From nobody Sat Sep 1 15:48:35 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B1E0130E1D; Sat, 1 Sep 2018 15:48:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iIxZyVSOZ3Ip; Sat, 1 Sep 2018 15:48:24 -0700 (PDT) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62382130E58; Sat, 1 Sep 2018 15:48:24 -0700 (PDT) Received: from localhost ([127.0.0.1] helo=ryuu.rg.net) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1fwEgn-0007Dp-G3; Sat, 01 Sep 2018 22:48:22 +0000 Date: Sat, 01 Sep 2018 15:48:19 -0700 Message-ID: From: Randy Bush To: lsvr@ietf.org, Interminable Discussion Room References: <153584188804.20643.291360310615992815.idtracker@ietfa.amsl.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.3 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: [Lsvr] Fwd: New Version Notification for draft-ymbk-lsvr-discovery-req-00.txt X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Sep 2018 22:48:26 -0000 A new version of I-D, draft-ymbk-lsvr-discovery-req-00.txt has been successfully submitted by Randy Bush and posted to the IETF repository. Name: draft-ymbk-lsvr-discovery-req Revision: 00 Title: BGP-SPF Topology Discovery Requirements Document date: 2018-09-01 Group: Individual Submission Pages: 6 URL: https://www.ietf.org/internet-drafts/draft-ymbk-lsvr-discovery-req-00.txt Status: https://datatracker.ietf.org/doc/draft-ymbk-lsvr-discovery-req/ Htmlized: https://tools.ietf.org/html/draft-ymbk-lsvr-discovery-req-00 Htmlized: https://datatracker.ietf.org/doc/html/draft-ymbk-lsvr-discovery-req Abstract: For wide scale routing protocols to build their topology and reachability databases they need link neighbor discovery, link encapsulation data, and layer two liveness. BGP-LS and its enhancements provide an API to present much of these data to BGP protocols, but do not actually collect these data. This document explores the needs and criteria for the data needed. From nobody Tue Sep 4 01:16:48 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12C1C130DFB; Tue, 4 Sep 2018 01:16:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ci3XjUib4LX4; Tue, 4 Sep 2018 01:16:38 -0700 (PDT) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0096.outbound.protection.outlook.com [104.47.1.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C585130DEF; Tue, 4 Sep 2018 01:16:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=SKpd5OWd1kQQsDkwIj3qSglpbqhZkJneJZUu+22k6HI=; b=Uc6+3dJ4GYTf0srFhY5YnzXUZblZfOh4OP/Wj0R4ZPnOxUvxbcNiQixOGvnzuOG6JWaQK5WU8bWOiIv1zR+beJoFeVlFcA5hsVGddXZbmI5d5Y2e+PSxX4P7VNR4kQM1zzg5jLFwj0ywv1x9G5WclpulRhNEkK9I/81Rw7F7zDQ= Received: from AM5PR0701MB1729.eurprd07.prod.outlook.com (10.167.215.136) by AM5PR0701MB2899.eurprd07.prod.outlook.com (10.168.156.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1122.8; Tue, 4 Sep 2018 08:16:33 +0000 Received: from AM5PR0701MB1729.eurprd07.prod.outlook.com ([fe80::6108:19f1:f3a:7125]) by AM5PR0701MB1729.eurprd07.prod.outlook.com ([fe80::6108:19f1:f3a:7125%2]) with mapi id 15.20.1122.009; Tue, 4 Sep 2018 08:16:33 +0000 From: "Van De Velde, Gunter (Nokia - BE/Antwerp)" To: "lsvr@ietf.org" , "opsec@ietf.org" CC: Randy Bush Thread-Topic: [Lsvr] security against what? Thread-Index: AQHUKIRnB1utw2csLUuWDeq/IlDMM6Tf/Duw Date: Tue, 4 Sep 2018 08:16:33 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=gunter.van_de_velde@nokia.com; x-originating-ip: [2a02:1810:4d67:a00:840:cf05:9be2:59ff] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM5PR0701MB2899; 6:cLxagXzLA5NQs+vEJMy68M9UOrwypcjtMoNLbfoFfn6pIfnupnAAyFWTG4Q3B8qGmd6dy4skqEjUi2Nb2lqlGIF01ADB32FyUVr2RTcOQOBCmqvSDguHYGTFpfITFJzsJ2G47sOdXtgeu4NiFb5dhLQGGNMhXzHxPnirNhGmYk++l6tGUFeEjswkBjR5/ekk4rMhbBW44q596xZanab/+Y7vGee0h5QVydkyNNt9HpdsQIi+0R+ZOrVz3APyOA+I8N81t+J5zvEQ3bu05HVhitURbNV1FOn+DQ6L2QhRq7akvv1dS6QrnJGkZr5E2zY7keLTOa6nChGPWbqkEGjmI7nC5FVLynzcAaIKRPSEEOBHsePgrQMxMwIBPW8jvvg73ryHqvbTYgG07ZmIzw5kHegPkTW2enkcL8PF4grSdvifrtNhj8dOJoZ9bRBSC0fGmsa5V7gP5ln+BclGCRuC/w==; 5:GW6j0958yJsF0IJNAmzv+bEbrI0E1KGCtV6wYNEy8VoPJAytoriClAVuigP4OLweYl5U1wTwIs8mHfV0n93cjv1IciEcmvp6lLsEDPfhXNtmLb7eHXahib4XhZns5uVNZQMT1sL+L/Kem2etPDWzCHu8XtbXtdLSpzkxtn9Bz20=; 7:/SlvLCwNmyuMGRa7yVyo5P5qLNCU9i+XyPuTmbtjddg6hSZypA3bTyrmASF1D7LdP2z3Ilmr90jkCRpNhYibIPgRpoOeZBn9AL6LeT/tZH3Xpdx0kAl4oE8hCR+3ggL+86OiINs8fw3jc1LPoVRopI4ouX1fMhvEfGVE1egFIF3W0KR+rEyELDtWHUGBuwXM3EBnozpucwhLSjSc7lQLDVNCQaFADo5VsRcXNgCiuxP++Qek9cJOmQVVPPoGOLgj x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: f404bffa-2c8c-4ab2-b787-08d6123eb9c3 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:AM5PR0701MB2899; x-ms-traffictypediagnostic: AM5PR0701MB2899: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(10201501046)(3002001)(93006095)(93001095)(3231311)(11241501184)(806099)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(201708071742011)(7699016); SRVR:AM5PR0701MB2899; BCL:0; PCL:0; RULEID:; SRVR:AM5PR0701MB2899; x-forefront-prvs: 0785459C39 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(396003)(346002)(376002)(39860400002)(366004)(53754006)(13464003)(189003)(199004)(478600001)(316002)(6436002)(186003)(229853002)(8676002)(81156014)(74316002)(46003)(33656002)(4326008)(110136005)(68736007)(81166006)(14454004)(6246003)(53936002)(8936002)(6116002)(55016002)(102836004)(97736004)(106356001)(105586002)(6306002)(966005)(6506007)(2900100001)(7696005)(15650500001)(11346002)(5250100002)(76176011)(53546011)(256004)(476003)(86362001)(305945005)(14444005)(486006)(5660300001)(25786009)(99286004)(446003)(2501003)(2906002)(9686003)(7736002); DIR:OUT; SFP:1102; SCL:1; SRVR:AM5PR0701MB2899; H:AM5PR0701MB1729.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: GPkyXPhnLi+8rsuDmuuRQzd1UvTMp/COlRYs8m2vdfQoa0G0oqX/dNgSqRdVtyUlno7bWNjMe5OnqckDohpCAm0czA6+F4uXXW1fuxyE5ygdbOfNtjjNDiBmZdO4zlJ7F+HcVIFCCwxdyCDvzQpE80YtsM+WIepmUEYDEiBE7dIS+b1ICJLwWKNMyndTBtyJ7tuMO5Q5p8Rs5QUQ/dV4D0QKG23qV2hCBfckOMNPXwCFNXzaMYgFtmgWr2K13I7+03eG9sng9fkXgnUNpU/90L/k9bWH8U8uzhwm/VsMjVMT9V/qybS5opyO2BpJxWY6Bbr0CpA+i7Wx3hddGLGtvkQK+MI1Ml/nybK8jiHdvHaABs1u6shfyVhgJABC8DWWNDLEUCuMyULcAUzRJTLgYg== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-Network-Message-Id: f404bffa-2c8c-4ab2-b787-08d6123eb9c3 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Sep 2018 08:16:33.2606 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2899 Archived-At: Subject: Re: [Lsvr] security against what? X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 08:16:40 -0000 Hi All, Holiday season is over, maybe time to progress the discussion about DC secu= rity properties. Any constructive comments regarding the below "crude guess as a straw" from= Randy? Brgds, Gunter VdV LSVR WG co-chair -----Original Message----- From: Lsvr On Behalf Of Randy Bush Sent: Tuesday, July 31, 2018 06:10 To: Little Strange Very Real Subject: [Lsvr] security against what? at the montr=E9al meeting, a few datacener operators said they were serious= ly concerned about security. befofe thinking about any solution space, i a= m interested in the basic question, what is the threat model? here is my crude guess as a straw not so much intentional mitm by an attacker strange/unauthorized device plugs into a port. 92.3% of the problems will be a miswire. datacenter clos miswires are a major issue. someone plugs a (accidentally) poisoned laptop into a clos port. clue bat from the ops, please. randy _______________________________________________ Lsvr mailing list Lsvr@ietf.org https://www.ietf.org/mailman/listinfo/lsvr From nobody Tue Sep 4 01:51:27 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12A4B130E58 for ; Tue, 4 Sep 2018 01:50:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.51 X-Spam-Level: X-Spam-Status: No, score=-17.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l8lykE-yt7bm for ; Tue, 4 Sep 2018 01:50:02 -0700 (PDT) Received: from mail-wr1-x42f.google.com (mail-wr1-x42f.google.com [IPv6:2a00:1450:4864:20::42f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE826130E51 for ; Tue, 4 Sep 2018 01:50:01 -0700 (PDT) Received: by mail-wr1-x42f.google.com with SMTP id o37-v6so3044794wrf.6 for ; Tue, 04 Sep 2018 01:50:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=mJsjGVHovkD4AtEpEKyyl8EST9H3unF9+vAQvdiAimg=; b=CpZhZXgR3mTEBUJKqYWFTHrFvCyTtaUHKNQ3XYiIQX1XhH6qNbmF6BRxjZNxOBP9oi /9+8F5QQDPwGKwOPXfU3xJa6+pyJlG5buTFsU3FvZexuJ7tWlQA9TEmeB7Sy3OosukD7 PAchjF0FMR+2Rnyv3CDFTh6szYaKizu4UvSElgjelcA48XmHZexTnhJtEliPMB3i8u4v QFDFdBbM5wUCG7mX+HwJfNAzDYm0GLFl3FbOxAMqFxhXHUf+vZGPGJ+bNjWCRG+fJMdA KOd4wQjncgn8SZ/Oa48ZI6j/x411s7un+lsRWFlj5IVjIiy7Umtu5EG29RLR8laX9CpA V9lQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=mJsjGVHovkD4AtEpEKyyl8EST9H3unF9+vAQvdiAimg=; b=BoPdIVVn4OXUmCsYbPLvHS75zIkVaRntaWhgxSQJE+v7iolv9fOX/+g+98F+vIRMhi mdp0xNiFHUvJwBpJ24HamcPe/iZgaeDF8eZTXtNC+Uy7jbSm5L9gjcGzDjVKTd8EWQzR ihGDmTgh0orAMVrgr+CZJRiaPvQV/LHFOcvd6/JXCbuYpv1nD2/ZHLoSbufJVxqgghkS kgu7/Mr7NhX5aRkFO+QpBPc2h9AA9SQ5soFR0gna6Al2/DFz1pQ+c3WvYO8V3BjY8bHO Vrof36bc4z3xORTfDdyN0HwhSeGeFcXi2+aF+9WTnos4JlTf1vYoG4XudXWOkcKiS+TP By/Q== X-Gm-Message-State: APzg51ALAVnUAZ5d4JNReVUE64xDGdmVDXhJiA/7Qu/vbeVWkm8IlWUi dOKNo1S76NtYN6COXtRagGtA9XL+pzavht7PnBs8FQ== X-Google-Smtp-Source: ANB0Vdbeu7KK9WZi6wOqxXVhtBkws5et4VppjMKp3cJzZiuJz1l1gwraxuFe/8TTENVmZQikbJe7p8cmDfepZZxjMgM= X-Received: by 2002:adf:9d1c:: with SMTP id k28-v6mr12363404wre.104.1536050999709; Tue, 04 Sep 2018 01:49:59 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Erik Kline Date: Tue, 4 Sep 2018 17:49:46 +0900 Message-ID: To: "Van De Velde, Gunter (Nokia - BE/Antwerp)" Cc: lsvr@ietf.org, opsec@ietf.org, Randy Bush Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="0000000000003a8e86057507be22" Archived-At: X-Mailman-Approved-At: Tue, 04 Sep 2018 01:51:25 -0700 Subject: Re: [Lsvr] [OPSEC] security against what? X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 08:50:06 -0000 --0000000000003a8e86057507be22 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Is recommending 802.1x possible/sufficient (given the description in Randy's strawperson comment)? On Tue, 4 Sep 2018 at 17:16, Van De Velde, Gunter (Nokia - BE/Antwerp) wrote: > > Hi All, > > Holiday season is over, maybe time to progress the discussion about DC se= curity properties. > > Any constructive comments regarding the below "crude guess as a straw" fr= om Randy? > > Brgds, > > Gunter VdV > LSVR WG co-chair > > -----Original Message----- > From: Lsvr On Behalf Of Randy Bush > Sent: Tuesday, July 31, 2018 06:10 > To: Little Strange Very Real > Subject: [Lsvr] security against what? > > at the montr=C3=A9al meeting, a few datacener operators said they were se= riously concerned about security. befofe thinking about any solution space= , i am interested in the basic question, what is the threat model? > > here is my crude guess as a straw > > not so much intentional mitm by an attacker > > strange/unauthorized device plugs into a port. 92.3% of the problems > will be a miswire. datacenter clos miswires are a major issue. > > someone plugs a (accidentally) poisoned laptop into a clos port. > > clue bat from the ops, please. > > randy > > _______________________________________________ > Lsvr mailing list > Lsvr@ietf.org > https://www.ietf.org/mailman/listinfo/lsvr > > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec --0000000000003a8e86057507be22 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIIS3wYJKoZIhvcNAQcCoIIS0DCCEswCAQExDzANBglghkgBZQMEAgEFADALBgkqhkiG9w0BBwGg ghBFMIIEXDCCA0SgAwIBAgIOSBtqDm4P/739RPqw/wcwDQYJKoZIhvcNAQELBQAwZDELMAkGA1UE BhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExOjA4BgNVBAMTMUdsb2JhbFNpZ24gUGVy c29uYWxTaWduIFBhcnRuZXJzIENBIC0gU0hBMjU2IC0gRzIwHhcNMTYwNjE1MDAwMDAwWhcNMjEw NjE1MDAwMDAwWjBMMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEiMCAG A1UEAxMZR2xvYmFsU2lnbiBIViBTL01JTUUgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALR23lKtjlZW/17kthzYcMHHKFgywfc4vLIjfq42NmMWbXkNUabIgS8KX4PnIFsTlD6F GO2fqnsTygvYPFBSMX4OCFtJXoikP2CQlEvO7WooyE94tqmqD+w0YtyP2IB5j4KvOIeNv1Gbnnes BIUWLFxs1ERvYDhmk+OrvW7Vd8ZfpRJj71Rb+QQsUpkyTySaqALXnyztTDp1L5d1bABJN/bJbEU3 Hf5FLrANmognIu+Npty6GrA6p3yKELzTsilOFmYNWg7L838NS2JbFOndl+ce89gM36CW7vyhszi6 6LqqzJL8MsmkP53GGhf11YMP9EkmawYouMDP/PwQYhIiUO0CAwEAAaOCASIwggEeMA4GA1UdDwEB /wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/BAgwBgEB/wIB ADAdBgNVHQ4EFgQUyzgSsMeZwHiSjLMhleb0JmLA4D8wHwYDVR0jBBgwFoAUJiSSix/TRK+xsBtt r+500ox4AAMwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9n c3BlcnNvbmFsc2lnbnB0bnJzc2hhMmcyLmNybDBMBgNVHSAERTBDMEEGCSsGAQQBoDIBKDA0MDIG CCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzANBgkqhkiG 9w0BAQsFAAOCAQEACskdySGYIOi63wgeTmljjA5BHHN9uLuAMHotXgbYeGVrz7+DkFNgWRQ/dNse Qa4e+FeHWq2fu73SamhAQyLigNKZF7ZzHPUkSpSTjQqVzbyDaFHtRBAwuACuymaOWOWPePZXOH9x t4HPwRQuur57RKiEm1F6/YJVQ5UTkzAyPoeND/y1GzXS4kjhVuoOQX3GfXDZdwoN8jMYBZTO0H5h isymlIl6aot0E5KIKqosW6mhupdkS1ZZPp4WXR4frybSkLejjmkTYCTUmh9DuvKEQ1Ge7siwsWgA NS1Ln+uvIuObpbNaeAyMZY0U5R/OyIDaq+m9KXPYvrCZ0TCLbcKuRzCCBB4wggMGoAMCAQICCwQA AAAAATGJxkCyMA0GCSqGSIb3DQEBCwUAMEwxIDAeBgNVBAsTF0dsb2JhbFNpZ24gUm9vdCBDQSAt IFIzMRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWduMB4XDTExMDgwMjEw MDAwMFoXDTI5MDMyOTEwMDAwMFowZDELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24g bnYtc2ExOjA4BgNVBAMTMUdsb2JhbFNpZ24gUGVyc29uYWxTaWduIFBhcnRuZXJzIENBIC0gU0hB MjU2IC0gRzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/hRKosYAGP+P7mIdq5NB Kr3J0tg+8lPATlgp+F6W9CeIvnXRGUvdniO+BQnKxnX6RsC3AnE0hUUKRaM9/RDDWldYw35K+sge C8fWXvIbcYLXxWkXz+Hbxh0GXG61Evqux6i2sKeKvMr4s9BaN09cqJ/wF6KuP9jSyWcyY+IgL6u2 52my5UzYhnbf7D7IcC372bfhwM92n6r5hJx3r++rQEMHXlp/G9J3fftgsD1bzS7J/uHMFpr4MXua eoiMLV5gdmo0sQg23j4pihyFlAkkHHn4usPJ3EePw7ewQT6BUTFyvmEB+KDoi7T4RCAZDstgfpzD rR/TNwrK8/FXoqnFAgMBAAGjgegwgeUwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8C AQEwHQYDVR0OBBYEFCYkkosf00SvsbAbba/udNKMeAADMEcGA1UdIARAMD4wPAYEVR0gADA0MDIG CCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzA2BgNVHR8E LzAtMCugKaAnhiVodHRwOi8vY3JsLmdsb2JhbHNpZ24ubmV0L3Jvb3QtcjMuY3JsMB8GA1UdIwQY MBaAFI/wS3+oLkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQACAFVjHihZCV/IqJYt 7Nig/xek+9g0dmv1oQNGYI1WWeqHcMAV1h7cheKNr4EOANNvJWtAkoQz+076Sqnq0Puxwymj0/+e oQJ8GRODG9pxlSn3kysh7f+kotX7pYX5moUa0xq3TCjjYsF3G17E27qvn8SJwDsgEImnhXVT5vb7 qBYKadFizPzKPmwsJQDPKX58XmPxMcZ1tG77xCQEXrtABhYC3NBhu8+c5UoinLpBQC1iBnNpNwXT Lmd4nQdf9HCijG1e8myt78VP+QSwsaDT7LVcLT2oDPVggjhVcwljw3ePDwfGP9kNrR+lc8XrfClk WbrdhC2o4Ui28dtIVHd3MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAw TDEgMB4GA1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNpZ24x EzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4MTAwMDAwWjBMMSAw HgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEG A1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5Bngi FvXAg7aEyiie/QV2EcWtiHL8RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X 17YUhhB5uzsTgHeMCOFJ0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmm KPZpO/bLyCiR5Z2KYVc3rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zdQQ4gOsC0p6Hp sk+QLjJg6VfLuQSSaGjlOCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZXriX7613t2Saer9fwRPvm2L7 DWzgVGkWqQPabumDk3F2xmmFghcCAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQF MAMBAf8wHQYDVR0OBBYEFI/wS3+oLkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBL QNvAUKr+yAzv95ZURUm7lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25s bwMpjjM5RcOO5LlXbKr8EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK6fBdRoyV 3XpYKBovHd7NADdBj+1EbddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQXmcIfeg7jLQitChws/zyr VQ4PkX4268NXSb7hLi18YIvDQVETI53O9zJrlAGomecsMx86OyXShkDOOyyGeMlhLxS67ttVb9+E 7gUJTb0o2HLO02JQZR7rkpeDMdmztcpHWD9fMIIEXDCCA0SgAwIBAgIMPipSifuL4Tx7dmsbMA0G CSqGSIb3DQEBCwUAMEwxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIw IAYDVQQDExlHbG9iYWxTaWduIEhWIFMvTUlNRSBDQSAxMB4XDTE4MDcxNTA2MzcxOFoXDTE5MDEx MTA2MzcxOFowHjEcMBoGCSqGSIb3DQEJAQwNZWtAZ29vZ2xlLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALkHIP2fSFudoue2xAkNBouFm2EulKm/RKnsxmEw4dSbxQC2Mt72Ga/t ySyn6PMSAgsyjgP0bKJZf/NHBzDGuSKpY09UgBupEUEejwR4d5vrHk8IJNfIDTQ+Ygv4krlQmkO0 Qh/GB1y4PxtIn0tVfGfB7s3Z7wWyYbN1JrUrxAhKTpvkbJLRF1n/fKgv1nfUYyY9se4cZE3XQbJV 2biA0ATE8hw55TPa9FTv+QuWbAWXlTfsvz8SxdL8cs1HXVzBwi7kpzm2LbLictqUYotBdrCk2JQ9 ZkICHIpunwWnfTfNJ1Vt7MYL8worV+Y0TfBP0Uw1IG8qQ1Fdie3quVfdAoUCAwEAAaOCAWowggFm MBgGA1UdEQQRMA+BDWVrQGdvb2dsZS5jb20wUAYIKwYBBQUHAQEERDBCMEAGCCsGAQUFBzAChjRo dHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2h2c21pbWVjYTEuY3J0MB0GA1Ud DgQWBBQw12fRZdlCj/XWgp08Ky/Ct82W7DAfBgNVHSMEGDAWgBTLOBKwx5nAeJKMsyGV5vQmYsDg PzBMBgNVHSAERTBDMEEGCSsGAQQBoDIBKDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9i YWxzaWduLmNvbS9yZXBvc2l0b3J5LzA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLmdsb2Jh bHNpZ24uY29tL2dzaHZzbWltZWNhMS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMCBggrBgEFBQcDBDANBgkqhkiG9w0BAQsFAAOCAQEAsH2eOQwQDXJ145YZFyjaTxqiVS9t F3F65BSt739euYxmyoYFAFgBVwRLXBjD0eTRqz6W6O9FC3ZPzsIup/DXZZlPNPitbqGA391usTKN YHYsBchdjOocgO8gNokf3H4yvjUv6699ncUQXX+d0deUo38jOa4+OujSIQbz+PUicageFuFcraDO MV5VMHYtn/1Ngkrw4JSaf2nv1WTfUBQyRRorMCPXVJZLEm8K0apTK2RHaxnFvXHJjFPkLLsJSwmQ RCeC98jyQdFHPQank0x8KmEo+nlu2d0X0n/aLibqG7rRSVKINpvLv6C3j8P4b1t1Fu23J6OYkWUx Rz/Rs1hfPTGCAl4wggJaAgEBMFwwTDELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24g bnYtc2ExIjAgBgNVBAMTGUdsb2JhbFNpZ24gSFYgUy9NSU1FIENBIDECDD4qUon7i+E8e3ZrGzAN BglghkgBZQMEAgEFAKCB1DAvBgkqhkiG9w0BCQQxIgQgbqLOXVOV8Ve8CkghxJ0JhLeHAm5MHgPk 6ya2uDyodEgwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTgwOTA0 MDg1MDAwWjBpBgkqhkiG9w0BCQ8xXDBaMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCwYJYIZI AWUDBAECMAoGCCqGSIb3DQMHMAsGCSqGSIb3DQEBCjALBgkqhkiG9w0BAQcwCwYJYIZIAWUDBAIB MA0GCSqGSIb3DQEBAQUABIIBAKQNBEhj1kg9Ofoks7qpaD0q/7wpM9esb/y+hUEGg9jzC6nFM71N iJIQBiuWZuTHPphIYwR7eMNB6UzTZ4HOJPxQT248LkDW90NBpHiRSSlstKJl1iH2ifojqGyMTtG+ M/ru0YgxIcnh5lM4MdtWG7oX+TqYUjqAIpZAeWYG3bCBz/vMzv9NI3uZNYlW1z4GvSULJuVB8tuH ga4Fq80FYIthjl5EiPatyhhvMpFDtn9eRn/ergT27XFTflHTG40O0rrqnj/JKeRz+mLbt1fCqTso 2OaSWLpw/4MAZ+jJUTm8cr/Z1dZmyC4Y5QSLP7VLDlRZp0cKenpc/wpWWgaHPhM= --0000000000003a8e86057507be22-- From nobody Tue Sep 4 02:58:36 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B8E9130DD3; Tue, 4 Sep 2018 02:58:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IaCCZ8Hqmx9m; Tue, 4 Sep 2018 02:58:32 -0700 (PDT) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 83A8C130DE2; Tue, 4 Sep 2018 02:58:32 -0700 (PDT) Received: from localhost ([127.0.0.1] helo=ryuu.rg.net) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1fx86P-00011W-J6; Tue, 04 Sep 2018 09:58:29 +0000 Date: Tue, 04 Sep 2018 02:58:28 -0700 Message-ID: From: Randy Bush To: Erik Kline Cc: "Van De Velde, Gunter (Nokia - BE/Antwerp)" , lsvr@ietf.org, opsec@ietf.org In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.3 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: Re: [Lsvr] [OPSEC] security against what? X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 09:58:35 -0000 > Is recommending 802.1x possible/sufficient (given the description in > Randy's strawperson comment)? it's a long way to that radius server randy From nobody Tue Sep 4 07:10:04 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FECE130ED4; Tue, 4 Sep 2018 07:09:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.098 X-Spam-Level: X-Spam-Status: No, score=-0.098 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VsowKwaGj7dN; Tue, 4 Sep 2018 07:09:00 -0700 (PDT) Received: from mail-vk0-x234.google.com (mail-vk0-x234.google.com [IPv6:2607:f8b0:400c:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8ABBD130E98; Tue, 4 Sep 2018 07:09:00 -0700 (PDT) Received: by mail-vk0-x234.google.com with SMTP id j14-v6so1370982vke.8; Tue, 04 Sep 2018 07:09:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=lQocJZec/tUyhVd9e4yypZBwHmQELrKdzekYjSBqmGo=; b=cglBRNJt49BTbFtErgPzCrSFiwipmc0fKCIZttfsPkLfWPr0WqZQOQ7sW5kQmRXCma WoQmeoEpSj0e3h0/CxdvfX/fwE22SA0Oh4rGDi+asfUN56mJUUTmGpzap8oH503VUdIF /8rM1dm6nhYZeo4iDgNXnX6PZcobQ+1EVN2JjFaTLnObllFm4CWpS8ZDLaYOgjo4x69m yKwOBZb16I0YeQGc/Dlta/3K9zMhFT9PU3Tek8YVIZgBUpam0eWjymcZZshVkfXCotUO smo2Gll0tLUaIXvIKy4cmFJZF+Qph/xtlxVf6Gs/y+PqYrGEBwxXj8UL2e4T6/SWiy20 FaPA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=lQocJZec/tUyhVd9e4yypZBwHmQELrKdzekYjSBqmGo=; b=e96Owz6FHqkMFnDfOHx71u74k8p0h6lC7jDNmvkAbw2FbNWMLCJfmaZG/gpOF4raIZ s8AT4+6XDv5cJaUAy4UgAceHB7ZkThAclwD/lRR9YGz9JLXo6fumgM8xrhOc26hIAOBH jnWEGnIooFNnL/vewOrWhUXTvZhi0SNit/3maAgLZYVxrRM4jb6ZOfX+MDjcDGYg+jd9 CB10alz+XEUjSHSmt8cdRqWtO/5pqFww/h/rd/mPlQ8D1tXHL3NvoHZD6kwnKJfaoKer xYAyFlFopy+vLpWN46aGhzxq/F6e949OHxSK0YvMqWQKiw/YpELSG9lJYarz3S8MwPJs 0fhA== X-Gm-Message-State: APzg51BRG9BoywFM3+bvw1lt1zpx6FZqXUOAJpvEHxTLqz6i1XEZnEvw GWZoU2N1uO3T+lMdc+Xc7g3BRN4XE1/AdkZs3eY= X-Google-Smtp-Source: ANB0VdblRnuLqaCL98v3g4zpNnuIzItK4sPkeaCi2W9+KfkGhgUCRVYcre9rcIIEw2QBkq3Ey8PxU/fmsP4dc1zf61o= X-Received: by 2002:a1f:5641:: with SMTP id k62-v6mr17081522vkb.12.1536070139190; Tue, 04 Sep 2018 07:08:59 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Christopher Morrow Date: Tue, 4 Sep 2018 10:08:47 -0400 Message-ID: To: Randy Bush Cc: Erik Kline , opsec wg mailing list , lsvr@ietf.org, gunter.van_de_velde@nokia.com Content-Type: multipart/alternative; boundary="000000000000ff292f05750c3295" Archived-At: X-Mailman-Approved-At: Tue, 04 Sep 2018 07:10:00 -0700 Subject: Re: [Lsvr] [OPSEC] security against what? X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 14:09:03 -0000 --000000000000ff292f05750c3295 Content-Type: text/plain; charset="UTF-8" 'datacenter operators' == "hyperscale web wonkers" ? or 'datacenter operators' == 'colo provider' ('the planet' not 'equinix' - and 'the planet' is now 'someone else' but...) On Tue, Sep 4, 2018 at 5:58 AM Randy Bush wrote: > > Is recommending 802.1x possible/sufficient (given the description in > > Randy's strawperson comment)? > > it's a long way to that radius server > > randy > > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec > --000000000000ff292f05750c3295 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
'datacenter operators' =3D=3D "hyperscale web= wonkers" ?
or 'datacenter operators' =3D=3D 'colo pro= vider' ('the planet' not 'equinix' - and 'the plane= t' is now 'someone else' but...)

