Re: [Gen-art] Genart last call review of draft-ietf-idr-bgp-open-policy-18

"Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov> Wed, 05 January 2022 17:12 UTC

Return-Path: <kotikalapudi.sriram@nist.gov>
X-Original-To: gen-art@ietfa.amsl.com
Delivered-To: gen-art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98B8C3A11EB; Wed, 5 Jan 2022 09:12:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.026
X-Spam-Level:
X-Spam-Status: No, score=-3.026 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.576, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.351, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cHKOPm3STh4z; Wed, 5 Jan 2022 09:12:27 -0800 (PST)
Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl0gcc02on2072f.outbound.protection.outlook.com [IPv6:2a01:111:f400:7d05::72f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E506E3A11ED; Wed, 5 Jan 2022 09:12:21 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nUSp8SpBBW3zzN0HWdzIdFvf4PUi18VYoW3UMCBSa0AZKF6jmUiffL4R7ER0EWq7OjoiiaMIPEOMRglTzCnbhxpb2dgImjhYjbNlpoWiIKaAsSaoH1yAPbvbqOMEzsI2iEN4znrHeWwXXOkhh41I7iql8XpsUiejAaZkE8tmQr8W0RxKXM8rf2jFUDm7ykuoXvy9cSZYdM/MryaK/Z+Oz/MQRAE1sTiO6TtTnuWjtuHQh3UFWSA3szvW8EVGl1k+FG9yF1r8AQVvJ4k5uqy620C7DI2U44o57Cadr9oH70p4pExH/ZOCzO4eNv2gioP0FOFaoO8i6hAUxtjx4+//xw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xWauZeoiZqEnMAQxc1Xo+5BgC/iXlqVGxfWfB9QuMkI=; b=nhPrNEHOOs2JGh1bjrz6aPMlJPt2O/ha+mFf2HX/wyStG8lnUa8vTSIYjiQFoGysijEaTjnU0qHWrKB7jn3S7/DMOWEyWADseS2nCNF+KUfZrO0W46MuxHxQZ0vs37Vmo8Nj4s1DOjLUWai5riB/Nbnt5ktVu6vTcGkaWAwmfAs/jPFXm1T6rAObmsK2yAYMhuzrsQfj8COZjo+vysANzDlyiCrhVUNwJl+HDLuxUCl9JZsxdu1uznIdOSwSWJ/O8y3BJ07iVFZFlVGlORfV6WFoneQ4ToDST4WhpKNe1afF7+TLL3HX6gL34IKObMiPKDyv75whpH2SOzguaVmWVQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xWauZeoiZqEnMAQxc1Xo+5BgC/iXlqVGxfWfB9QuMkI=; b=ynLhkUYEHrbFjkd0LKrih1OFnY4+70oly7iJI/G6u+TYlt0xIFFaUxs2+qTfHLIpp+7dKn1ptXg+vDfZUVEdKlaNv+W4kv8sJN7qlU3XDIunnvvVV8Sf89DSwZE3coDXLl8iiXOKKUXYq6p9WxqPEdmnAr8cAY0G92Y6KI6G3UE=
Received: from SA1PR09MB8142.namprd09.prod.outlook.com (2603:10b6:806:171::8) by SA1PR09MB7789.namprd09.prod.outlook.com (2603:10b6:806:173::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4867.7; Wed, 5 Jan 2022 17:12:11 +0000
Received: from SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::717a:2702:70fb:6225]) by SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::717a:2702:70fb:6225%4]) with mapi id 15.20.4867.009; Wed, 5 Jan 2022 17:12:11 +0000
From: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>
To: Gyan Mishra <hayabusagsm@gmail.com>
CC: Alvaro Retana <aretana.ietf@gmail.com>, "draft-ietf-idr-bgp-open-policy.all@ietf.org" <draft-ietf-idr-bgp-open-policy.all@ietf.org>, "gen-art@ietf.org" <gen-art@ietf.org>, "idr@ietf.org" <idr@ietf.org>, "last-call@ietf.org" <last-call@ietf.org>
Thread-Topic: Genart last call review of draft-ietf-idr-bgp-open-policy-18
Thread-Index: AQHX9s+XH9Ok71AVyEOJ/vho1li1GaxTDVkAgAAI7QCAAAEmYIAA5+mAgACxhhA=
Date: Wed, 05 Jan 2022 17:12:11 +0000
Message-ID: <SA1PR09MB8142DBB76926B62226E7BB6D844B9@SA1PR09MB8142.namprd09.prod.outlook.com>
References: <164013488006.27197.13873644386825552452@ietfa.amsl.com> <CAMMESsx35+gC7CP9ox+U-QsT8Dxkv3=Du8VRq_cprMsEc5PCyQ@mail.gmail.com> <CABNhwV30nrqJ-mOpniso6c=rJpFi0zQX93BWaQKJvKNVcrMNAw@mail.gmail.com> <SA1PR09MB8142D79278F793814694AD40844A9@SA1PR09MB8142.namprd09.prod.outlook.com> <CABNhwV0cGhp1pW24mzJvtOoaGDYM2ypBtTn_--L-0dNRmFhSUA@mail.gmail.com>
In-Reply-To: <CABNhwV0cGhp1pW24mzJvtOoaGDYM2ypBtTn_--L-0dNRmFhSUA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nist.gov;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: cfe37891-0d44-4e20-a472-08d9d06e835f
x-ms-traffictypediagnostic: SA1PR09MB7789:EE_
x-microsoft-antispam-prvs: <SA1PR09MB7789C94AC92FF0B621EB3E18844B9@SA1PR09MB7789.namprd09.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SA1PR09MB8142.namprd09.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(66476007)(66946007)(66556008)(76116006)(66446008)(64756008)(52536014)(83380400001)(82960400001)(55016003)(6916009)(316002)(122000001)(38100700002)(9686003)(508600001)(8936002)(8676002)(7696005)(71200400001)(186003)(26005)(33656002)(6506007)(38070700005)(4326008)(5660300002)(2906002)(9326002)(86362001)(54906003); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_SA1PR09MB8142DBB76926B62226E7BB6D844B9SA1PR09MB8142namp_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SA1PR09MB8142.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: cfe37891-0d44-4e20-a472-08d9d06e835f
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jan 2022 17:12:11.7449 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR09MB7789
Archived-At: <https://mailarchive.ietf.org/arch/msg/gen-art/zj-NbMLBD5YjOkVGg1XSIR8wZms>
Subject: Re: [Gen-art] Genart last call review of draft-ietf-idr-bgp-open-policy-18
X-BeenThere: gen-art@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gen-art>, <mailto:gen-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art/>
List-Post: <mailto:gen-art@ietf.org>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gen-art>, <mailto:gen-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Jan 2022 17:12:32 -0000

