fri, 28 Apr 2017 09:34:13 +0200 (CEST)
Date: Fri, 28 Apr 2017 09:34:13 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Robert Raszuk <robert@raszuk.net>
cc: idr wg <idr@ietf.org>
In-Reply-To: <CA+b+ERn6fdTTkWWSXN4nHgs+QJevrH3Hzh54f5Sgijt-0Aei7A@mail.gmail.com>
Message-ID: <alpine.DEB.2.02.1704280919340.5591@uplift.swm.pp.se>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com> <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se> <20170427201736.GF22975@pfrc.org> <e4ad3bd2-73cd-c1f7-6ef4-8bbd974974ae@cisco.com> <alpine.DEB.2.02.1704280706040.5591@uplift.swm.pp.se> <CA+b+ERn6fdTTkWWSXN4nHgs+QJevrH3Hzh54f5Sgijt-0Aei7A@mail.gmail.com>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/xU5ShD-7QsIHk65wObjH7hdBpIc>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 07:37:10 -0000

On Fri, 28 Apr 2017, Robert Raszuk wrote:

> Just try it out ;)

I have tried it out. From what I remember we had to turn it off because it 
gave us 3 minute outages that we didn't much desire.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


From nobody Fri Apr 28 04:12:42 2017
Return-Path: <internet-drafts@ietf.org>
X-Original-To: idr@ietf.org
Delivered-To: idr@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 73195129C31; Fri, 28 Apr 2017 04:12:33 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: idr@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.50.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <149337795343.2975.11840522747921489092@ietfa.amsl.com>
Date: Fri, 28 Apr 2017 04:12:33 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/hHzfynnUfht7zr5N7XvBwFOHwsk>
Subject: [Idr] I-D Action: draft-ietf-idr-bgpls-segment-routing-epe-12.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 11:12:33 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Inter-Domain Routing of the IETF.

        Title           : BGP-LS extensions for Segment Routing BGP Egress Peer Engineering
        Authors         : Stefano Previdi
                          Clarence Filsfils
                          Keyur Patel
                          Saikat Ray
                          Jie Dong
	Filename        : draft-ietf-idr-bgpls-segment-routing-epe-12.txt
	Pages           : 21
	Date            : 2017-04-28

Abstract:
   Segment Routing (SR) leverages source routing.  A node steers a
   packet through a controlled set of instructions, called segments, by
   prepending the packet with an SR header.  A segment can represent any
   instruction, topological or service-based.  SR allows to enforce a
   flow through any topological path and service chain while maintaining
   per-flow state only at the ingress node of the SR domain.

   The Segment Routing architecture can be directly applied to the MPLS
   dataplane with no change on the forwarding plane.  It requires minor
   extension to the existing link-state routing protocols.

   This document outline a BGP-LS extension for exporting BGP peering
   node topology information (including its peers, interfaces and
   peering ASs) in a way that is exploitable in order to compute
   efficient BGP Peering Engineering policies and strategies.



The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-idr-bgpls-segment-routing-epe/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-idr-bgpls-segment-routing-epe-12
https://datatracker.ietf.org/doc/html/draft-ietf-idr-bgpls-segment-routing-epe-12

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-idr-bgpls-segment-routing-epe-12


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Fri Apr 28 04:16:59 2017
Return-Path: <sprevidi@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48FB61201F2 for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 04:16:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o-vD7d6BZOZN for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 04:16:56 -0700 (PDT)
Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 698A812751F for <idr@ietf.org>; Fri, 28 Apr 2017 04:13:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2745; q=dns/txt; s=iport; t=1493378025; x=1494587625; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=MMZyWceM8RX6u2D0pOb7TRxNgpogYdcqKxWX/K2OyrM=; b=XiBObE7ViJQsdBrAl2t6nhGAM0fzYE9qcxR8sMZCypOYnXZy1o6NGklk QGmKGjqt2Qz+ErFFcDRk77YySVxzyyuVWoKxu22ujGe6ff2FnKPj8+dID 1VN3Ew3NJvXlMBfh2hGRJz59e5IKF1gyGKf3/PX+/cvAOcLsol9Cb+hYC Y=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DNAACGIgNZ/5JdJa1eGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1VhgQwHjXmRTpVsgg8hDYV2AoQvPxgBAgEBAQEBAQFrKIUVAQE?= =?us-ascii?q?BAQIBAQE4NBALAgEIEgYeECcLFw4CBBMJig4IDrAyiwUBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEdhl+BXiuCb4MggT8ygwKCMQWdUAGHGIMxiEKCAlWEYooli0CIZgE?= =?us-ascii?q?fOIEKbxUaKhIBhl11AYZegQ0BAQE?=
X-IronPort-AV: E=Sophos;i="5.37,387,1488844800"; d="scan'208";a="416167345"
Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Apr 2017 11:13:44 +0000
Received: from XCH-RTP-007.cisco.com (xch-rtp-007.cisco.com [64.101.220.147]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id v3SBDhrZ005388 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for <idr@ietf.org>; Fri, 28 Apr 2017 11:13:44 GMT
Received: from xch-rtp-010.cisco.com (64.101.220.150) by XCH-RTP-007.cisco.com (64.101.220.147) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Fri, 28 Apr 2017 07:13:43 -0400
Received: from xch-rtp-010.cisco.com ([64.101.220.150]) by XCH-RTP-010.cisco.com ([64.101.220.150]) with mapi id 15.00.1210.000; Fri, 28 Apr 2017 07:13:43 -0400
From: "Stefano Previdi (sprevidi)" <sprevidi@cisco.com>
To: idr wg <idr@ietf.org>
Thread-Topic: I-D Action: draft-ietf-idr-bgpls-segment-routing-epe-12.txt
Thread-Index: AQHSwBB+fPCad9InFEKiP898hVvPQA==
Date: Fri, 28 Apr 2017 11:13:42 +0000
Message-ID: <D4C457E0-C567-493B-B9F7-66E62DFC78B2@cisco.com>
References: <149337795343.2975.11840522747921489092@ietfa.amsl.com>
In-Reply-To: <149337795343.2975.11840522747921489092@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.61.162.46]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <26F0CBFA69F8414AB525D488C19BA4AE@emea.cisco.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/z-Rkl2yqmwDSPsew0_4TEIm_K1I>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-bgpls-segment-routing-epe-12.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 11:16:58 -0000

updated version after various comments and reviews.

Thanks.
s.


> On Apr 28, 2017, at 1:12 PM, internet-drafts@ietf.org wrote:
>=20
>=20
> A New Internet-Draft is available from the on-line Internet-Drafts direct=
ories.
> This draft is a work item of the Inter-Domain Routing of the IETF.
>=20
>        Title           : BGP-LS extensions for Segment Routing BGP Egress=
 Peer Engineering
>        Authors         : Stefano Previdi
>                          Clarence Filsfils
>                          Keyur Patel
>                          Saikat Ray
>                          Jie Dong
> 	Filename        : draft-ietf-idr-bgpls-segment-routing-epe-12.txt
> 	Pages           : 21
> 	Date            : 2017-04-28
>=20
> Abstract:
>   Segment Routing (SR) leverages source routing.  A node steers a
>   packet through a controlled set of instructions, called segments, by
>   prepending the packet with an SR header.  A segment can represent any
>   instruction, topological or service-based.  SR allows to enforce a
>   flow through any topological path and service chain while maintaining
>   per-flow state only at the ingress node of the SR domain.
>=20
>   The Segment Routing architecture can be directly applied to the MPLS
>   dataplane with no change on the forwarding plane.  It requires minor
>   extension to the existing link-state routing protocols.
>=20
>   This document outline a BGP-LS extension for exporting BGP peering
>   node topology information (including its peers, interfaces and
>   peering ASs) in a way that is exploitable in order to compute
>   efficient BGP Peering Engineering policies and strategies.
>=20
>=20
>=20
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-idr-bgpls-segment-routing-epe=
/
>=20
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-ietf-idr-bgpls-segment-routing-epe-12
> https://datatracker.ietf.org/doc/html/draft-ietf-idr-bgpls-segment-routin=
g-epe-12
>=20
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-idr-bgpls-segment-routing-=
epe-12
>=20
>=20
> Please note that it may take a couple of minutes from the time of submiss=
ion
> until the htmlized version and diff are available at tools.ietf.org.
>=20
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>=20
> _______________________________________________
> I-D-Announce mailing list
> I-D-Announce@ietf.org
> https://www.ietf.org/mailman/listinfo/i-d-announce
> Internet-Draft directories: http://www.ietf.org/shadow.html
> or ftp://ftp.ietf.org/ietf/1shadow-sites.txt


From nobody Fri Apr 28 07:16:10 2017
Return-Path: <randy@psg.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C40EE129B3F for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 07:16:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Hvcach0HUvy for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 07:16:05 -0700 (PDT)
Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87403129B40 for <idr@ietf.org>; Fri, 28 Apr 2017 07:13:14 -0700 (PDT)
Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from <randy@psg.com>) id 1d46e0-0002lQ-QD; Fri, 28 Apr 2017 14:13:13 +0000
Date: Fri, 28 Apr 2017 23:13:10 +0900
Message-ID: <m2y3uk7h8p.wl-randy@psg.com>
From: Randy Bush <randy@psg.com>
To: Christopher Morrow <morrowc.lists@gmail.com>
Cc: Interminable Discussion Room <idr@ietf.org>
In-Reply-To: <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO)
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset=US-ASCII
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/J_9NxuOPqztv1v0jViA7GwmhuB0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 14:16:07 -0000

is there a big enough win to break POLA?