On Tue, Sep 4, 2018 at 5:58 AM Randy Bush <= randy@psg.com> wrote:
> Is recommending 802.1x possible/sufficient = (given the description in
> Randy's strawperson comment)?

it's a long way to that radius server

randy

_______________________________________________
OPSEC mailing list
OPSEC@ietf.org
https://www.ietf.org/mailman/listinfo/opsec
--000000000000ff292f05750c3295-- From nobody Tue Sep 4 07:25:36 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 079C4130EED for ; Tue, 4 Sep 2018 07:25:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.098 X-Spam-Level: X-Spam-Status: No, score=-0.098 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 20p5r3a3QsPG for ; Tue, 4 Sep 2018 07:25:33 -0700 (PDT) Received: from mail-ed1-x52b.google.com (mail-ed1-x52b.google.com [IPv6:2a00:1450:4864:20::52b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DBD67130EE3 for ; Tue, 4 Sep 2018 07:25:32 -0700 (PDT) Received: by mail-ed1-x52b.google.com with SMTP id u1-v6so3423611eds.1 for ; Tue, 04 Sep 2018 07:25:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=gZouCqJ3ZIfvLCfqJ5SzBhLNjmfx4OFlY0mBy8rqVV8=; b=TiyJGxAVEvsX0VJu8epA/z9/8X3TDfc0lVRpTXzdW3LGqJTGLu0+QCQWNdulB5kqu2 d+7MTtCv6uOGraO1nkwLsZOcqKkWo4EwrpR9lR2hsJ9lFCNaUHbRnPezprS3fQYbNPA4 ztuEI3f9WH+h+MezLEXGh0XXBQGl1GvlsNgh0ASKTmLGF7t3egrkOdcXVvxntT8hZBIN 3DEGXOLPIFbje9hIUkMloNHLks5dQBTUgcSd6X7qLMth3AyUXw8/31fbQtzUsMfcqbXC DhXmyd8iNqZo5z/U33p0U9VD2giptQpkx80DIt9jkUoqI1LOEuV/jl2KXfPm++YDhmxo 8JWw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=gZouCqJ3ZIfvLCfqJ5SzBhLNjmfx4OFlY0mBy8rqVV8=; b=fX8rEty+3GUAddb1LahlBddEsIi4jc7MTGk9WkdGS1Qxx8FfO79TPTwQxdrR/7nOC3 ORZ06GaET7zG1GgaHz7348aHJf3DdwLQvo0pJTVCFdDBVPaIA1gF/hA05Y+dh3Ol4emP HJSXYv/Q4p1G3rskaXQiNxDYFPpHf6IKwlwnoFdqH+960jQejXhTkg6V8Suaa6VtcdSu lAEgMErsAJ/NCAqx5/V8mo1++mxBKg6YxZFvQ2a/qbkzYFZS0R7xfblOw/rn3wd4hlra rY9+a0yWMfXcpYr34XKVmyD1xnq0NCnKBb4zC8rwcwWGL0Ecq27SrCTAPpz5s3fzt97o xqXw== X-Gm-Message-State: APzg51CCJTbb6sIyrJ8qhQTs69vu7EnQFWAoNbqI/Dl8QlejG47G8ROg NEvUKtNeUqupEnVvlnOgPv4tOwOlrNv55pV/WYQ= X-Google-Smtp-Source: ANB0VdYdap8uMdIwSEqSC4xchxV4bIy1OFL2wjlqt1J5nnmXFHXCcdHxH3UrqYMu6EP55w6lXjJLcGzoIEtdGhyUi0o= X-Received: by 2002:a50:8d5e:: with SMTP id t30-v6mr37549379edt.256.1536071131342; Tue, 04 Sep 2018 07:25:31 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Tony Przygienda Date: Tue, 4 Sep 2018 07:24:56 -0700 Message-ID: To: Randy Bush Cc: lsvr@ietf.org Content-Type: multipart/alternative; boundary="000000000000222c1b05750c6ec9" Archived-At: Subject: Re: [Lsvr] security against what? X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 14:25:35 -0000 --000000000000222c1b05750c6ec9 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable agreed, very interestig discussion if it can be had. the miswire/rogue laptop was what I heard muttered since a bit. whether solution is authenticated address asignment (what if they show up with static?), some mac security, insisting on some flavor of L3 adjacency with authentication and so on seemed to be in the eye of the beholder ;-) ... There are some ideas around ND in groups like 6lo btw. other flavor was link snooping & there MACSEC is probably a viable answer. yes, operators please ... thanks --- tony On Mon, Jul 30, 2018 at 9:10 PM Randy Bush wrote: > at the montr=C3=A9al meeting, a few datacener operators said they were > seriously concerned about security. befofe thinking about any solution > space, i am interested in the basic question, what is the threat model? > > here is my crude guess as a straw > > not so much intentional mitm by an attacker > > strange/unauthorized device plugs into a port. 92.3% of the problems > will be a miswire. datacenter clos miswires are a major issue. > > someone plugs a (accidentally) poisoned laptop into a clos port. > > clue bat from the ops, please. > > randy > > _______________________________________________ > Lsvr mailing list > Lsvr@ietf.org > https://www.ietf.org/mailman/listinfo/lsvr > --000000000000222c1b05750c6ec9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
agreed, very interestig discussion if it can be had. = the miswire/rogue laptop was what I heard muttered since a bit. whether sol= ution is authenticated address asignment (what if they show up with static?= ), some mac security, insisting on some flavor of L3 adjacency with authent= ication and so on seemed to be in the eye of the beholder ;-) ... There are= some ideas around ND in groups like 6lo btw. other flavor was link snoopin= g & there MACSEC is probably a viable answer.

=
yes, operators please ...

thanks

--- tony

On Mon, Jul 30, 2018 at 9:10 PM Randy Bush <randy@psg.com> wrote:
at the montr=C3=A9al meeting, a few datacener operators= said they were
seriously concerned about security.=C2=A0 befofe thinking about any solutio= n
space, i am interested in the basic question, what is the threat model?

here is my crude guess as a straw

=C2=A0 =C2=A0 not so much intentional mitm by an attacker

=C2=A0 =C2=A0 strange/unauthorized device plugs into a port.=C2=A0 92.3% of= the problems
=C2=A0 =C2=A0 will be a miswire.=C2=A0 datacenter clos miswires are a major= issue.