Hi Gyan,

Thank you. Please see the responses inline.

Gyan> Agreed that is acceptable.  In the description as well maybe listing a
pecking order similar to what is described in Gao-Rexford model style
route preference in the import and export policy verbiage for each role.

[KS/AA]: That is interesting. We did already enhance the Role descriptions as follows to add the import policy verbiage (to the already existing export policy) in Sec. 2 of v-19 to be uploaded:

Old text:

   The following is a list of BGP Roles for eBGP peering and the
   corresponding rules for route propagation:

   Provider:  MAY propagate any available route to a Customer.

   Customer:  MAY propagate any route learned from a Customer, or
      locally originated, to a Provider.  All other routes MUST NOT be
      propagated.

   Route Server (RS):  MAY propagate any available route to a Route
      Server Client (RS-Client).

   RS-Client:  MAY propagate any route learned from a Customer, or
      locally originated, to an RS.  All other routes MUST NOT be
      propagated.

   Peer:  MAY propagate any route learned from a Customer, or locally
      originated, to a Peer.  All other routes MUST NOT be propagated.

New text:

   The following is a list of BGP Roles for eBGP peering and the
   corresponding rules for route propagation and acceptance:

   Provider:  May propagate any available route to a Customer.  May
      accept routes originated by the Customer or its Customers; all
      other routes from the Customer must not be accepted.

   Customer:  May propagate any route learned from a Customer, or
      locally originated, to a Provider; all other routes must not be
      propagated.  May accept any route from the Provider.

   Route Server (RS):  May propagate any available route to a Route
      Server Client (RS-Client).  May accept routes originated by the
      RS-Client or its Customers; all other routes from the RS-Client
      must not be accepted.

   RS-Client:  May propagate any route learned from a Customer, or
      locally originated, to an RS; all other routes must not be
      propagated.  May accept any route received from the RS.

   Peer:  May propagate any route learned from a Customer, or locally
      originated, to a Peer; all other routes must not be propagated.
      May accept routes originated by the Peer or its Customers; all
      other routes from the Peer must not be accepted.

--- end of new text ---
>Also could mention that a good reasons for role capabilities usage by
operators  is to prevent routing policy disputes between peering points
that can result in sub optimal routing instability and feedback loops along
with route leaks mentioned.

[KS/AA]: Maybe adding the following paragraph at the end of Section 3.2 (Role Correctness) would do it?

Besides facilitating a route leak solution, the Role Capability usage by network operators also helps prevent routing policy disputes between peering ASes. This can in turn prevent sub-optimal routing and routing instability.

Not sure if the feedback loop needs to be mentioned. Do you mean a loop in the AS path (normally prevented by checking the presence of the speaker's own AS in the path)?

Sriram / Alexander