From nobody Fri Apr 28 07:51:11 2017
Return-Path: <christopher.morrow@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C5A3129B2E for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 07:51:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wrq1ruqKlorS for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 07:51:08 -0700 (PDT)
Received: from mail-qt0-x231.google.com (mail-qt0-x231.google.com [IPv6:2607:f8b0:400d:c0d::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8FA6C129B01 for <idr@ietf.org>; Fri, 28 Apr 2017 07:47:05 -0700 (PDT)
Received: by mail-qt0-x231.google.com with SMTP id m36so51904993qtb.0 for <idr@ietf.org>; Fri, 28 Apr 2017 07:47:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=MwO2v8MIhQ2Hd4PDVh5cbCTfv7rQOI4sEMfgIQ9QUI4=; b=SXRievqgphdx87liIEIsHDaPvR0g2w1GjQd06yFrUEuG7pIypQPCztAkS1NhWiscUQ D5zn9TIR195JKPoznFYyuX4HnXOHbkT0xzeS/NTR80DrCTWEb/UhpgdYi9D1kGyf4JIY wfJel0mB8o1mn1BD5KS2Z88KfP3EgkkKSvhL4weuojqrMnk7Jg3d2qf7TLChOpG9mAnZ QIlAEWXJSnjtnk2P5uJqtiw0exjsQR2DCCYEIICoYkDiNdHxMxQQOsSzElxT4YZZDbae LjdDFjj2BMt9wTxSMeIyH2B6hbps/9KIpPD52gJBq4Kw3sFkPdGkfhQ5QcnTm4wafkTp TWCw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=MwO2v8MIhQ2Hd4PDVh5cbCTfv7rQOI4sEMfgIQ9QUI4=; b=HPbk6kCMoxw2A4YLdJ9jIG5hCRcnVYWKN4zv/ooDqgNpJsJu9AKnNtpGgRVPpigU0v HlTZ+3QmWQpeohm+UHjEdT5xvDHNfdde7hVRu9krmdHWRcj3LR+upyVYimiPLrxHfo4d uVgZKSZIXQFsfMR/CmkE4gC1d9ry2VtY8Rxh3olAuwHMVrE8dE6UX3yiiCQPBmY1eU+X /NDB0TdNTmD3buS4VvFDH8U//LTBPl5+kdZYMoNuqPI3RMOl8lSYB1KrBmJhmY58rJk7 D7+jvAIw26bQMLNt0XtyiziNBs2okMTGo50IBmVmWolQ3ORhPi0CMZ3ETCo2wci9+8mr X9CA==
X-Gm-Message-State: AN3rC/7QY7UZ6cvuaLzVnu2lBy4RUq8qJ65AGvn/UXtWF9lArRatWh9s UinjGYTtT8RlrXO/QUr6LSCexdd4wg==
X-Received: by 10.237.59.150 with SMTP id r22mr9901153qte.100.1493390824753; Fri, 28 Apr 2017 07:47:04 -0700 (PDT)
MIME-Version: 1.0
Sender: christopher.morrow@gmail.com
Received: by 10.140.93.5 with HTTP; Fri, 28 Apr 2017 07:47:03 -0700 (PDT)
In-Reply-To: <m2y3uk7h8p.wl-randy@psg.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com> <m2y3uk7h8p.wl-randy@psg.com>
From: Christopher Morrow <morrowc.lists@gmail.com>
Date: Fri, 28 Apr 2017 10:47:03 -0400
X-Google-Sender-Auth: EhSGpEmeJI-iGvIgHYE59sjrV-4
Message-ID: <CAL9jLaZXqA8-LnAdNOfhCQA+pq1fh1site_shSH+-gH0hCNeqQ@mail.gmail.com>
To: Randy Bush <randy@psg.com>
Cc: Interminable Discussion Room <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114dc3469ed84d054e3b25ae
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/9YimhoiWh_6A42kWh9JbYfWoBR8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 14:51:10 -0000

--001a114dc3469ed84d054e3b25ae
Content-Type: text/plain; charset=UTF-8

On Fri, Apr 28, 2017 at 10:13 AM, Randy Bush <randy@psg.com> wrote:

> is there a big enough win to break POLA?
>

POLA - principle of least resistance ... which I had to ask for a
definition of...

I think Job's (jared pointed out contradictory answers between parts of the
same vendor even!) said this previously: "There is no well known
expectation here", because each vendor does something different :( what's
frustrating as an operator is, sometimes inside a single vendor there is no
consensus.

Setting a well known standard starting point really would be helpful here.

--001a114dc3469ed84d054e3b25ae
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Fri, Apr 28, 2017 at 10:13 AM, Randy Bush <span dir=3D"ltr">&lt;<a h=
ref=3D"mailto:randy@psg.com" target=3D"_blank">randy@psg.com</a>&gt;</span>=
 wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bor=
der-left:1px #ccc solid;padding-left:1ex">is there a big enough win to brea=
k POLA?<br>
</blockquote></div><br></div><div class=3D"gmail_extra">POLA - principle of=
 least resistance ... which I had to ask for a definition of...</div><div c=
lass=3D"gmail_extra"><br></div><div class=3D"gmail_extra">I think Job&#39;s=
 (jared pointed out contradictory answers between parts of the same vendor =
even!) said this previously: &quot;There is no well known expectation here&=
quot;, because each vendor does something different :( what&#39;s frustrati=
ng as an operator is, sometimes inside a single vendor there is no consensu=
s.</div><div class=3D"gmail_extra"><br></div><div class=3D"gmail_extra">Set=
ting a well known standard starting point really would be helpful here.</di=
v></div>