=C2=A0 =C2=A0 someone plugs a (accidentally) poisoned laptop into a clos po= rt.

clue bat from the ops, please.

randy

_______________________________________________
Lsvr mailing list
Lsvr@ietf.org
https://www.ietf.org/mailman/listinfo/lsvr
--000000000000222c1b05750c6ec9-- From nobody Tue Sep 4 08:38:09 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B39AA130E2F; Tue, 4 Sep 2018 08:38:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e8pkpct3j5Pc; Tue, 4 Sep 2018 08:38:06 -0700 (PDT) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B82512426A; Tue, 4 Sep 2018 08:38:06 -0700 (PDT) Received: from localhost ([127.0.0.1] helo=ryuu.rg.net) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1fxDP1-0002Y0-90; Tue, 04 Sep 2018 15:38:03 +0000 Date: Tue, 04 Sep 2018 08:38:02 -0700 Message-ID: From: Randy Bush To: Christopher Morrow Cc: Erik Kline , opsec wg mailing list , lsvr@ietf.org, gunter.van_de_velde@nokia.com In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.3 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: Re: [Lsvr] [OPSEC] security against what? X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 15:38:08 -0000 > 'datacenter operators' == "hyperscale web wonkers" ? i asked in lsvr, which is what i guess you woud call hyperscale. lsvr also tends toward decentralized, > or 'datacenter operators' == 'colo provider' ('the planet' not 'equinix' - > and 'the planet' is now 'someone else' but...) 1x would seem especially inapporpriate here as there is no centralisation of authority. >>> Is recommending 802.1x possible/sufficient (given the description in >>> Randy's strawperson comment)? >> it's a long way to that radius server with coffee, i might expand a bit. during turn up of new links and devices, it may not be easy to get to a distant 1x authority. randy From nobody Tue Sep 4 09:04:44 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4B60130F34; Tue, 4 Sep 2018 09:04:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gFS04SPbLozD; Tue, 4 Sep 2018 09:04:35 -0700 (PDT) Received: from mail-ua1-x92a.google.com (mail-ua1-x92a.google.com [IPv6:2607:f8b0:4864:20::92a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E69621274D0; Tue, 4 Sep 2018 09:04:34 -0700 (PDT) Received: by mail-ua1-x92a.google.com with SMTP id m11-v6so3283876uao.11; Tue, 04 Sep 2018 09:04:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FrX1fkaWJ8AQwTJnonJwRciwcuYuiMf9gcB4d4qDpes=; b=VFJJdVcgTVjenlTflqq7H1ldKqDyFDyP3ltSOrE34qSFHzx4mw0mpFNdpRUFX9rd7b LU1w0BmcbT8/7Dj07lIwBMBKt5UrVXPICZDRkinVOS9dF9wDzGvzlcWGgO2JhZsRroO1 8js++bClt02GPjFcTqnWcQjKkA1uttvw/WPXGFOTnuNL91GkkD6/XVS1uBYkeKhuyM4U i8eYjFgbnQripkbgCog1X1Hl3fTCwgj6Jp5HaqmLmCvPXOvS+mPa5VLzSUKDakk4rDbn 5p38/F3hevq6sOWQF6p+HDo8DBUEt6sqBaYcKuANR9t7ATxvHbHJSUt+yUjSqIu+zueU IicQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FrX1fkaWJ8AQwTJnonJwRciwcuYuiMf9gcB4d4qDpes=; b=I+znpZhiJiQW+zZHBl2ixPJ03gTezgmjvz7XtuLFKyB9G9dOYfmhpXFp/qmrpC3EEO 3bDDm+DlgK5VN1VtZ9mZMaZlpIWpHWpuhaLPUM+UEt/L4BqpW0I5bO/mp6C8I3lynCTA IIrj751fwCboGIpf8WqK2ERzqZpNbt0qVXiajDDjPdm8S5h8TJQQIh/cloRXRm2uoA6N tEbKDNAEbLMtixN5umGDJ/0M4QgTNq9UPzWXBxAMso5rwM3JTu3TKWxnLU6uSNp6vnRl h2A3fBMiFxk1EhL4BVC+ceHmdAi7lQJX43QsHvgaCk5BRvYbcanfdpIujoRLD0fxs1/P jiFQ== X-Gm-Message-State: APzg51CosZryviBgCw22pyX9yBdPBudAKJrHypCUkhsnHtJrCeAwXMcM UxnlY4uugVSifigaJKulVpZsDXI1D9fy7Vazj6Q09w== X-Google-Smtp-Source: ANB0VdY8WJEWp+94lt+cBwJGuzLwSIv0kCOZwL3bK1uLKq2nSZRuJ+UKKidTUvL4NNLe6ZHeJB3jmj1SlLMPuzysdDA= X-Received: by 2002:ab0:74d1:: with SMTP id f17-v6mr18111165uaq.105.1536077073251; Tue, 04 Sep 2018 09:04:33 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Christopher Morrow Date: Tue, 4 Sep 2018 12:04:21 -0400 Message-ID: To: Randy Bush Cc: Erik Kline , opsec wg mailing list , lsvr@ietf.org, gunter.van_de_velde@nokia.com Content-Type: multipart/alternative; boundary="0000000000004c848005750dd02e" Archived-At: Subject: Re: [Lsvr] [OPSEC] security against what? X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 16:04:38 -0000 --0000000000004c848005750dd02e Content-Type: text/plain; charset="UTF-8" On Tue, Sep 4, 2018 at 11:38 AM Randy Bush wrote: > > 'datacenter operators' == "hyperscale web wonkers" ? > > i asked in lsvr, which is what i guess you woud call hyperscale. lsvr > also tends toward decentralized, > > sorry: 'decentralized' means what here? > > or 'datacenter operators' == 'colo provider' ('the planet' not 'equinix' > - > > and 'the planet' is now 'someone else' but...) > > 1x would seem especially inapporpriate here as there is no > centralisation of authority. > So, in a large datacenter where randos are able to walk around and affect change to my cage's in/outs (and potentially clamp mitm/etc gear without my knowledge) there's a different 'security concern' than there is in a building I wholey own and operate behind several layers of physical security and such. If all of your "datacenter deployment" is inside a single cage in a colocation building you MAY be "safe", but if you span cage spaces (who ever decided on day-one in a building that they only would ever need 640kb ram/squarefeet/kw/etc?) you are potentially sending your 'routing protocols' over links outside of your immediate security perimeter. That seems rather scary... like kinda really scary, actually... I wonder how often people consider: "security of the data in the datacenter (at rest or in flight)" but forget about the routing system which is intrinsic to the operation of that datacenter? > > >>> Is recommending 802.1x possible/sufficient (given the description in > >>> Randy's strawperson comment)? > >> it's a long way to that radius server > > with coffee, i might expand a bit. during turn up of new links and > devices, it may not be easy to get to a distant 1x authority. > > I'd point out that if you put business critical dependencies 'far away' you are a competitor I'd love to have? :) Ideally once you figure out your deployment scenario and drive down all the dependency tree branches you figure out who/what needs to be "local" to the deployment, and how to live in a state where that dependency is unfulfilled for part of the turnup/repair/turndown workflows. Right? --0000000000004c848005750dd02e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Tue= , Sep 4, 2018 at 11:38 AM Randy Bush <r= andy@psg.com> wrote:
> &#= 39;datacenter operators' =3D=3D "hyperscale web wonkers" ?
i asked in lsvr, which is what i guess you woud call hyperscale.=C2=A0 lsvr=
also tends toward decentralized,


sorry: 'decentralized' means w= hat here?
=C2=A0
> or 'datacenter operators' =3D=3D 'colo provider' ('= ;the planet' not 'equinix' -
> and 'the planet' is now 'someone else' but...)

1x would seem especially inapporpriate here as there is no
centralisation of authority.

So, in a l= arge datacenter where randos are able to walk around and affect change to m= y cage's in/outs (and potentially clamp mitm/etc gear without my knowle= dge) there's a different 'security concern' than there is in a = building I wholey own and operate behind several layers of physical securit= y and such.

If all of your "datacenter deploy= ment" is inside a single cage in a colocation building you MAY be &quo= t;safe", but if you span cage spaces (who ever decided on day-one in a= building that they only would ever need 640kb ram/squarefeet/kw/etc?) you = are potentially sending your 'routing protocols' over links outside= of your immediate security perimeter.

That seems = rather scary... like kinda really scary, actually...=C2=A0
I wond= er how often people consider: "security of the data in the datacenter = (at rest or in flight)" but forget about the routing system which is i= ntrinsic to the operation of that datacenter?
=C2=A0

>>> Is recommending 802.1x possible/sufficient (given the descript= ion in
>>> Randy's strawperson comment)?
>> it's a long way to that radius server

with coffee, i might expand a bit.=C2=A0 during turn up of new links and devices, it may not be easy to get to a distant 1x authority.


I'd point out that if you put busi= ness critical dependencies 'far away' you are a competitor I'd = love to have? :)
Ideally once you figure out your deployment scen= ario and drive down all the dependency tree branches you figure out who/wha= t needs to be "local" to the deployment, and how to live in a sta= te where that dependency is unfulfilled for part of the turnup/repair/turnd= own workflows.=C2=A0 Right?
--0000000000004c848005750dd02e-- From nobody Tue Sep 4 11:17:15 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBE6E130EF1; Tue, 4 Sep 2018 11:17:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yy_JyTRwYBsV; Tue, 4 Sep 2018 11:17:05 -0700 (PDT) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97F41130E47; Tue, 4 Sep 2018 11:17:05 -0700 (PDT) Received: from localhost ([127.0.0.1] helo=ryuu.rg.net) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1fxFsr-0002Qp-JR; Tue, 04 Sep 2018 18:17:01 +0000 Date: Tue, 04 Sep 2018 11:17:00 -0700 Message-ID: From: Randy Bush To: Christopher Morrow Cc: Erik Kline , opsec wg mailing list , lsvr@ietf.org, gunter.van_de_velde@nokia.com In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.3 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Lsvr] [OPSEC] security against what? X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 18:17:07 -0000 >>> 'datacenter operators' =3D=3D "hyperscale web wonkers" ? >> i asked in lsvr, which is what i guess you woud call hyperscale. >> lsvr also tends toward decentralized, > sorry: 'decentralized' means what here? for example, compare jupiter rising to bgp-spf; both of which i think are super cool >>> or 'datacenter operators' =3D=3D 'colo provider' ('the planet' not >>> 'equinix' and 'the planet' is now 'someone else' but...) >> 1x would seem especially inapporpriate here as there is no >> centralisation of authority. > So, in a large datacenter where randos are able to walk around and > affect change to my cage's in/outs (and potentially clamp mitm/etc > gear without my knowledge) there's a different 'security concern' than > there is in a building I wholey own and operate behind several layers > of physical security and such. there are probably threats shared between the two, oh frabjious joy. but i suspect the intersection is far smaller than the union. > If all of your "datacenter deployment" is inside a single cage in a > colocation building you MAY be "safe", but if you span cage spaces > (who ever decided on day-one in a building that they only would ever > need 640kb ram/squarefeet/kw/etc?) you are potentially sending your > 'routing protocols' over links outside of your immediate security > perimeter. yes, in which case one worries about those monkeys in the middle more than ever > That seems rather scary... like kinda really scary, actually... I > wonder how often people consider: "security of the data in the > datacenter (at rest or in flight)" but forget about the routing system > which is intrinsic to the operation of that datacenter? we would be out of work were it not for the na=EFve :) >>>>> Is recommending 802.1x possible/sufficient (given the description in >>>>> Randy's strawperson comment)? >>>> it's a long way to that radius server >> with coffee, i might expand a bit. during turn up of new links and >> devices, it may not be easy to get to a distant 1x authority. > I'd point out that if you put business critical dependencies 'far > away' you are a competitor I'd love to have? :) > Ideally once you figure out your deployment scenario and drive down > all the dependency tree branches you figure out who/what needs to be > "local" to the deployment, and how to live in a state where that > dependency is unfulfilled for part of the turnup/repair/turndown > workflows. Right? sure. but at the moment, i am trying to tease out the lsvr ops' threat models. randy From nobody Tue Sep 4 22:16:34 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E550612785F; Tue, 4 Sep 2018 22:16:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LizubImtlN-d; Tue, 4 Sep 2018 22:16:31 -0700 (PDT) Received: from mail-ua1-x92c.google.com (mail-ua1-x92c.google.com [IPv6:2607:f8b0:4864:20::92c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0C4B1277D2; Tue, 4 Sep 2018 22:16:30 -0700 (PDT) Received: by mail-ua1-x92c.google.com with SMTP id m26-v6so4812250uap.2; Tue, 04 Sep 2018 22:16:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=qMV0Pjq1AePCuM/SuOHe6MEZImteyeuBNi91kcjYfgc=; b=UqdyX1YGVqBukQgDl4N3w4/SCv/kHkvMwHLrUP1oQ3HbRKut6hqjnoVRrTiF3kYzRB fVbl80wgNHBqkk2VubVO/59Og3b5Wv7Xd9QO+FR26p8A1d4whlSPLG/tsbeed5M2b/lp T21gnwV7sPTETOJda2z3T5ljkK4+4P+cONu4HO1/Y5Sg3CsureFlL4Kev5Qn94gCPLK6 sau39XIRb4SNgW4RKCQef18mwg4xlzrmX6Rh8l9m7ArJr4NAZpbEXqVOYem5agFj77ie Je+ie82azaEnwHj7YO3oaWYHpSDAQw0AvRiTqA8HE7D4T6nhc83hMX/L/BlsSPI8lZyy PiGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=qMV0Pjq1AePCuM/SuOHe6MEZImteyeuBNi91kcjYfgc=; b=Ys0vneQcSmyS0ia4FqhxYCpIoW6Fi87D7RAVtwjYsBIUJ74u/3np0D50o80U4MSz6h ETDkuwCoC9yJulOIVH5zu3E67s8uxa+ing0CBEyMPSMPvDLvqeE4v0ZtwrveKNkZDfZx W7J/CER7xsRD0X0xYaIOXt/b26nGlDMuyA+5Bmzb4P9yCTmxcjB2jn+682szMo98f8QC NkD3aNjdIRFWugfWV8KLCZ4enoxt9MrCZRTeurkuRYVhjrfZ5V7qFvX6mNCbEWAmcmDG 0WfdGcmmXw6+DhdGpyeyPQJiflp/EnwGP7ehWNj680H0XBHIIQM/tFv/eLNlgKgh7luK FmNw== X-Gm-Message-State: APzg51DzUUTeSWpPxXWpYL3QoXuwC+zaSqh1YE1JCPgpCgX6mazY5z9J DCxiGMdRysD2+OUzuJNsZvEDEm4REgknz/E2C2Q= X-Google-Smtp-Source: ANB0VdZ2h6fLHXRX5ngxBF6TB2dVlSBozPWwFHUAYXfUMfunf4wzHSLeYL1Sn5CaAya2akhEECxQ5dpRqtztAP5SyZ8= X-Received: by 2002:ab0:74d1:: with SMTP id f17-v6mr19247252uaq.105.1536124589594; Tue, 04 Sep 2018 22:16:29 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Christopher Morrow Date: Wed, 5 Sep 2018 01:16:18 -0400 Message-ID: To: Randy Bush Cc: Erik Kline , opsec wg mailing list , lsvr@ietf.org, gunter.van_de_velde@nokia.com Content-Type: multipart/alternative; boundary="0000000000007e5fa6057518e065" Archived-At: Subject: Re: [Lsvr] [OPSEC] security against what? X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Sep 2018 05:16:34 -0000 --0000000000007e5fa6057518e065 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Sep 4, 2018 at 2:17 PM Randy Bush wrote: > >>> 'datacenter operators' =3D=3D "hyperscale web wonkers" ? > >> i asked in lsvr, which is what i guess you woud call hyperscale. > >> lsvr also tends toward decentralized, > > sorry: 'decentralized' means what here? > > for example, compare jupiter rising to bgp-spf; both of which i think > are super cool > > oh! decentralized routing decision vs > >>> or 'datacenter operators' =3D=3D 'colo provider' ('the planet' not > >>> 'equinix' and 'the planet' is now 'someone else' but...) > >> 1x would seem especially inapporpriate here as there is no > >> centralisation of authority. > > So, in a large datacenter where randos are able to walk around and > > affect change to my cage's in/outs (and potentially clamp mitm/etc > > gear without my knowledge) there's a different 'security concern' than > > there is in a building I wholey own and operate behind several layers > > of physical security and such. > > there are probably threats shared between the two, oh frabjious joy. > but i suspect the intersection is far smaller than the union. > > ok. > > If all of your "datacenter deployment" is inside a single cage in a > > colocation building you MAY be "safe", but if you span cage spaces > > (who ever decided on day-one in a building that they only would ever > > need 640kb ram/squarefeet/kw/etc?) you are potentially sending your > > 'routing protocols' over links outside of your immediate security > > perimeter. > > yes, in which case one worries about those monkeys in the middle more > than ever > > yup. > > That seems rather scary... like kinda really scary, actually... I > > wonder how often people consider: "security of the data in the > > datacenter (at rest or in flight)" but forget about the routing system > > which is intrinsic to the operation of that datacenter? > > we would be out of work were it not for the na=C3=AFve :) > > it's not really just 'naive' as much as shifting sands of requirements and sudden successes :) > >>>>> Is recommending 802.1x possible/sufficient (given the description i= n > >>>>> Randy's strawperson comment)? > >>>> it's a long way to that radius server > >> with coffee, i might expand a bit. during turn up of new links and > >> devices, it may not be easy to get to a distant 1x authority. > > I'd point out that if you put business critical dependencies 'far > > away' you are a competitor I'd love to have? :) > > Ideally once you figure out your deployment scenario and drive down > > all the dependency tree branches you figure out who/what needs to be > > "local" to the deployment, and how to live in a state where that > > dependency is unfulfilled for part of the turnup/repair/turndown > > workflows. Right? > > sure. but at the moment, i am trying to tease out the lsvr ops' threat > models. > > ok, i'll be quiet now and see what other people think are problematic :) > randy > --0000000000007e5fa6057518e065 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable



On Tue, Sep 4, 2018 at 2:17 PM Randy Bush <randy@psg.com> wrote:
=
>>> 'datacenter operators' = =3D=3D "hyperscale web wonkers" ?
>> i asked in lsvr, which is what i guess you woud call hyperscale. >> lsvr also tends toward decentralized,
> sorry: 'decentralized' means what here?

for example, compare jupiter rising to bgp-spf; both of which i think
are super cool


oh! decentralized routing decision vs= =C2=A0
=C2=A0
>>> or 'datacenter operators' =3D=3D 'colo provider= 9; ('the planet' not
>>> 'equinix' and 'the planet' is now 'someone= else' but...)
>> 1x would seem especially inapporpriate here as there is no
>> centralisation of authority.
> So, in a large datacenter where randos are able to walk around and
> affect change to my cage's in/outs (and potentially clamp mitm/etc=
> gear without my knowledge) there's a different 'security conce= rn' than
> there is in a building I wholey own and operate behind several layers<= br> > of physical security and such.

there are probably threats shared between the two, oh frabjious joy.
but i suspect the intersection is far smaller than the union.


ok.
=C2=A0
> If all of your "datacenter deployment" is inside a single ca= ge in a
> colocation building you MAY be "safe", but if you span cage = spaces
> (who ever decided on day-one in a building that they only would ever > need 640kb ram/squarefeet/kw/etc?) you are potentially sending your > 'routing protocols' over links outside of your immediate secur= ity
> perimeter.

yes, in which case one worries about those monkeys in the middle more
than ever


yup.
=C2=A0
> That seems rather scary... like kinda really scary, actually...=C2=A0 = I
> wonder how often people consider: "security of the data in the > datacenter (at rest or in flight)" but forget about the routing s= ystem
> which is intrinsic to the operation of that datacenter?

we would be out of work were it not for the na=C3=AFve :)


it's not really just 'naive= 9; as much as shifting sands of requirements and sudden successes :)
<= div>=C2=A0
>>>>> Is recommending 802.1x possible/sufficient (given the = description in
>>>>> Randy's strawperson comment)?
>>>> it's a long way to that radius server
>> with coffee, i might expand a bit.=C2=A0 during turn up of new lin= ks and
>> devices, it may not be easy to get to a distant 1x authority.
> I'd point out that if you put business critical dependencies '= far
> away' you are a competitor I'd love to have? :)
> Ideally once you figure out your deployment scenario and drive down > all the dependency tree branches you figure out who/what needs to be > "local" to the deployment, and how to live in a state where = that
> dependency is unfulfilled for part of the turnup/repair/turndown
> workflows.=C2=A0 Right?

sure.=C2=A0 but at the moment, i am trying to tease out the lsvr ops' t= hreat
models.