--001a114dc3469ed84d054e3b25ae--


From nobody Fri Apr 28 07:54:20 2017
Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BEAC512EB0A for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 07:54:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.802
X-Spam-Level: 
X-Spam-Status: No, score=-4.802 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Oti16JGjTUCl for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 07:54:14 -0700 (PDT)
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0108.outbound.protection.outlook.com [104.47.38.108]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A61312EAE3 for <idr@ietf.org>; Fri, 28 Apr 2017 07:49:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=NlSEG+HijkZYPVgdzuQ/wc1k925pYggh/rLcXFfuURo=; b=UmVMKHKiky6SabL9m/vdaEuC1lz3LkxW/Eg5IAu2XuRZxTDjJkt7EDUwpBuCsC1tazQkmFVWqodsregQgHwsDJ0Dj8F0nwUSP/pdJHv3kKqRhNJcTdR18GAtLrDk2xUwPkSnaYRPXKkUB+hhUpvDulLpdQgSL6ZLrFCBVmFxfE4=
Authentication-Results: psg.com; dkim=none (message not signed) header.d=none;psg.com; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.36.228] (66.129.241.10) by SN2PR05MB2509.namprd05.prod.outlook.com (10.166.213.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1075.1; Fri, 28 Apr 2017 14:49:33 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <m2y3uk7h8p.wl-randy@psg.com>
Date: Fri, 28 Apr 2017 10:49:26 -0400
CC: Christopher Morrow <morrowc.lists@gmail.com>, Interminable Discussion Room <idr@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-ID: <2A42BCE5-D715-4D3E-B653-4702BA79760E@juniper.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com> <m2y3uk7h8p.wl-randy@psg.com>
To: Randy Bush <randy@psg.com>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.10]
X-ClientProxiedBy: BN6PR12CA0018.namprd12.prod.outlook.com (10.168.222.28) To SN2PR05MB2509.namprd05.prod.outlook.com (10.166.213.18)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 64d587c7-a619-46cb-3031-08d48e45c8d3
X-MS-Office365-Filtering-HT: Tenant
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(201703131423075)(201703031133081); SRVR:SN2PR05MB2509; 
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 3:IMiw9J1u88Rs7yu1E219csTYgHV7rHbvlJ8P6enYzBfaE/5bSPvsJ6eaKWJ/SDS1RhtpsUwjSAlQjjt5rALV7hroOg6TQZ1MQe4gvqHKWb30YhA/3gBNO6vhkIRUmPA+ufMr2LZJ5RtKSO8apy/vxplW0kCjo+jrI7YY/JxQrpScvP91bt2L/XoJ+ezdQsletFc9jjV+rwyksZ4MoVLHwYxvP3AnD6gttN+h+JC+wu7Fq1IikBVeVbjQRwMH7ytBc/z8M/qxGhFmTUUpf/X47wlohR6uBJRO5ur8gZEyd8Pzc9wkriGBhcT5InK/dGNDWyGpcGDLA5lyFQPQk/uSplEG3rRVOLyKFmHbMuRJGHw=; 25:JGw2aHqFQHrp7w0v+sUJuQ+kUwRx7IZPtsK/OUnkq+RQYCFZqcAPnm0g6gcEcIqF0zm9mGQkq16sD697oQKiyuOIzAFNOFdqE+Rm7SSz+02MVXrQ0WedIle++xRvGcvkWta+jlLgTcH9hDSzNMLK0C2ijb2CsUaB83blLp58cadjprf0bhJqXjUHAKdgYQjWU6EodSXKAu5KoVUxjjJ8TQx20bFR7rrkzb068IJlLLu4wTCZ/gMMe358JE36l9KTrracRjllYtQL+1FxOFCgAl2Vuu277i4ZYBKTkzx5rjnkuGmCz5u4E2i1hW9XUpoTyaUNq2+C70mncD2vQNxiIyO450ND4OipbDgX7v+HjvY/BH5E96KGLQOBiTrk2BZ899pfPZ3s6x62npyrRIf6z0wyQDFzUHudXhYNI26lXqETxefT1nvG09jqvn7wKVFDTOwUEDNyaSSvzziBs0A+OpGGXw+q6HYVtTNlm4KGskM=
X-LD-Processed: bea78b3c-4cdb-4130-854a-1d193232e5f4,ExtAddr
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 31:T7jXChC0CHfcF8tuDaDjU+AtUYKtGghPFBUE8FK7MumgsyYmVDhgsRufspIqfJZ9NuPqJ8r/IkyRqrdx0G+SQCca58JpEliCiCNXxoeCQqldYqlLb9JdDEFNnCvm1Bsfjk5Mz6plk/ljdmEu/R+ahq0RZ5NKSAPuQtPo7g/yvAKuw7QWkZVDt+NF9X68zsBEh++HhVwrEfG5DCtEEhe33DqWETUzRadk20zLrMfOvIvKjqVTpUTTKeX/aCgpnIOp; 20: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
X-Microsoft-Antispam-PRVS: <SN2PR05MB2509C3D320D80929E678B4BAAA130@SN2PR05MB2509.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3002001)(6055026)(6041248)(20161123555025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(20161123558100)(20161123564025)(6072148); SRVR:SN2PR05MB2509; BCL:0; PCL:0; RULEID:; SRVR:SN2PR05MB2509; 
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 4:O49nKbE1weFXOAHyR78QPSE6PQ6zKJsxcncqPozOIhFDTOiclsaKQr/Qz650gEMVZdLDUlpnMVElRwHkdQo4lkmdRH1q9wKzzm/yFkYy5WWaPjV4UtkCBKaJI+fQ2BqL2xNPycLy1KQnRxBz1kDYIzODGYEpA55Qp7VP8rblRaOmjgJ0/LfGEMaazBq+9RCRomeOtMj4bKDQQVKXJ1l6dxE0FZSR9jsAk8r7NZ5CwidUvYgTZri2g1AKxiXCPUN7aDYg5k8hkFriF1fhperYbzroi2WILuQS/To1mz/JfDm3M+Rqt8DULCXTSqfITS6K6w02Srg01YE50aGXyz6Vw3n3kT5mWwAHv4b48BtwAc3R/AyqH70gLHAzSaSkpT+V0j2cYjEI1WsG1kY9roE45q67YCA7G3KNq4xKcCsXisFz9DG/+8f0aydCwo23ZrPJutWdkHDAqdtBNHPro3XyJ6cx3Kyd8eaMNqXJ81wEoLwhnmKT16a1iVavjaTcpezTPmnIBhFeqPBt8Zis0awaxZrUM9ptUPTD6sxw17WdZkiQhPFNuTKUh9ZMVVMmcs8RtjYbWtQBCyEquVT4XLcOd0I9FQVPBCuP5NIQSHAs+erLAP6prrWvFvzMsRZpZoOM7ICCUOp3kHb/LbN+j/b1GJPMPyY4yO0eq0yYYJCQb4IShncYJR6cH3pK9ST8DStd1qSxw7TXbjHcydbbKvmBR1ZdnohKqjLp/bwERJ00VvCLo5XiftzmEs9GzhgRMDiCeBOEvFIkNTkNrreo804v8cCw728n/nHFIhuyUitJxOU=
X-Forefront-PRVS: 029174C036
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(39400400002)(39850400002)(39840400002)(39450400003)(39410400002)(39860400002)(377454003)(24454002)(86362001)(2906002)(25786009)(7736002)(189998001)(90366009)(47776003)(93886004)(33656002)(4326008)(66066001)(229853002)(81166006)(8676002)(82746002)(6666003)(230783001)(6916009)(8746002)(5660300001)(83716003)(50226002)(50466002)(2950100002)(76176999)(57306001)(36756003)(46406003)(97756001)(6246003)(42186005)(38730400002)(110136004)(53936002)(50986999)(54906002)(23726003)(305945005)(6116002)(3846002)(77096006)(6486002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN2PR05MB2509; H:[172.29.36.228]; FPR:; SPF:None; MLV:sfv; LANG:en; 
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; SN2PR05MB2509; 23:TyljaUDUxOdJFHa3StLvQfWhbLtof+VxT/pMmSmLu?= =?us-ascii?Q?x1gpw4SAaZzHZtCl2Ai2KbStxWny7tnfmAgzDkg6//ZAyj4n4IqspG619sng?= =?us-ascii?Q?d8RBESQq5TmuoYMYylCl7/gFmuAzseAUo0rJm4lwUPycj7UUlyT3xWdhxU7f?= =?us-ascii?Q?lnrvrha06cdF4a3+0UVoCpOFPVTX4Nc+EvxDzfZCpVSKJyyoxoVwIzMKBkzH?= =?us-ascii?Q?ey+/riMUAyY5weX9zaaadP4aW/GL4IZlOaHDlFC46eWiXgbVOvfVrfI7bQsG?= =?us-ascii?Q?4JYFNooTGNKccdHJRSisid5gS51/goA3hgR8SvLMWVuF6y69rc+dupjmmWpT?= =?us-ascii?Q?uUpQ3CUSJruHnjyuB6UXqcI+u4OU879MBT84EteNaMscZD5S4W1+6rS8Wc+Y?= =?us-ascii?Q?BmjmtaiIJRrF85vIP6jbURN4n3hfDDFBTjcYHwns9aPR9fMt9/KHvD5Lfvrh?= =?us-ascii?Q?RkT0gZf0GSOYL1FyB2b/5Sy4govxpcnMultBICs9K1C04IgBvAb/HC3mUoFx?= =?us-ascii?Q?XPRmqLdgMDQyNkdT+WMV89Jhoq391TLmpqlpsLoCeakINHp7hdn7JNtni8/5?= =?us-ascii?Q?5e2ircrU0Tq4QXHMC0rAEWbP1CjDMoi6kgvZM/5xnEWgDJjYZREQ2lRUEbUL?= =?us-ascii?Q?c6NxJsoY3+ny+oFYPfUXw1dMhzRywZuUUyNAoyIujH+PgrqVu+CRqVwo0DMS?= =?us-ascii?Q?8xuZSXe79hpyD4UNFj7uU/nKrKkWG11hwbbvIWMbzCSiZ5csEiix1IrfUhpU?= =?us-ascii?Q?grJ88cPKBErLHx+et9O9hBw+5/ldOOGhd0zAEMaTxSaXSdza5eE6D8nHbLfs?= =?us-ascii?Q?eHxBPeodXHwg1FCltfbSFAzFXDhqMdVgWPmNiYJzPI+zmWozhQMbgmCnIFcC?= =?us-ascii?Q?szJDFe7Zgq3DKMHK6Rc6xMbk0IbePckyZgvoFydNWtrwMLE5emhdnkI1ZjOQ?= =?us-ascii?Q?jOf7be3u0CDHYplbCua2aWqYq4xJ7ERc4KrgF5U/tRySOipBSX5g3Ciwsnsl?= =?us-ascii?Q?KzNGwoYOZyYTZitV2XY94BvlApZcI3KMI0wJi6ydMqjpHPamLEv8c16AUgjH?= =?us-ascii?Q?VOVceeZ/4bFOxs0On9XzKgnm+tUOB2lGxGznqK83HOL2dvKxTipzQT4NjdSS?= =?us-ascii?Q?rfPYdtVZpGll6Rn40TWYPrn64iVbcNfpopqPvYnCciYijzeXgXTYRmA0i0j/?= =?us-ascii?Q?EG8O6mBBQ7vJLO3rzw9m9ozYvKBTwaEEl+ccbdEJ7Jgcgh+wKaZlCmKLLQ/r?= =?us-ascii?Q?3IFw7BMvaxhoy10cdbiLUUJbpggIKMFg00khQ0VDz79ff11we55V2kY3zEPz?= =?us-ascii?Q?zUsLYQG3/CobOxDhrh3v+8=3D?=
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 6: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; 5:Uybfu6VnhaxVQHk8QVrcdSgPslHn0ASjbiIQJc80/A2WQuAPM/zIgDvySz8ZMdEhB4CD03aou+M20OiV/xBU2mUiKFyR2Yv2R/4LJ9vz3n0k1VCxJhsCJPj4Evcomf7uc/a7Sgrw7gzAac5Tk8+Rtw==; 24:hj6oUlfsVT1bDMRmLkuJghTToufL7mRg7MjPbkBuTXlNeDpixpgj83ozyEEu2hqtQQRcZeQR1SmFmHhu2GYptwiTGsQhWXILls2vf4tig7U=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 7:ogYUN7AHIg2zOactyB7u4CV35oHPRjqB531nR1lQlVEsQ019bj+bFuJUKBSxLt+blnHAGBq/5nU1a908wwhkTp1fIE8to6yihdc3T44Nvu3W9xXkKYsPLE9C2RumZPi2nqUEnZ/IK9mdBiGFlRxGY2yjGc0CfsRCa2cScV6b54CXZOvsGsJNNEwA68sRG+9dKxdmljUtQVCn3pM02SE/fOG1pG5VG0823dkuvj8E8KHgLhElLki+Ss2C/Y4IM26LMbemnCLIQ6BL4E0vC4SXM0fnXIZ2I9yNjnF2Kf+gTa7Pp17OIhQkMae6oqyI4dWkKBABLay4i82g0BluxVtlIQ==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Apr 2017 14:49:33.3128 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR05MB2509
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/UOrm0vlXn0yvSmt31_d88la4NcY>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 14:54:20 -0000