ok, i'll be quiet now and see what= other people think are problematic :)
=C2=A0
randy
--0000000000007e5fa6057518e065-- From nobody Wed Sep 5 02:19:38 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86B92130DC5; Wed, 5 Sep 2018 02:19:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Ynhz7nuOFeJ; Wed, 5 Sep 2018 02:19:34 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10135.outbound.protection.outlook.com [40.107.1.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD3A7124BE5; Wed, 5 Sep 2018 02:19:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XZzAsf1dnuME78geLc0TTe4VKvotqHldp0AgD8fuh/4=; b=HHu7S021xjE9R96RdzQwMzJl3R9rmTHEJ/yy02Yx3xzPFiO6HDy+DaJOidKNAD7TvnLp9r2DdlSNgN0JuQ/MOe/XuwFhGqaR0JeJcz4HczMTrm1phe3BVr1vD6qGyWD3XF5ult9tS+lZA4ZAbJbF1gc7oG0Bc0EC6mNBImd6hiY= Received: from AM5PR0701MB1729.eurprd07.prod.outlook.com (10.167.215.136) by AM5PR0701MB3041.eurprd07.prod.outlook.com (10.168.157.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1122.12; Wed, 5 Sep 2018 09:19:29 +0000 Received: from AM5PR0701MB1729.eurprd07.prod.outlook.com ([fe80::6108:19f1:f3a:7125]) by AM5PR0701MB1729.eurprd07.prod.outlook.com ([fe80::6108:19f1:f3a:7125%2]) with mapi id 15.20.1122.009; Wed, 5 Sep 2018 09:19:29 +0000 From: "Van De Velde, Gunter (Nokia - BE/Antwerp)" To: "opsec@ietf.org" , "lsvr@ietf.org" CC: Randy Bush Thread-Topic: Link State Vector Routing (lsvr) WG Interim Meeting: 2018-10-01 Thread-Index: AdRE9jCmukg45FBIQH+/P5GufXbafQ== Date: Wed, 5 Sep 2018 09:19:29 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=gunter.van_de_velde@nokia.com; x-originating-ip: [2a02:1810:4d67:a00:408b:75bb:5ce1:7b96] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM5PR0701MB3041; 6:2FJsIYeZqrz/fpn288kzJKdc0lrmNuhG5qUyKl2gcCaYkcfs7TJLWLFu5Jlqi7gn7l3juJWqsKkWY3enXHaMzH5W6zsLAzhVdJB6CAAUDgNHrFnDfSHy7bkqVyb+AuWLe0BWttOyuiAUrwNXL5dL7QBOs6jtVTLuFJ3ZWHrrW6N1a8vZR6qEUfyrHqYVtbPiqrY9atBKB/IG9GSAMSoAzMik5fAf3Okp9AnkByE/jW9ky4/QAQwmHi0rblHWY2rr4qZyepgOp8GPLrelxo//mUyX4z1gIBrMSeOJJtaGuA7Pok6mUpFWuevLABqBBmBOQSEiYxf9cRAKprJbdT+F4wWDXDauME8USfAprtdUuCZlcRdxRCI9Xpauo8rCO62Bpc0p45Ctl6ALT8YZsdkvrE3zMIA9B0ZjBc6SDSn2BdKzp29IsZel2iFpEMcaEoM2/D0FcK+H8b/tSDXeh2KZ9Q==; 5:z/wp4+2U6yu+aSJQhsc/eGx0Q47HFBYAV4XHyXwIHfrvPNRt3XIcd8i7m9hceGPwWCk+w9oTueouWhknDJTix+Z6ASsQy7/g+liFE34hH9lP3+8WTJgKC50Azv3ght7rMK4NtNmqN8GoLRO3S410sG8vjK3JyTWiPkp0UOO5ONo=; 7:b5DAK7fWcuEVHpanaSIKJrsSbEaQ8LmzItx25Z2pBOGW85oPfCzsR/FE5nv86lkqq8BKHuPoNw/SXm9KcvUZ8Kq2Fu+4S2NH5/ClncayKQLOYVR9pYfKIViyHDqdFyAkUASbKimagAqdTGNcshDB7YR6o/AX/r/8l079YUmAA4SE2sjWa9lctxzqQaPrdcgndIox78JYwuU0IuzpurOBAei079SPis5bZYGZpNVo/Yt2yAq0RR9hsMcOhxMEgyt+ x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 2a6b404c-f451-4367-157a-08d61310aedd x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:AM5PR0701MB3041; x-ms-traffictypediagnostic: AM5PR0701MB3041: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(192374486261705); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3002001)(3231311)(11241501184)(806099)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123558120)(201708071742011)(7699016); SRVR:AM5PR0701MB3041; BCL:0; PCL:0; RULEID:; SRVR:AM5PR0701MB3041; x-forefront-prvs: 078693968A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(396003)(366004)(376002)(346002)(136003)(53754006)(189003)(199004)(497574002)(13464003)(110136005)(7736002)(2900100001)(2906002)(316002)(33656002)(86362001)(5660300001)(8936002)(81166006)(81156014)(6116002)(6436002)(7696005)(53936002)(99286004)(9686003)(6306002)(55016002)(25786009)(4326008)(68736007)(966005)(14444005)(97736004)(46003)(476003)(256004)(186003)(105586002)(106356001)(8676002)(2501003)(305945005)(74316002)(478600001)(5250100002)(14454004)(6506007)(486006)(102836004)(53546011); DIR:OUT; SFP:1102; SCL:1; SRVR:AM5PR0701MB3041; H:AM5PR0701MB1729.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 8vkkXN81Z62/opl32nSYts6b9x7Cn/MeAEEYD59firwY0Cz0dby+EjVOjrYV8G0VvBm9NKBVQinE8dw0RXcYAIa9eqXpU0LN3tQr9abJBqysQIWmFfByF7s+RC3sXSoEL19rvN2ipw2whydBWA0oRRWscIqmxbr/vNoWzKEdwoSPJf/yVBJ3lykgwziv8EPlQSdK9C8Ohvlvv0hzdsJtxBZmp+w7PuMmuQFQQYBehIKaOOhSY5KvDRc38AKViQc5xmz2z+B3sxtyZQPwmMgyWhyRjJcB5xCUmU5LspyP5xAIGl4eEQt00FImZdiAgaquhuM2CYt5993MJOV776u9pPT4cIPCuUVeKWGbRR8sR+4lngmOEabuilLqEc0GuM0nXSTgY6Nn83NPwuhOdZXY6Q== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2a6b404c-f451-4367-157a-08d61310aedd X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Sep 2018 09:19:29.3164 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB3041 Archived-At: Subject: [Lsvr] Link State Vector Routing (lsvr) WG Interim Meeting: 2018-10-01 X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Sep 2018 09:19:36 -0000 Hi All, Feedback/comments/suggestions regarding operational security and privacy co= nsiderations are welcome: https://datatracker.ietf.org/doc/draft-ietf-lsvr-bgp-spf/?include_text=3D1 In addition, the LSVR WG announced an interim meeting in California Bay are= a on 1 October 2018, and=20 a security/privacy discussion will be part of the agenda. (see meeting deta= ils below) Brgds, G/ -----Original Message----- From: Lsvr On Behalf Of Van De Velde, Gunter (Nokia= - BE/Antwerp) Sent: Wednesday, August 29, 2018 09:56 To: lsvr@ietf.org Subject: Re: [Lsvr] Link State Vector Routing (lsvr) WG Interim Meeting: 20= 18-10-01 Hi All, Announced by IESG Secretary, the LSVR WG will hold an face-2-face interim m= eeting on 1 October 2018. Location will be the bay area in California. Exact meeting room arrangement= s are in progress.=20 If you have any topics you like to discuss during the interim, please let L= SVR WG and co-chairs know.=20 Brgds, Victor & Gunter -----Original Message----- From: Lsvr On Behalf Of IESG Secretary Sent: Tuesday, August 28, 2018 15:59 To: IETF-Announce Cc: lsvr@ietf.org Subject: [Lsvr] Link State Vector Routing (lsvr) WG Interim Meeting: 2018-1= 0-01 The Link State Vector Routing (lsvr) Working Group will hold an interim mee= ting on 2018-10-01 from 10:00 to 12:30 America/Los_Angeles. Meeting Location: Mountain View, California, US Agenda: tbc Information about remote participation: Remote participation information will be obtained at the time of approval _______________________________________________ Lsvr mailing list Lsvr@ietf.org https://www.ietf.org/mailman/listinfo/lsvr _______________________________________________ Lsvr mailing list Lsvr@ietf.org https://www.ietf.org/mailman/listinfo/lsvr From nobody Thu Sep 13 08:39:52 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98472130DDD; Thu, 13 Sep 2018 08:39:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H5cpygIxziU0; Thu, 13 Sep 2018 08:39:32 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04on0716.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe0e::716]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1190130DDA; Thu, 13 Sep 2018 08:39:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=E9caMEbleLEfX1ecmu20MZXrW23/BPFSYItvj921VpU=; b=Q0XeNmnGhCAFjrQqplOPaIN9j8FlUoklbXRxIauM1UI0gue6Q2AsGSYW732dMGyjIW6/Uy4vc1VrEmTXXXOWSSbmTkM11Cm4zLMfrgWduyTtxd/8a0xmqPfOxt69kAvzgdw2hkE+VzYK8Cc19DKSaY9xn8ajqV+ctlUrPZ35c0U= Received: from AM5PR0701MB1729.eurprd07.prod.outlook.com (10.167.215.136) by AM5PR0701MB2577.eurprd07.prod.outlook.com (10.173.92.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1143.11; Thu, 13 Sep 2018 15:39:29 +0000 Received: from AM5PR0701MB1729.eurprd07.prod.outlook.com ([fe80::57a:601c:4402:9485]) by AM5PR0701MB1729.eurprd07.prod.outlook.com ([fe80::57a:601c:4402:9485%2]) with mapi id 15.20.1143.014; Thu, 13 Sep 2018 15:39:29 +0000 From: "Van De Velde, Gunter (Nokia - BE/Antwerp)" To: "lsvr@ietf.org" , "idr@ietf.org" , "opsec@ietf.org" CC: Victor Kuarsingh Thread-Topic: [LSVR Meeting location and logistics] [Lsvr] Link State Vector Routing (lsvr) WG Interim Meeting: 2018-10-01 Thread-Index: AdRLdpayX+Br/Ob7RhGVzCL2YbiW3w== Date: Thu, 13 Sep 2018 15:39:28 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [40.133.125.55] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM5PR0701MB2577; 6:i7/CljVtS80mTr8ZlZwsG+LLfSugpzZW7Lda0UiWFlRNnF5sjx4zRUCrRIyJFz2ENjCVBjzIyU6c63Jx6pStvqt8XSfexIhf2fV/twMmlMI7JdcyZNlAGiMctCl1BBnrrAGEloRA7D9LSG8T9EHYdxTjkXCuJXzG9ymRMgwas2IHebx4poUwKfxEg3pRsr9D7tkxNFj4PTMJMugcM2pfqg9rUsOuTYsCW5+fxbXH1CHjLza/a/rvI7O5KP0ac+jVSN/0/I6rCPYHiDeQ4FvFQZViy59p30eN+o5uvigPjPSZusOKDnx9nfu1JhfuGrooCuElN+YdYwdgEMxlPFYTxee9N10epqjZQVAFW1YeuTH/Kq7UE0LgxGUlmezU5wq9oxnais0EHwfxreawqoIRC5TbxKTErSadCvCYXcUcYftwB09esmAyEJ9ee0HnuUE3uxKVs7vUM7nOB5VYpXviqw==; 5:rDFPo85tt7SsZ56YhMnLlbRPYJkYrGGVy4hyeyM0aU8C7sS9FiBz+SFB6CXivXaOvit2rJr1HiDZ1zIGza7+E48XFZ6hRluIwy/f6hAZe83y7wh3AoyAy2wes29bm2gF6Ebw5bE9RqzSIJ8iWW3L9O8kxzbluLQZOKmCvh1Hy7g=; 7:vbxmUWGF9qaI8LP1SI/YNPQbKjTzwOay1qUTyPkNw4WnECpwKhhLbiOUyNx95BeA0gChZfDVkaMy8K4f+Xw67ROV2l5CEGO9NwKSZRd83zXV49Mb7mrHoxrF97c70g9184JRrb6TWAy/rArp+5kmOTehbdaKY8WMlZVTPqeWnoEv6JP12ESXFNTzDDMmewf9w4Vha0usOKKWoYHPedUKLu/3klVqlgcO/tcEgMtfgl5lftEH32mIIHg+TXhqigUD x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: b59d82b6-9a6f-4003-ce16-08d6198f17d7 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:AM5PR0701MB2577; x-ms-traffictypediagnostic: AM5PR0701MB2577: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705)(82608151540597)(109105607167333)(195916259791689)(163750095850); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(10201501046)(3002001)(93006095)(93001095)(3231344)(11241501184)(806099)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123564045)(20161123560045)(201708071742011)(7699050)(76991041); SRVR:AM5PR0701MB2577; BCL:0; PCL:0; RULEID:; SRVR:AM5PR0701MB2577; x-forefront-prvs: 07943272E1 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(136003)(346002)(39860400002)(366004)(376002)(13464003)(189003)(199004)(53754006)(497574002)(26005)(2501003)(6436002)(86362001)(6306002)(55016002)(97736004)(9686003)(186003)(74316002)(106356001)(486006)(105586002)(53936002)(14444005)(6346003)(256004)(476003)(81156014)(81166006)(5250100002)(2201001)(110136005)(8676002)(316002)(966005)(2900100001)(25786009)(4326008)(2906002)(7736002)(102836004)(305945005)(14454004)(33656002)(6506007)(53546011)(3846002)(6116002)(68736007)(8936002)(66066001)(7696005)(99286004)(5660300001)(478600001)(563604002); DIR:OUT; SFP:1102; SCL:1; SRVR:AM5PR0701MB2577; H:AM5PR0701MB1729.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=gunter.van_de_velde@nokia.com; x-microsoft-antispam-message-info: 9Crc4zMxGyzUYUHENra+zZ55JIxie/1OpYZ0oJCpG9bzvdEQIwFbd+2qGRgihsq7aKA8wi/CgNIKlq/oDCWuZ1fSgs6NXFkttS0GPNMNhYm6xOkSM5VZGewDP8wvVqyliiZNe628KuYHxW8WSqueEEV/8oFzmFBBigYB7KlA52ZL3hHDA/Vuc9Af/J8/EdK2+RyrjxB3Qn0EAs79kq80GBhnNLd0UooI0kuieKv5GT6uqyGJ+KurWvkNZ/wL3Wjv1+fFkKbTenDpKUdc43bmzz3fjqZsC56bYAWdlesfPetuKRJFTK0bIVLfXwOsFuN5+MzRC6JoxN2B2T03d9jDYVM1sfrcg79ScIKlhNfYZ/plQsS6xGF6yNwH/xGarAlWiasuss/xf3LD122hAn+IZw== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-Network-Message-Id: b59d82b6-9a6f-4003-ce16-08d6198f17d7 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Sep 2018 15:39:28.9759 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2577 Archived-At: Subject: [Lsvr] [LSVR Meeting location and logistics] Link State Vector Routing (lsvr) WG Interim Meeting: 2018-10-01 X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Sep 2018 15:39:35 -0000 Hi All, The LSVR Interim meeting will be hosted by Nokia and the meeting venue loca= tion is now confirmed.=20 Please provide me via simple email message a heads-up if you plan to attend= , it helps me with logistics practicality and room layout. When: * Monday 1 October 2018 from 10am to 12:30pm (Pacific Daylight Time)=20 Venue Location: Nokia 701 E Middlefield Rd. Mountain View, CA 94043 Venue practicalities & logistics: * Can the folks with intention to attend let me know via simple email (gu= nter.van_de_velde@nokia.com) so I can arrange the correct room setup (I wan= t to have enough seats available). * In addition it will help me to prepare the building access badges and s= implify the welcome processing from Nokia reception staff * Remote access details will be shared once available (via Webex) Provisional Agenda (Final agenda to be confirmed soon): * Update on the Dijkstra algorithm used by LSVR * Discussion on operational security in DC * LSoE discussion * Overview of the Routing Directorate early review comments and authors a= nalysis * Review of progress on LSVR protocol draft and the applicability draft Kind Regards, G/ -----Original Message----- From: Lsvr On Behalf Of Van De Velde, Gunter (Nokia= - BE/Antwerp) Sent: Wednesday, August 29, 2018 00:56 To: lsvr@ietf.org Subject: Re: [Lsvr] Link State Vector Routing (lsvr) WG Interim Meeting: 20= 18-10-01 Hi All, Announced by IESG Secretary, the LSVR WG will hold an face-2-face interim m= eeting on 1 October 2018. Location will be the bay area in California. Exact meeting room arrangement= s are in progress.=20 If you have any topics you like to discuss during the interim, please let L= SVR WG and co-chairs know.=20 Brgds, Victor & Gunter -----Original Message----- From: Lsvr On Behalf Of IESG Secretary Sent: Tuesday, August 28, 2018 15:59 To: IETF-Announce Cc: lsvr@ietf.org Subject: [Lsvr] Link State Vector Routing (lsvr) WG Interim Meeting: 2018-1= 0-01 The Link State Vector Routing (lsvr) Working Group will hold an interim mee= ting on 2018-10-01 from 10:00 to 12:30 America/Los_Angeles. Meeting Location: Mountain View, California, US Agenda: tbc Information about remote participation: Remote participation information will be obtained at the time of approval _______________________________________________ Lsvr mailing list Lsvr@ietf.org https://www.ietf.org/mailman/listinfo/lsvr From nobody Mon Sep 17 17:29:43 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E77D4130DF2 for ; Mon, 17 Sep 2018 17:29:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, T_DKIMWL_WL_MED=-0.01] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=jvknet-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gbcOGbEOEj_E for ; Mon, 17 Sep 2018 17:29:31 -0700 (PDT) Received: from mail-ot1-x32b.google.com (mail-ot1-x32b.google.com [IPv6:2607:f8b0:4864:20::32b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEA99130E51 for ; Mon, 17 Sep 2018 17:29:29 -0700 (PDT) Received: by mail-ot1-x32b.google.com with SMTP id u20-v6so163330otk.10 for ; Mon, 17 Sep 2018 17:29:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jvknet-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc :content-transfer-encoding; bh=UCeaGRfTpgHTZodnkoDDHdtXbIp6XyVXDIcjfO8Hf/M=; b=UmZUt74HJ83mU9Qc69Bau50Y8pUOW+ngmkCKQ9BugLRzIKVX5lyRE4wHd1K56wlQgM zfzdeKVXhBFg4zwI83LeWrvTwPFBFIv+F6u/G6PE8E3WMWWflVMCZ4/MWJ0dBQxZFCWN Y/U1OptIPmTElZmQsJu9fsvnyKR/EwBpYg8E4hLv4OiRuEIxycwanKQiswfrYpnn/wR8 IY33lgIt2qQcTtjCJq58dRdd/l3s8I5Cz8CFL5G7kIedUO7Whz9t8BmyXgxjeyfTbb+O XmaRbahWoVfLEyfqodWFGfpTP6H4JR2qMdmxmXZqrlXXIBz47YuhosBnSaY8Mx3iVE33 YBEw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc :content-transfer-encoding; bh=UCeaGRfTpgHTZodnkoDDHdtXbIp6XyVXDIcjfO8Hf/M=; b=bhtmZSMR/0wHkbUEfkThILhRhtW/8HgZ38Uzv/kBlaPNXER9GDRIIrAK00i9whpBGg 7/FbJetwO6QpEkwxi0+uRaQXkI9Er7uoxTp6XDJIJBFBWr5mfcOzDC5IrxxqmQ97FcN9 Fumc0X9rFQMEX/k64FVBnTf+SdsZN1PnfFgnAXcCzedU2WjSM6RXW9mhHIvVGnkXxPLu TPrV0x35z4lssGGF4lE2VcqXHJDsCjFs6iMI7OSsgS+6f3ypqmTSxaNfRRpsHrtYNmyN WxQ/SPBxQm+4mgLROvxMPs6CVF3/y8pJcZw8m7D7FpD//ob6AvpwlwYbL+FIxzArMyfD GBeA== X-Gm-Message-State: APzg51B+NFhjh9MzCC/6UHhmkWb+mU6PK4okLTnRErXWBWnF/IBlqGGa moFlUlh1zqkNcEcEYTqBTynYIPjFKEryQ7msK8mTGV9s5X2yVw== X-Google-Smtp-Source: ANB0Vda8IW3Ul4IxNfhSQFMvDmNOLnfWQSXkHe6M8ehFCO72c2C21TQYSyJDBGecFe6K8BkLiD04Qyd3qW06DTIRqGU= X-Received: by 2002:a9d:f62:: with SMTP id 89-v6mr13660536ott.306.1537230568438; Mon, 17 Sep 2018 17:29:28 -0700 (PDT) MIME-Version: 1.0 From: Victor Kuarsingh Date: Mon, 17 Sep 2018 20:29:16 -0400 Message-ID: To: lsvr@ietf.org Cc: idr wg , opsec@ietf.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: [Lsvr] Proposed Agenda (Draft) for LSVR Interim Meeting X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Sep 2018 00:29:32 -0000 Deal WG (and extended groups), Below is the current draft agenda for the Oct 1st Interim meeting. We want to cover three key areas to help us make needed progress. These are: (1). Deep Dive into Link Discovery Requirements, (2). Deep Discussion on BGP-SPF Base Draft and (3), Needs/options for test code. We can adjust / add topics if folks feel there are additional areas to address for the in-person meeting. We feel we want to address areas where we can have deep conversations with the captive audience and focus. Given recent WG interactions, I have included (cc'ed) the Opsec and idr working groups. Please provide feedback this week. DRAFT 1. Deep Dive into Link Discovery (60 minutes) - Review / confirm requirements in - draft-ymbk-lsvr-discovery-req-01 (50 Minutes) - (w/ deep discussion and agreements on needs) - Quick review of LSOE Draft - draft-ymbk-lsvr-lsoe-01 (10 Minutes) 2. Base Draft BGP-SPF (45 Minutes) - Focus on draft-ietf-lsvr-bgp-spf-02 and needs / updates for future -03 (if needed) - Areas of Discussion / focus - Affirm / Discussion zone / domain (flooding, policy interaction) - Discussion on concept of IGP/calculated -common RIB for all routers vs. BGP-sPF RIB? (do we need to close on this?, policy can alter normal behavior) 3. BGP-SPF Security Requirement (30 Minutes) - Re-cap current discussion, close on areas that need to be address (discussion and plan for closure / if needed) 3. Discussion on Driving test code for protocol validation (15 Minutes) - What do we need to do to get test code? - Do we do a Hackathon? In IETF, outside IETF, idea=E2=80=99s sharing and c= onsensus ? DRAFT END regards, LSVR Chairs Gunter and Victor From nobody Wed Sep 26 01:40:07 2018 Return-Path: X-Original-To: lsvr@ietfa.amsl.com Delivered-To: lsvr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D873130E2A; Wed, 26 Sep 2018 01:39:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.357 X-Spam-Level: X-Spam-Status: No, score=-2.357 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.456, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w9aurrzyAPTa; Wed, 26 Sep 2018 01:39:51 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60126.outbound.protection.outlook.com [40.107.6.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3AAF130E1E; Wed, 26 Sep 2018 01:39:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=clVkUxixQi+iU+hGi6u1Uprb4Nk8S5GFUWjvD+eI/KA=; b=GXrc32nZGi8wwsoqY4cY/HM9BwAnU8bGNMLllhPglpAhDMmT7QZaZEK4BNRADthylSUMu5EtP/DikSo7jr3Z/HivJzrtDkFpkhafTb0WaZGyVEBh+1Nszvgb+JjsYPlkmbJptuO6ZMgaeqhvPWpLvTP8wf4N1U2aAQ9OUH+/wwU= Received: from AM5PR0701MB1729.eurprd07.prod.outlook.com (10.167.215.136) by AM5PR0701MB2660.eurprd07.prod.outlook.com (10.173.93.