On Apr 28, 2017, at 10:13 AM, Randy Bush <randy@psg.com> wrote:
> is there a big enough win to break POLA?

(Principle of Least Astonishment.)

Yes, that's the main question this thread has been debating, thanks for =
summarizing. Another way it's been put is to ask whether the =
cost/benefit analysis holds up. Violation of POLA is on the "cost" side =
of the ledger. One of the arguments that it should not be considered to =
be a very high cost is that there are ways to mitigate POLA with careful =
implementation; some examples have been discussed. I guess you might =
then add a "designing good software is hard" line item to the "cost" =
side.

Do you have an opinion as to the answer to your well-summarized =
question?

--John=


From nobody Fri Apr 28 16:07:17 2017
Return-Path: <randy@psg.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A375128708 for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 16:07:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pPA99EbfNIyh for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 16:07:15 -0700 (PDT)
Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 583431294AF for <idr@ietf.org>; Fri, 28 Apr 2017 16:04:26 -0700 (PDT)
Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from <randy@psg.com>) id 1d4Ew4-0005Lp-Rf; Fri, 28 Apr 2017 23:04:25 +0000
Date: Sat, 29 Apr 2017 08:04:23 +0900
Message-ID: <m2o9vg6snc.wl-randy@psg.com>
From: Randy Bush <randy@psg.com>
To: Christopher Morrow <morrowc.lists@gmail.com>
Cc: Interminable Discussion Room <idr@ietf.org>
In-Reply-To: <CAL9jLaZXqA8-LnAdNOfhCQA+pq1fh1site_shSH+-gH0hCNeqQ@mail.gmail.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com> <m2y3uk7h8p.wl-randy@psg.com> <CAL9jLaZXqA8-LnAdNOfhCQA+pq1fh1site_shSH+-gH0hCNeqQ@mail.gmail.com>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO)
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset=US-ASCII
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/AAEUlSF3UKfBgdUO9GHjTKy-y3g>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 23:07:16 -0000

> POLA - principle of least resistance

A is for astonishment

> Setting a well known standard starting point really would be helpful
> here.

but the vendors will need to SERIOUSLY warn users affected by possible
change for a number of years.  bill's bait and sushi could go from
release 8 to 42 two years from now.

randy


From nobody Fri Apr 28 17:05:08 2017
Return-Path: <brian.peter.dickson@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47C39129529 for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 17:05:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DQE_9qVZA24D for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 17:05:03 -0700 (PDT)
Received: from mail-it0-x22c.google.com (mail-it0-x22c.google.com [IPv6:2607:f8b0:4001:c0b::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3917129421 for <idr@ietf.org>; Fri, 28 Apr 2017 17:02:27 -0700 (PDT)
Received: by mail-it0-x22c.google.com with SMTP id 70so12341261ita.0 for <idr@ietf.org>; Fri, 28 Apr 2017 17:02:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=peiL0mMZKOc/BbKvJbhl5qxqr7p9fA1+xbiOlayAKR8=; b=jZjSCmhCrJD3GXsdCVz7972yx38dsaBqEooJC/IZCAEUNYh1dku0BlwlrmqPgBw6OK FzyGA6WucuYgTMQQQ6tH12569RXIPGEqECzeA4CdvMpshXPAel+GrN9OFxqmkZksMnmq EJ4O3DQ3czyUbLMf7QQLFYBYjpbwwdX5cUrjkbzNh9ltO/74mlQEvDbvVgUuZ4FWsLiv MdezAr5G1EIEFTqUb4oauXFE0eDTLeu1vIQ5mFsD4wbNhDdNBCg9DrRfiBMRVX2dsjbF lWxv4vsMFpP7KQp0rCcgooJaRubZB+pDugcTgTE03F+NJavX088AEQE05J+JB6Ig6bY1 N2pg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=peiL0mMZKOc/BbKvJbhl5qxqr7p9fA1+xbiOlayAKR8=; b=uFRyPsUv+88rfgdheGOKT6Y4s6T5JqrBPT8Bm83JT6XoizGztqnhfi+8k/VzSU0siv jU9cVRbZt6+AaXNSSfV/tbStlPbV1G+d2Cw6jpksMm169ujlRJs+++v3b+c3aRtb+hiC DvAx1By89wYIWqvGZckzQUNvOkpO9jlGwdiBywDJ0W7yc5mq2jh1iqKehEOhb5qWN+EM pGDiI0fcIl8Zi543lT7xL9gI2azbRratX7wt+d7r7sF801IpqSWAgb8wPaADgc95svmz Hc8ynw2Oa/NFNSm2u3Ov5nn7VEZE+qxuIscKSX+CyE20C5CXysQhRhreRCGq7UNWEvW4 g1dQ==
X-Gm-Message-State: AN3rC/561NuyX3e4pmQ8MfmEfO41HijGOrZ//RSITtBpFLHP+1IUcMpG sL5oUX8SZABwi1TAcpnX4/lfvl6YYQ==
X-Received: by 10.36.53.12 with SMTP id k12mr12798266ita.15.1493424147327; Fri, 28 Apr 2017 17:02:27 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.36.90.77 with HTTP; Fri, 28 Apr 2017 17:02:26 -0700 (PDT)
In-Reply-To: <m2o9vg6snc.wl-randy@psg.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com> <m2y3uk7h8p.wl-randy@psg.com> <CAL9jLaZXqA8-LnAdNOfhCQA+pq1fh1site_shSH+-gH0hCNeqQ@mail.gmail.com> <m2o9vg6snc.wl-randy@psg.com>
From: Brian Dickson <brian.peter.dickson@gmail.com>
Date: Fri, 28 Apr 2017 17:02:26 -0700
Message-ID: <CAH1iCirW2qnmXyGQb5Db0UYjKhODhbeRxdZEGCWfiQRjWnkn5w@mail.gmail.com>
To: Randy Bush <randy@psg.com>
Cc: Christopher Morrow <morrowc.lists@gmail.com>, Interminable Discussion Room <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a114abf94ccf148054e42e798
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/PwAwfeB3gQhlHW6mniXgcRmZue0>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Apr 2017 00:05:07 -0000

--001a114abf94ccf148054e42e798
Content-Type: text/plain; charset=UTF-8

The analogy I would use next, is the US "national electrical code" (itself
a subset of the national fire code).