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1185.16; Wed, 26 Sep 2018 08:39:48 +0000 Received: from AM5PR0701MB1729.eurprd07.prod.outlook.com ([fe80::c1ac:b12f:5479:ed9b]) by AM5PR0701MB1729.eurprd07.prod.outlook.com ([fe80::c1ac:b12f:5479:ed9b%5]) with mapi id 15.20.1185.019; Wed, 26 Sep 2018 08:39:48 +0000 From: "Van De Velde, Gunter (Nokia - BE/Antwerp)" To: "lsvr@ietf.org" CC: idr wg , "opsec@ietf.org" , Victor Kuarsingh Thread-Topic: LSVR Interim - Remote attendance details Thread-Index: AdRVcyd6p7/2GBC2SxGlHFXz/7krqQ== Date: Wed, 26 Sep 2018 08:39:48 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [2a02:a03f:4e15:d100:2024:2e30:db48:cca2] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM5PR0701MB2660; 6:5jPySbXPmF90F4IZ7oLRyVPrOLmn5HErZP5W9Srob1HnQEUbLouQDZf8vjd8EuJOR3+KswZGlT8OQDlgRHgmRl3f9BmBqaWohcQylny/fkGMxhTO81yqfDTtzZ+WorlZUCQUfWRYUb1OqHepacxTeOBAkR3IM3bC+eTvQzOw6D33JdJctqaPvISVKV5USvr+XCi+CKEI+IUCAOsVaTzmz9JAnUM9GD/0l3GUaNqbryvGbhzPSOs/+tyxfyNwYQOCXuX/GiSqsce4DFNaS+JRhymqWCMzyh2Di9JW2ZnI4M/YM/UYc91PuUocbOMXC/Ui0hPgB432iSWiUAitV1YJ98QKa160QpI7Dk80weFXvoz2mahZO9eh2LjRiGvSJF0guTRlQiSvDnXDDiUe07byHYtVhHq5CrPvjzef/2Mu4/g9KeY8IsQGFhC6BtYe0ZHep/tD/kWZOrt6g81DPirwMg==; 5:nvQL5CHvpI1G8C4FZ33KXxwzkmcaMPZhYdp6HxOiCFXb+6dwAmLjlqI/8dcTDb8Pm54a7Xgbz7Oi98gd6lvkZ1q1A5c+VgIF2s3NyzhN+/qSTRQ8WM5dvM4ZCYXEs9CHShwQJea0EI0+xct7M0NkHRHEPA5YdPi9AxsJ6VlydNU=; 7:1TAhf2GXlX3GsNHDVEO1jZOpT7dwQIDm20Irm4Td7v/HpkAfYNdkCOMsbOosbn1XSWcfqnURCDBAa+WAiRj8y2dtJ7uYA5t8DVMoueFQYMHxG6eZkQHqnaIKMvDtyddhbWfujJVA3W3dnneGj4TCKEkS6wc2cAi5Rk+YFRrQ/e4lhHhPEHU0sQKmkZot7EdY11liW4ONU4+ClB27IYQB4jiSAz4wowpFnh9Oj3rfnp7uTO9we5E5V3xlLjokeL69 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 0efcad34-e10d-484f-a749-08d6238b9e47 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534165)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:AM5PR0701MB2660; x-ms-traffictypediagnostic: AM5PR0701MB2660: authentication-results: spf=none (sender IP is ) smtp.mailfrom=gunter.van_de_velde@nokia.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(163750095850)(28034042069389)(94707916325470)(269456686620040)(192374486261705)(100405760836317); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3231355)(11241501184)(806099)(944501410)(52105095)(3002001)(93006095)(93001095)(6055026)(149066)(150057)(6041310)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(201708071742011)(7699051)(76991041); SRVR:AM5PR0701MB2660; BCL:0; PCL:0; RULEID:; SRVR:AM5PR0701MB2660; x-forefront-prvs: 08076ABC99 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(346002)(136003)(366004)(376002)(39860400002)(13464003)(497574002)(57704003)(53754006)(199004)(189003)(5660300001)(97736004)(256004)(6116002)(46003)(14444005)(102836004)(186003)(114624004)(7696005)(6916009)(1730700003)(81156014)(81166006)(2501003)(5250100002)(8936002)(8676002)(5640700003)(105586002)(6436002)(9686003)(316002)(6306002)(106356001)(55016002)(34290500001)(16799955002)(6506007)(2900100001)(68736007)(53546011)(53936002)(2351001)(71200400001)(71190400001)(305945005)(575784001)(551544002)(86362001)(478600001)(54906003)(2906002)(966005)(4326008)(25786009)(7736002)(476003)(33656002)(14454004)(486006)(74316002)(99286004); DIR:OUT; SFP:1102; SCL:1; SRVR:AM5PR0701MB2660; H:AM5PR0701MB1729.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: /J3UpSi+74cdgSaxPVShAPbX6ALYfehkCtW8KbA/loK/zWx6eOPQgRY7lgFTdf2WboiaMz2pewuD9tibX9ThlWJG985IxZ/YkDSkZP9QelnuFZER3DZyPrG6mtQq//nVCP2xzXURalVRsBHkORXAfhGoMY425c7H2GC7ulHT1ZTWRZNebFGmxpjsTAwZF2inqT0MviqdmwidtmZY6klcvv65IFNDgnO+w64qp9RBG4EiE6K5rDFlzd55Dk70L+rkfVR5xNkPfhH+DR72xveIBJwOLnGOr+KBowowagxwO0qFr/svOBdD4V9mPgo0azG2+twDnBGuHBqVP3j+rry3a8oPS8ew0eNkoNeHKzPiFvYMyZ/eVjsiCXz0x9m3/K/Y5x7MZVOo9Ek8hI/7IIPhOg== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0efcad34-e10d-484f-a749-08d6238b9e47 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Sep 2018 08:39:48.1801 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2660 Archived-At: Subject: [Lsvr] LSVR Interim - Remote attendance details X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Sep 2018 08:39:54 -0000 SGkgQWxsLA0KDQpXaGVuOg0KICAqIE1vbmRheSAxIE9jdG9iZXIgMjAxOCBmcm9tIDEwYW0gdG8g MTI6MzBwbSAoUGFjaWZpYyBEYXlsaWdodCBUaW1lKSANCg0KQWdlbmRhOg0KICAqIFNlZSBiZWxv dw0KDQpWZW51ZSBMb2NhdGlvbjoNCiAgTm9raWENCiAgNzAxIEUgTWlkZGxlZmllbGQgUmQuDQog IE1vdW50YWluIFZpZXcsIENBIDk0MDQzDQogIE5vdGU6IElmIHlvdSBwbGFuIHRvIGF0dGVuZCBp bi1wZXJzb24sIHBsZWFzZSBsZXQgbWUga25vdyBzbyBJIGNhbiBhcnJhbmdlIHRoZSB2aXNpdG9y IGNsZWFyYW5jZS9sb2dpc3RpY3MuDQogDQpQbGVhc2UgZmluZCBiZWxvdyB0aGUgTFNWUiBXZWJl eCBkZXRhaWxzIGZvciB0aGUgSW50ZXJpbSBtZWV0aW5nOg0KKE5va2lhIGluaG91c2UgY29uZmVy ZW5jZSBzeXN0ZW0gaXMgdXNlZCB0byByZWR1Y2UgcHJvYmxlbXMgd2l0aCByZW1vdGUgYXR0ZW5k ZW5jZSkNCg0KDQoqKioqKldlYmV4IE1lZXRpbmcgRGV0YWlscyoqKioqDQpXZWxjb21lIHRvIE5v a2lhIE1lZXRpbmdzDQrCoA0KTm90ZSB0aGF0IGF0dGVuZGVlJ3MgcGhvbmUgbnVtYmVyIGlzIHZp c2libGUgaW4gV2ViRXggTWVldGluZ3Mgd2hlbiBjb25uZWN0ZWQgYnkgcGhvbmUNCi0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCmh0dHBzOi8vbm9raWFtZWV0aW5n cy53ZWJleC5jb20vbm9raWFtZWV0aW5ncy9qLnBocD9NVElEPW1mYTBiNmFlZjkwZDdhNDBmZTVj MzFkOWZkOWZlN2JiMyANCk1lZXRpbmcgbnVtYmVyOiA5NTkgMTM1IDk2NiDCoCANCk1lZXRpbmcg cGFzc3dvcmQ6IEN6WUNnOTU4wqAgDQrCoCAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCkpvaW4gYnkgcGhvbmXCoC0gR2xvYmFsIGFjY2VzcyBudW1iZXJzDQpodHRw czovL25va2lhbWVldGluZ3Mud2ViZXguY29tL25va2lhbWVldGluZ3MvZ2xvYmFsY2FsbGluLnBo cD9zZXJ2aWNlVHlwZT1NQyZFRD02ODM3NTQxNzImdG9sbEZyZWU9MSAgDQpBY2Nlc3MgY29kZTog OTU5IDEzNSA5NjbCoCANCioqKioqRW5kIFdlYmV4IE1lZXRpbmcgRGV0YWlscyoqKioqDQoNCktp bmQgUmVnYXJkcywNCkcvDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBJZHIg PGlkci1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgVmljdG9yIEt1YXJzaW5naA0KU2Vu dDogVHVlc2RheSwgU2VwdGVtYmVyIDE4LCAyMDE4IDAyOjI5DQpUbzogbHN2ckBpZXRmLm9yZw0K Q2M6IGlkciB3ZyA8aWRyQGlldGYub3JnPjsgb3BzZWNAaWV0Zi5vcmcNClN1YmplY3Q6IFtJZHJd IFByb3Bvc2VkIEFnZW5kYSAoRHJhZnQpIGZvciBMU1ZSIEludGVyaW0gTWVldGluZw0KDQpEZWFs IFdHIChhbmQgZXh0ZW5kZWQgZ3JvdXBzKSwNCg0KQmVsb3cgaXMgdGhlIGN1cnJlbnQgZHJhZnQg YWdlbmRhIGZvciB0aGUgT2N0IDFzdCBJbnRlcmltIG1lZXRpbmcuICBXZSB3YW50IHRvIGNvdmVy IHRocmVlIGtleSBhcmVhcyB0byBoZWxwIHVzIG1ha2UgbmVlZGVkIHByb2dyZXNzLiAgVGhlc2UN CmFyZTogKDEpLiBEZWVwIERpdmUgaW50byBMaW5rIERpc2NvdmVyeSBSZXF1aXJlbWVudHMsICgy KS4gRGVlcCBEaXNjdXNzaW9uIG9uIEJHUC1TUEYgQmFzZSBEcmFmdCBhbmQgKDMpLCBOZWVkcy9v cHRpb25zIGZvciB0ZXN0IGNvZGUuDQoNCldlIGNhbiBhZGp1c3QgLyBhZGQgdG9waWNzIGlmIGZv bGtzIGZlZWwgdGhlcmUgYXJlIGFkZGl0aW9uYWwgIGFyZWFzIHRvIGFkZHJlc3MgZm9yIHRoZSBp bi1wZXJzb24gbWVldGluZy4gIFdlIGZlZWwgd2Ugd2FudCB0byBhZGRyZXNzIGFyZWFzIHdoZXJl IHdlIGNhbiBoYXZlIGRlZXAgY29udmVyc2F0aW9ucyB3aXRoIHRoZSBjYXB0aXZlIGF1ZGllbmNl IGFuZCBmb2N1cy4NCg0KR2l2ZW4gcmVjZW50IFdHIGludGVyYWN0aW9ucywgSSBoYXZlIGluY2x1 ZGVkIChjYydlZCkgdGhlIE9wc2VjIGFuZCBpZHIgd29ya2luZyBncm91cHMuDQoNClBsZWFzZSBw cm92aWRlIGZlZWRiYWNrIHRoaXMgd2Vlay4NCg0KRFJBRlQNCg0KMS4gRGVlcCBEaXZlIGludG8g TGluayBEaXNjb3ZlcnkgKDYwIG1pbnV0ZXMpDQotIFJldmlldyAvIGNvbmZpcm0gcmVxdWlyZW1l bnRzIGluIC0gZHJhZnQteW1iay1sc3ZyLWRpc2NvdmVyeS1yZXEtMDENCig1MCBNaW51dGVzKQ0K LSAgKHcvIGRlZXAgZGlzY3Vzc2lvbiBhbmQgYWdyZWVtZW50cyBvbiBuZWVkcykNCi0gUXVpY2sg cmV2aWV3IG9mIExTT0UgRHJhZnQgLSBkcmFmdC15bWJrLWxzdnItbHNvZS0wMSAoMTAgTWludXRl cykNCg0KMi4gQmFzZSBEcmFmdCBCR1AtU1BGICg0NSBNaW51dGVzKQ0KLSBGb2N1cyBvbiBkcmFm dC1pZXRmLWxzdnItYmdwLXNwZi0wMiBhbmQgbmVlZHMgLyB1cGRhdGVzIGZvciBmdXR1cmUNCi0w MyAoaWYgbmVlZGVkKQ0KLSBBcmVhcyBvZiBEaXNjdXNzaW9uIC8gZm9jdXMNCi0gQWZmaXJtIC8g RGlzY3Vzc2lvbiB6b25lIC8gZG9tYWluIChmbG9vZGluZywgcG9saWN5IGludGVyYWN0aW9uKQ0K LSBEaXNjdXNzaW9uIG9uIGNvbmNlcHQgb2YgSUdQL2NhbGN1bGF0ZWQgLWNvbW1vbiBSSUIgZm9y IGFsbCByb3V0ZXJzIHZzLiBCR1Atc1BGIFJJQj8gKGRvIHdlIG5lZWQgdG8gY2xvc2Ugb24gdGhp cz8sIHBvbGljeSBjYW4gYWx0ZXIgbm9ybWFsIGJlaGF2aW9yKQ0KDQozLiBCR1AtU1BGIFNlY3Vy aXR5IFJlcXVpcmVtZW50ICgzMCBNaW51dGVzKQ0KLSBSZS1jYXAgY3VycmVudCBkaXNjdXNzaW9u LCBjbG9zZSBvbiBhcmVhcyB0aGF0IG5lZWQgdG8gYmUgYWRkcmVzcyAoZGlzY3Vzc2lvbiBhbmQg cGxhbiBmb3IgY2xvc3VyZSAvIGlmIG5lZWRlZCkNCg0KMy4gRGlzY3Vzc2lvbiBvbiBEcml2aW5n IHRlc3QgY29kZSBmb3IgcHJvdG9jb2wgdmFsaWRhdGlvbiAoMTUgTWludXRlcykNCi0gV2hhdCBk byB3ZSBuZWVkIHRvIGRvIHRvIGdldCB0ZXN0IGNvZGU/DQotIERvIHdlIGRvIGEgSGFja2F0aG9u PyBJbiBJRVRGLCBvdXRzaWRlIElFVEYsIGlkZWHigJlzIHNoYXJpbmcgYW5kIGNvbnNlbnN1cyA/ DQoNCkRSQUZUIEVORA0KDQpyZWdhcmRzLA0KDQpMU1ZSIENoYWlycw0KR3VudGVyIGFuZCBWaWN0 b3INCg0K From nobody Thu Sep 27 14:12:49 2018 Return-Path: X-Original-To: lsvr@ietf.org Delivered-To: lsvr@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DAC48130E09; Thu, 27 Sep 2018 14:12:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: lsvr@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.84.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: lsvr@ietf.org Message-ID: <153808276186.26524.3450217012353895937@ietfa.amsl.com> Date: Thu, 27 Sep 2018 14:12:41 -0700 Archived-At: Subject: [Lsvr] I-D Action: draft-ietf-lsvr-bgp-spf-03.txt X-BeenThere: lsvr@ietf.org X-Mailman-Version: 2.1.29 List-Id: Link State Vector Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Sep 2018 21:12:42 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Link State Vector Routing WG of the IETF. Title : Shortest Path Routing Extensions for BGP Protocol Authors : Keyur Patel Acee Lindem Shawn Zandi Wim Henderickx Filename : draft-ietf-lsvr-bgp-spf-03.txt Pages : 20 Date : 2018-09-27 Abstract: Many Massively Scaled Data Centers (MSDCs) have converged on simplified layer 3 routing. Furthermore, requirements for operational simplicity have lead many of these MSDCs to converge on BGP as their single routing protocol for both their fabric routing and their Data Center Interconnect (DCI) routing. This document describes a solution which leverages BGP Link-State distribution and the Shortest Path First (SPF) algorithm similar to Internal Gateway Protocols (IGPs) such as OSPF. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-lsvr-bgp-spf/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-lsvr-bgp-spf-03 https://datatracker.ietf.org/doc/html/draft-ietf-lsvr-bgp-spf-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-lsvr-bgp-spf-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/