Specifically, the analogy would be how and when to use "new" NEC code,
which is basically: for new builds, or upgrades that "touch" deployed
infrastructure.
Anything already deployed is de-facto grandfathered, and does not need to
be brought up to code. (But may be by anyone who does not wish to burn to
death.)

And a specific example that fits the use-case of both "fail closed" (or
"open" for electrical circuits), AND the POLA: GFCI outlets.
(GFCI = ground fault circuit interrupt; if the ground connector has any
measurable current, the hot connector has its power turned off within one
"cycle".)

New GFCI outlets (things you wire into an outlet box, and into which
electrical devices get plugged), are REQUIRED to do the following:
- ship in the "tripped" state
- fail to engage unless wired and grounded correctly (engage = hit the
"reset" button to make the outlet electrically "live")

It is now literally impossible to improperly wire a GFCI in such a way that
it provides power without providing GFCI function.


How is does this compare to BGP, under the proposal?

In the specific use case of a new install out-of-the-box:
- configuring BGP globally is the equivalent to wiring an outlet
- configuring a neighbor/address family is the equivalent to hitting the
"reset" button (to try to enable the connection)
- if (and only if) there is a policy on the neighbor, can the BGP session
come up; if (and only if) the outlet is wired correctly can something
plugged in get power

How is this actually POLA?

In the current BGP world, if you configure a BGP neighbor, your router
attempts to bring up a session with the far end. If it succeeds, it
immediately sends/receives/propagates routes whether or not there is a
policy (plus, race condition!).
In the absence of a policy, for a novice engineer, this behavior is
surprising. (It was for me the first time I did it in 1995 (oops), and
others have shared similar experiences.)
Note also, that only when both parties have configured their respective
sessions does peering come up. If the first party forgot to apply policy,
they won't discover the error until the second party brings up their end,
which could be hours or days later.

If the scope of the proposal is limited in a reasonable manner (e.g.
address family, and/or new device, and/or built-in protections to upgraded
code, etc.), no more surprise-by-this-specific-operator-error.

The only "astonishment" should be that vendors (finally) provide code that
stops operators from shooting themselves in the head.
(Shooting the feet is still in the realm of operator error, such as
configured-but-ineffective policy logic.)

Vendors should implement appropriate warnings, of course, but that is a
per-vendor issue, rather than having a sane out-of-the-box behavior which
is consistent within and between vendors.

Brian

On Fri, Apr 28, 2017 at 4:04 PM, Randy Bush <randy@psg.com> wrote:

> > POLA - principle of least resistance
>
> A is for astonishment
>
> > Setting a well known standard starting point really would be helpful
> > here.
>
> but the vendors will need to SERIOUSLY warn users affected by possible
> change for a number of years.  bill's bait and sushi could go from
> release 8 to 42 two years from now.
>
> randy
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a114abf94ccf148054e42e798
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">The analogy I would use next, is the US &quot;national ele=
ctrical code&quot; (itself a subset of the national fire code).<div><br></d=
iv><div>Specifically, the analogy would be how and when to use &quot;new&qu=
ot; NEC code, which is basically: for new builds, or upgrades that &quot;to=
uch&quot; deployed infrastructure.</div><div>Anything already deployed is d=
e-facto grandfathered, and does not need to be brought up to code. (But may=
 be by anyone who does not wish to burn to death.)</div><div><br></div><div=
>And a specific example that fits the use-case of both &quot;fail closed&qu=
ot; (or &quot;open&quot; for electrical circuits), AND the POLA: GFCI outle=
ts.</div><div>(GFCI =3D ground fault circuit interrupt; if the ground conne=
ctor has any measurable current, the hot connector has its power turned off=
 within one &quot;cycle&quot;.)<br></div><div><br></div><div>New GFCI outle=
ts (things you wire into an outlet box, and into which electrical devices g=
et plugged), are REQUIRED to do the following:</div><div>- ship in the &quo=
t;tripped&quot; state</div><div>- fail to engage unless wired and grounded =
correctly (engage =3D hit the &quot;reset&quot; button to make the outlet e=
lectrically &quot;live&quot;)</div><div><br></div><div>It is now literally =
impossible to improperly wire a GFCI in such a way that it provides power w=
ithout providing GFCI function.</div><div><br></div><div><br></div><div>How=
 is does this compare to BGP, under the proposal?</div><div><br></div><div>=
In the specific use case of a new install out-of-the-box:</div><div>- confi=
guring BGP globally is the equivalent to wiring an outlet</div><div>- confi=
guring a neighbor/address family is the equivalent to hitting the &quot;res=
et&quot; button (to try to enable the connection)</div><div>- if (and only =
if) there is a policy on the neighbor, can the BGP session come up; if (and=
 only if) the outlet is wired correctly can something plugged in get power<=
/div><div><br></div><div>How is this actually POLA?</div><div><br></div><di=
v>In the current BGP world, if you configure a BGP neighbor, your router at=
tempts to bring up a session with the far end. If it succeeds, it immediate=
ly sends/receives/propagates routes whether or not there is a policy (plus,=
 race condition!).</div><div>In the absence of a policy, for a novice engin=
eer, this behavior is surprising. (It was for me the first time I did it in=
 1995 (oops), and others have shared similar experiences.)</div><div>Note a=
lso, that only when both parties have configured their respective sessions =
does peering come up. If the first party forgot to apply policy, they won&#=
39;t discover the error until the second party brings up their end, which c=
ould be hours or days later.</div><div><br></div><div>If the scope of the p=
roposal is limited in a reasonable manner (e.g. address family, and/or new =
device, and/or built-in protections to upgraded code, etc.), no more surpri=
se-by-this-specific-operator-error.</div><div><br></div><div>The only &quot=
;astonishment&quot; should be that vendors (finally) provide code that stop=
s operators from shooting themselves in the head.</div><div>(Shooting the f=
eet is still in the realm of operator error, such as configured-but-ineffec=
tive policy logic.)</div><div><br></div><div>Vendors should implement appro=
priate warnings, of course, but that is a per-vendor issue, rather than hav=
ing a sane out-of-the-box behavior which is consistent within and between v=
endors.</div><div><br></div><div>Brian</div><div><div class=3D"gmail_extra"=
><br><div class=3D"gmail_quote">On Fri, Apr 28, 2017 at 4:04 PM, Randy Bush=
 <span dir=3D"ltr">&lt;<a href=3D"mailto:randy@psg.com" target=3D"_blank">r=
andy@psg.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi=
ng-left:1ex"><span class=3D"gmail-">&gt; POLA - principle of least resistan=
ce<br>
<br>
</span>A is for astonishment<br>
<span class=3D"gmail-"><br>
&gt; Setting a well known standard starting point really would be helpful<b=
r>
&gt; here.<br>
<br>
</span>but the vendors will need to SERIOUSLY warn users affected by possib=
le<br>
change for a number of years.=C2=A0 bill&#39;s bait and sushi could go from=
<br>
release 8 to 42 two years from now.<br>
<span class=3D"gmail-HOEnZb"><font color=3D"#888888"><br>
randy<br>
</font></span><div class=3D"gmail-HOEnZb"><div class=3D"gmail-h5"><br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</div></div></blockquote></div><br></div></div></div>

--001a114abf94ccf148054e42e798--


From nobody Fri Apr 28 17:28:27 2017
Return-Path: <randy@psg.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 631D0129AC2 for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 17:28:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GkDmOHNLF79g for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 17:28:24 -0700 (PDT)
Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2AD6129465 for <idr@ietf.org>; Fri, 28 Apr 2017 17:26:02 -0700 (PDT)
Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from <randy@psg.com>) id 1d4GD2-0005lV-FQ; Sat, 29 Apr 2017 00:26:00 +0000
Date: Sat, 29 Apr 2017 09:25:58 +0900
Message-ID: <m27f246ovd.wl-randy@psg.com>
From: Randy Bush <randy@psg.com>
To: Brian Dickson <brian.peter.dickson@gmail.com>
Cc: Christopher Morrow <morrowc.lists@gmail.com>, Interminable Discussion Room <idr@ietf.org>
In-Reply-To: <CAH1iCirW2qnmXyGQb5Db0UYjKhODhbeRxdZEGCWfiQRjWnkn5w@mail.gmail.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com> <m2y3uk7h8p.wl-randy@psg.com> <CAL9jLaZXqA8-LnAdNOfhCQA+pq1fh1site_shSH+-gH0hCNeqQ@mail.gmail.com> <m2o9vg6snc.wl-randy@psg.com> <CAH1iCirW2qnmXyGQb5Db0UYjKhODhbeRxdZEGCWfiQRjWnkn5w@mail.gmail.com>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO)
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset=US-ASCII
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/h1Ks_jVQqKZeXYoqculvM0xCXjw>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Apr 2017 00:28:25 -0000

i don't think gfi receptacles are upgraded in place

randy


From nobody Fri Apr 28 17:40:20 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5CCC1242F5 for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 17:40:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level: 
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gmzkknhKnRZd for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 17:40:18 -0700 (PDT)
Received: from mail-it0-x22c.google.com (mail-it0-x22c.google.com [IPv6:2607:f8b0:4001:c0b::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1237F120227 for <idr@ietf.org>; Fri, 28 Apr 2017 17:37:54 -0700 (PDT)
Received: by mail-it0-x22c.google.com with SMTP id r185so4955542itd.1 for <idr@ietf.org>; Fri, 28 Apr 2017 17:37:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=4cZOC7Bmaqej+8HwgtYDCOo+4ASaroN0SobiOEHaReY=; b=dBXvsxLJLSagHWotcywWMAupUtHk/6UBm5qT8XOX8uCdqcN0c6nP6/6jjbTGdQ99it bJJUWT6nRqz/7AKx5JAMD+r2aLHZgRHlTC/uWRY9cWrxUoDEjqT5gyuqdgtU8+yXh1VC 5S/zYjzfx5PjNsbiFHRnY6FltqR/N/362DXv0ihVb7O8GGc33oIz09fnXX5h8XpArd8Z D9Nj5JG5bnhbGPHDOwZHc1L+a5nNnqUhO5zg2d1viX1Ra0WqtensPSUzj6qnW0vO5HVI hbPCb1tAm2bd0pfr7jC5Qx40EXd7lb0BMs8Ay0yBc79e1rYs12IQs256D/yWgT7PhM0O ag5A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=4cZOC7Bmaqej+8HwgtYDCOo+4ASaroN0SobiOEHaReY=; b=LbTqiwCYaBf4iemnuLk5fkI/Mj7PVLEkDMTI02cRFe1q2M2q454/1l8voLBOjJXGHl ynKfPLJXNLp6zfyByhDBLzm/v0nVBwEnncByYXBjPTnpshb7engKosZeVQEGRm/vd9zv Vje8smdrtcQuywAHzPUER9J11OC45CHEZRlUsz83Yeqk5qdPU6i5UCs2k3e/LnQFRX2c 0CVZDaTDXuXJf/mzvVYqYdEuZx0LG9lUPDUi+/QDRUTC4TF6uDYnk8wNGd35fZtdPgpn ifV4hkd3Zi6dR7Oq5pUavnUHea44IsyAGafjLA4RYijV7LDH3icoTqT757miaDPPJKMV zBVw==
X-Gm-Message-State: AN3rC/7nfuAiTKsEjEHAWqxSXZ5rFr+MMt02CFDD+vbKWao2eg+9QPTO FGUqtJTKaojNSAl4KfqMmQoIG2lWyA==
X-Received: by 10.36.65.193 with SMTP id b62mr13305351itd.104.1493426273808; Fri, 28 Apr 2017 17:37:53 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.62.24 with HTTP; Fri, 28 Apr 2017 17:37:52 -0700 (PDT)
Received: by 10.79.62.24 with HTTP; Fri, 28 Apr 2017 17:37:52 -0700 (PDT)
In-Reply-To: <m27f246ovd.wl-randy@psg.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com> <m2y3uk7h8p.wl-randy@psg.com> <CAL9jLaZXqA8-LnAdNOfhCQA+pq1fh1site_shSH+-gH0hCNeqQ@mail.gmail.com> <m2o9vg6snc.wl-randy@psg.com> <CAH1iCirW2qnmXyGQb5Db0UYjKhODhbeRxdZEGCWfiQRjWnkn5w@mail.gmail.com> <m27f246ovd.wl-randy@psg.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 28 Apr 2017 20:37:52 -0400
X-Google-Sender-Auth: timaonWr0AcV7usmw5_Tk-D72k4
Message-ID: <CA+b+ER=Dj=F6rCmZVtOuYmGQyO5fBZx0=18MdbuOhj3fB=XVKA@mail.gmail.com>
To: Randy Bush <randy@psg.com>
Cc: Brian Dickson <brian.peter.dickson@gmail.com>, idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=001a113a61988c79e8054e4366e3
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/698a5isn60j1imAwlDdbFz3-GW8>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Apr 2017 00:40:20 -0000

--001a113a61988c79e8054e4366e3
Content-Type: text/plain; charset=UTF-8

Actually in US they are ... leave aside that no one else in the world is
using GFIs in the actual outlets ;)

In any case if we are talking GFCI they all have nominal leaking current
which varies again region by region and application ... 6 - 50 mA.

Here we are talking 0 mA !!!


On Apr 28, 2017 20:28, "Randy Bush" <randy@psg.com> wrote:

> i don't think gfi receptacles are upgraded in place
>
> randy
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>

--001a113a61988c79e8054e4366e3
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Actually in US they are ... leave aside that no one else =
in the world is using GFIs in the actual outlets ;)<div dir=3D"auto"><br></=
div><div dir=3D"auto">In any case if we are talking GFCI they all have nomi=
nal leaking current which varies again region by region and application ...=
 6 - 50 mA.</div><div dir=3D"auto"><br></div><div dir=3D"auto">Here we are =
talking 0 mA !!!</div><div dir=3D"auto"><br></div></div><div class=3D"gmail=
_extra"><br><div class=3D"gmail_quote">On Apr 28, 2017 20:28, &quot;Randy B=
ush&quot; &lt;<a href=3D"mailto:randy@psg.com">randy@psg.com</a>&gt; wrote:=
<br type=3D"attribution"><blockquote class=3D"gmail_quote" style=3D"margin:=
0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">i don&#39;t think g=
fi receptacles are upgraded in place<br>
<br>
randy<br>
<br>
______________________________<wbr>_________________<br>
Idr mailing list<br>
<a href=3D"mailto:Idr@ietf.org">Idr@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/idr" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/idr</a><br>
</blockquote></div></div>

--001a113a61988c79e8054e4366e3--


From nobody Fri Apr 28 21:32:51 2017
Return-Path: <randy@psg.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 823BB129B2A for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 21:32:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tLP5O2IFO0nA for <idr@ietfa.amsl.com>; Fri, 28 Apr 2017 21:32:47 -0700 (PDT)
Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36BDD129476 for <idr@ietf.org>; Fri, 28 Apr 2017 21:30:30 -0700 (PDT)
Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from <randy@psg.com>) id 1d4K1b-00076R-RL; Sat, 29 Apr 2017 04:30:28 +0000
Date: Sat, 29 Apr 2017 13:30:26 +0900
Message-ID: <m24lx76djx.wl-randy@psg.com>
From: Randy Bush <randy@psg.com>
To: Robert Raszuk <robert@raszuk.net>
Cc: Interminable Discussion Room <idr@ietf.org>
In-Reply-To: <CA+b+ER=Dj=F6rCmZVtOuYmGQyO5fBZx0=18MdbuOhj3fB=XVKA@mail.gmail.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com> <m2y3uk7h8p.wl-randy@psg.com> <CAL9jLaZXqA8-LnAdNOfhCQA+pq1fh1site_shSH+-gH0hCNeqQ@mail.gmail.com> <m2o9vg6snc.wl-randy@psg.com> <CAH1iCirW2qnmXyGQb5Db0UYjKhODhbeRxdZEGCWfiQRjWnkn5w@mail.gmail.com> <m27f246ovd.wl-randy@psg.com> <CA+b+ER=Dj=F6rCmZVtOuYmGQyO5fBZx0=18MdbuOhj3fB=XVKA@mail.gmail.com>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO)
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset=US-ASCII
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/g-aRPa-ElJZ_2Q5evFG5-KHOyhc>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Apr 2017 04:32:49 -0000

> Actually in US they are
>> i don't think gfi receptacles are upgraded in place

i will admit to not having installed any recently; the last two were in
march of this year.  but i assure you that back in those ancient pre-iot
times, gfi breakers and receptacles were not field upgradable.  they
could only be replaced wholesale.

but ignoring broken analogies and to the point, in the case of this
draft, the operator is in definite danger of a major oops (that's a
technical term) when field upgrading the software in a router.

despite this exposure, i am mostly of the opinion that the benefits
outweigh the risks with this draft.  but vendors should do their best to
ameliorate the risks with loud warnings.

randy


From nobody Sat Apr 29 02:21:54 2017
Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DACD127B60 for <idr@ietfa.amsl.com>; Sat, 29 Apr 2017 02:21:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level: 
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P3h8FWkSmgjg for <idr@ietfa.amsl.com>; Sat, 29 Apr 2017 02:21:51 -0700 (PDT)
Received: from mail-io0-x235.google.com (mail-io0-x235.google.com [IPv6:2607:f8b0:4001:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E920C129353 for <idr@ietf.org>; Sat, 29 Apr 2017 02:20:27 -0700 (PDT)
Received: by mail-io0-x235.google.com with SMTP id a103so81656210ioj.1 for <idr@ietf.org>; Sat, 29 Apr 2017 02:20:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=hMBGCcpsKCluxFrGrQMtCJZQgY79YKIOFWG1+RS7U0I=; b=JoO73u8yY7HG1GHw23XXH9YV4DYr4X5RP0D9mT8XLa5EeoP1usjof3Z82htwv3utyT 8N84Sp+yyeywwWSvDsNrGNKWppPcVAU+RgflswZH9QvG6SxMlizdsYDlQkRSi+P2DF/8 KIC9hy3Lw3+ec/FSEtHeQkCAwBwsQcOx8CR8xut/1hamnhBBZiNTlFj/ol8VyMFXPuSe aL1QGdBZwAe5qxanLzWBM5eC6D0ZW6R1KRfGCrDUESKPD5cNpy45w4IGe3T2VPbKID/f XfjekJgV5C/DQtnfvbIfx5UOG+vhdRzCXYJxLB9kQHpfgXVyNPKsRg5qDuyY0OPm8pTG gHmA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=hMBGCcpsKCluxFrGrQMtCJZQgY79YKIOFWG1+RS7U0I=; b=jObELI/rOHoyaO7jkTqTX0F9EcTL2MPPxPCDeLKsNcsoez7fLKyIm90KcPNjTnUni/ w6GRWtRls/ZydHjCNavis+42xNvJASq4h0ouYdJsdLhEShlNGb2H0JsKJIClkdFytDdN 1uf8E5anV5wGGWiI2viP9JytsnDWAv1uE7IwjA1fXXbSoRHuSI6j92D0b0IXDHXa4qye wB1fcGucG/3j2/SdWFIElkoAh8MA9LNQwKcrlFrmaDbM6jeBW748utXL6eaoFed93QOG SQl7kfbnvXbL+geRUh8sRFyRIcfEkxyOomYjPDE4dzerRlmAkbfHqN8P46OEWURMfxnf O0Gg==
X-Gm-Message-State: AN3rC/4LWytEl8cXE/S3GQaQZ3TUf8d26W+WQ26fivmI6YStq9aXVj4O kPneep34QTvJdgwKjJiq7bFnDnnlu+q4
X-Received: by 10.107.205.132 with SMTP id d126mr14275321iog.155.1493457627343;  Sat, 29 Apr 2017 02:20:27 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.79.62.24 with HTTP; Sat, 29 Apr 2017 02:20:25 -0700 (PDT)
Received: by 10.79.62.24 with HTTP; Sat, 29 Apr 2017 02:20:25 -0700 (PDT)
In-Reply-To: <m24lx76djx.wl-randy@psg.com>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <9047A5A0-ED12-43C2-B2C5-D2A71CBB4373@arrcus.com> <D51D46A7.A9732%acee@cisco.com> <0A49219D-E721-4DA8-B9BF-A55C2FA36FBE@puck.nether.net> <D95C67A4-AEBF-400B-A360-61C342FD6E4A@arrcus.com> <CA+b+ER=hq0=JNRfF8VA76_aqeRMBCeyQm5aTbapysXGTgaGS_g@mail.gmail.com> <CAL9jLaakVACiZKjk6XUi9mwkrCRsPqONUQmrTBCN7V43y+RtrQ@mail.gmail.com> <m2y3uk7h8p.wl-randy@psg.com> <CAL9jLaZXqA8-LnAdNOfhCQA+pq1fh1site_shSH+-gH0hCNeqQ@mail.gmail.com> <m2o9vg6snc.wl-randy@psg.com> <CAH1iCirW2qnmXyGQb5Db0UYjKhODhbeRxdZEGCWfiQRjWnkn5w@mail.gmail.com> <m27f246ovd.wl-randy@psg.com> <CA+b+ER=Dj=F6rCmZVtOuYmGQyO5fBZx0=18MdbuOhj3fB=XVKA@mail.gmail.com> <m24lx76djx.wl-randy@psg.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Sat, 29 Apr 2017 05:20:25 -0400
X-Google-Sender-Auth: JuZ5D-1IZl-Qa0XLSrLnotaciKg
Message-ID: <CA+b+ERm6LuJv+psrE9+DJSgfMSnSHO1LXsFt274J+Btz3WH_1A@mail.gmail.com>
To: Randy Bush <randy@psg.com>
Cc: idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary=94eb2c1887185d72be054e4ab3ff
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/d5F0Fr8cAwtJr0p1Rmzo-wuWjWU>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Apr 2017 09:21:52 -0000

--94eb2c1887185d72be054e4ab3ff
Content-Type: text/plain; charset=UTF-8

> but vendors should do their best
> to ameliorate the risks with loud
> warnings.

Indeed ...

There is also proposed option to significantly reduce the risk by changing
this default only to protect from becomig an accidental transit I suggested
in this thread already.

It is simple to implement by vendors, does not require any protocol change
and does not affect in any way stub guys which today advertise their PI
prefix out and get default in.

Which btw they must already explicitely enumerate either in "network"
statement or "route/prefix-map" during redistribution. Why to enforce same
thing to be configured multiple times in your config ? That is always error
prone.

Thx
R.

--94eb2c1887185d72be054e4ab3ff
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div class=3D"gmail_extra" dir=3D"auto"><div class=3D"gma=
il_quote">&gt; but vendors should do their best=C2=A0</div><div class=3D"gm=
ail_quote" dir=3D"auto">&gt; to ameliorate the risks with loud=C2=A0</div><=
div class=3D"gmail_quote" dir=3D"auto">&gt; warnings.</div><div class=3D"gm=
ail_quote" dir=3D"auto"><br></div><div class=3D"gmail_quote" dir=3D"auto">I=
ndeed ...=C2=A0</div><div class=3D"gmail_quote" dir=3D"auto"><br></div><div=
 class=3D"gmail_quote" dir=3D"auto">There is also proposed option to signif=
icantly reduce the risk by changing this default only to protect from becom=
ig an accidental transit I suggested in this thread already.</div><div clas=
s=3D"gmail_quote" dir=3D"auto"><br></div><div class=3D"gmail_quote" dir=3D"=
auto">It is simple to implement by vendors, does not require any protocol c=
hange and does not affect in any way stub guys which today advertise their =
PI prefix out and get default in.</div><div class=3D"gmail_quote" dir=3D"au=
to"><br></div><div class=3D"gmail_quote" dir=3D"auto">Which btw they must a=
lready explicitely enumerate either in &quot;network&quot; statement or &qu=
ot;route/prefix-map&quot; during redistribution. Why to enforce same thing =
to be configured multiple times in your config ? That is always error prone=
.</div><div class=3D"gmail_quote" dir=3D"auto"><br></div><div class=3D"gmai=
l_quote" dir=3D"auto">Thx</div><div class=3D"gmail_quote" dir=3D"auto">R.</=
div><div class=3D"gmail_quote" dir=3D"auto"><br></div><div class=3D"gmail_q=
uote" dir=3D"auto"><br></div><div class=3D"gmail_quote" dir=3D"auto"><br></=
div><div class=3D"gmail_quote" dir=3D"auto"><br></div><div class=3D"gmail_q=
uote" dir=3D"auto"><br></div></div></div>

--94eb2c1887185d72be054e4ab3ff--


From nobody Sun Apr 30 15:31:06 2017
Return-Path: <jheitz@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EB3D12947B for <idr@ietfa.amsl.com>; Sun, 30 Apr 2017 15:31:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.823
X-Spam-Level: 
X-Spam-Status: No, score=-11.823 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1QSyajScB1Zj for <idr@ietfa.amsl.com>; Sun, 30 Apr 2017 15:31:03 -0700 (PDT)
Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D7681204DA for <idr@ietf.org>; Sun, 30 Apr 2017 15:29:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=839; q=dns/txt; s=iport; t=1493591351; x=1494800951; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=Il+TQhA/u3SdfbErHEATXI5O3tMuN3XyEd6L72S6C2c=; b=WoLCDOF/4aGSKtlGPTTNMv3JTSXo0eHxhGaYEiYsMXTZqzduwYGyhDLM fTzYF/19N6jb+S7fOBr2ClCgt8R1AhtY13s9fMSnwg8h6LHCo+4gxXcGX fpM/80huLUc1A3RPsBngh/cV/b21b+bltBpGnKskGM090q3mo8Tcyf0Tf 8=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DNAAD9YwZZ/4kNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgywpYoEMB415kU2VbYIPIQuFeAKENz8YAQIBAQEBAQEBayiFFQE?= =?us-ascii?q?BAQEDAQE4NAsMBAIBCA4DBAEBAR4JBycLFAkIAgQBDQUIiAkBgg0OsHSLDQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBARgFhl+EeYQ0EgGGAQWdUwGTB5FnlCwBHzh/C28?= =?us-ascii?q?VRIZwdYZzgSGBDQEBAQ?=
X-IronPort-AV: E=Sophos;i="5.37,397,1488844800"; d="scan'208";a="419899673"
Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 30 Apr 2017 22:29:10 +0000
Received: from XCH-RCD-012.cisco.com (xch-rcd-012.cisco.com [173.37.102.22]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id v3UMTAdi018662 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 30 Apr 2017 22:29:10 GMT
Received: from xch-aln-014.cisco.com (173.36.7.24) by XCH-RCD-012.cisco.com (173.37.102.22) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sun, 30 Apr 2017 17:29:09 -0500
Received: from xch-aln-014.cisco.com ([173.36.7.24]) by XCH-ALN-014.cisco.com ([173.36.7.24]) with mapi id 15.00.1210.000; Sun, 30 Apr 2017 17:29:09 -0500
From: "Jakob Heitz (jheitz)" <jheitz@cisco.com>
To: Mikael Abrahamsson <swmike@swm.pp.se>, Robert Raszuk <robert@raszuk.net>
CC: idr wg <idr@ietf.org>
Thread-Topic: [Idr] new thread regarding capabilities handling
Thread-Index: AQHSvxW8g4JW974FxUC7sLdZ6BzDD6HZBUUAgAALVYCAAOuqAIAACjgAgACKNICAABaTgIAAEg2AgAPJcFA=
Date: Sun, 30 Apr 2017 22:29:09 +0000
Message-ID: <3f8ec5766b5348c5a27bbe5ad1fecb11@XCH-ALN-014.cisco.com>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com> <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se> <20170427201736.GF22975@pfrc.org> <e4ad3bd2-73cd-c1f7-6ef4-8bbd974974ae@cisco.com> <alpine.DEB.2.02.1704280706040.5591@uplift.swm.pp.se> <CA+b+ERn6fdTTkWWSXN4nHgs+QJevrH3Hzh54f5Sgijt-0Aei7A@mail.gmail.com> <alpine.DEB.2.02.1704280919340.5591@uplift.swm.pp.se>
In-Reply-To: <alpine.DEB.2.02.1704280919340.5591@uplift.swm.pp.se>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.24.8.22]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/IZeQGUetUOGkY8sroV8cO4u8q7c>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 30 Apr 2017 22:31:05 -0000

If it goes down with a notification message, you don't get GR.
I haven't tried it, but I bet you get a CEASE.

Thanks,
Jakob.


> -----Original Message-----
> From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Mikael Abrahamsson
> Sent: Friday, April 28, 2017 12:34 AM
> To: Robert Raszuk <robert@raszuk.net>
> Cc: idr wg <idr@ietf.org>
> Subject: Re: [Idr] new thread regarding capabilities handling
>=20
> On Fri, 28 Apr 2017, Robert Raszuk wrote:
>=20
> > Just try it out ;)
>=20
> I have tried it out. From what I remember we had to turn it off because i=
t
> gave us 3 minute outages that we didn't much desire.
>=20
> --
> Mikael Abrahamsson    email: swmike@swm.pp.se
>=20
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr


From nobody Sun Apr 30 16:08:23 2017
Return-Path: <acee@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDD6B1273B1 for <idr@ietfa.amsl.com>; Sun, 30 Apr 2017 16:08:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fjKcrtQpT99A for <idr@ietfa.amsl.com>; Sun, 30 Apr 2017 16:08:20 -0700 (PDT)
Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E91A1204DA for <idr@ietf.org>; Sun, 30 Apr 2017 16:06:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1856; q=dns/txt; s=iport; t=1493593588; x=1494803188; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=TVUb54aeMVJJpaMEdlZ7vG5xSttmZYMmDJQZlOjn7mQ=; b=MI+r8dDlHkzJOng0//aH6cwX1LW4ite3tA2ZCAPqfW3WvoGoUt6fR3HW cSJ1xxy3KdMF60mwOtzqnFZ9aWbvdiVtPHUR2Br5VOqAeoKEXSB2kxGB+ 6h676PdaqtlaUfLMQgJQrXN2+LPu3PZE9KHHlRJK2SC75nfgekq8tak2N A=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AbAQB/bQZZ/4UNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgywpYoEMB4NhihiRTJVtgg8hC4V4AhqEHT8YAQIBAQEBAQEBayi?= =?us-ascii?q?FFQEBAQEDAQEhEToLDAQCAQgRBAEBAQICIwMCAgIlCxQBCAgCBAENBYgRAYIND?= =?us-ascii?q?q46giaLDAEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgQuKTYQ0EgEzgm+CXwEEnVM?= =?us-ascii?q?BkxCRXpQsAR84fwtvFUSGcHUBhnKBIYENAQEB?=
X-IronPort-AV: E=Sophos;i="5.37,397,1488844800"; d="scan'208";a="239670861"
Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 30 Apr 2017 23:06:07 +0000
Received: from XCH-RTP-011.cisco.com (xch-rtp-011.cisco.com [64.101.220.151]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v3UN66aa028340 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 30 Apr 2017 23:06:07 GMT
Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-011.cisco.com (64.101.220.151) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sun, 30 Apr 2017 19:06:06 -0400
Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Sun, 30 Apr 2017 19:06:06 -0400
From: "Acee Lindem (acee)" <acee@cisco.com>
To: "Jakob Heitz (jheitz)" <jheitz@cisco.com>, Mikael Abrahamsson <swmike@swm.pp.se>, Robert Raszuk <robert@raszuk.net>
CC: idr wg <idr@ietf.org>
Thread-Topic: [Idr] new thread regarding capabilities handling
Thread-Index: AQHSvxW8LioIT0l6gkikfbkKmzakFqHY9IIAgAALVICAAOurAIAACjcAgACKNYCAABaTgIAAEgyAgAQetYD//8dDgA==
Date: Sun, 30 Apr 2017 23:06:06 +0000
Message-ID: <D52BE58A.AC52B%acee@cisco.com>
References: <alpine.DEB.2.02.1704270713380.5591@uplift.swm.pp.se> <a7a10b72-2215-9968-e4c8-0592e29ce893@cisco.com> <alpine.DEB.2.02.1704270812470.5591@uplift.swm.pp.se> <20170427201736.GF22975@pfrc.org> <e4ad3bd2-73cd-c1f7-6ef4-8bbd974974ae@cisco.com> <alpine.DEB.2.02.1704280706040.5591@uplift.swm.pp.se> <CA+b+ERn6fdTTkWWSXN4nHgs+QJevrH3Hzh54f5Sgijt-0Aei7A@mail.gmail.com> <alpine.DEB.2.02.1704280919340.5591@uplift.swm.pp.se> <3f8ec5766b5348c5a27bbe5ad1fecb11@XCH-ALN-014.cisco.com>
In-Reply-To: <3f8ec5766b5348c5a27bbe5ad1fecb11@XCH-ALN-014.cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.116.152.197]
Content-Type: text/plain; charset="utf-8"
Content-ID: <CACDE747E3A59E4285C474EBBF1DC365@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Gl7ChouEiKYoas_SvzJq5haAVEM>
Subject: Re: [Idr] new thread regarding capabilities handling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 30 Apr 2017 23:08:22 -0000
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