Re: [GROW] Comment on draft-iops-grow-bgp-session-culling

Tore Anderson <tore@fud.no> Tue, 14 March 2017 12:05 UTC

Return-Path: <tore@fud.no>
X-Original-To: grow@ietfa.amsl.com
Delivered-To: grow@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D39A12956C for <grow@ietfa.amsl.com>; Tue, 14 Mar 2017 05:05:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id avvuBVAD7m_S for <grow@ietfa.amsl.com>; Tue, 14 Mar 2017 05:05:11 -0700 (PDT)
Received: from mail.fud.no (mail.fud.no [IPv6:2a02:c0:4f0:bb02:f816:3eff:fed3:8342]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B51712944B for <grow@ietf.org>; Tue, 14 Mar 2017 05:05:11 -0700 (PDT)
Received: from [2a02:c0:2:1:1194:17:0:1029] (port=52944 helo=echo.ms.redpill-linpro.com) by mail.fud.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.86_2) (envelope-from <tore@fud.no>) id 1cnlCP-0000gW-5I; Tue, 14 Mar 2017 12:05:09 +0000
Date: Tue, 14 Mar 2017 13:05:08 +0100
From: Tore Anderson <tore@fud.no>
To: Nick Hilliard <nick@foobar.org>
Message-ID: <20170314130508.63d4fcba@echo.ms.redpill-linpro.com>
In-Reply-To: <58C7D895.4070002@foobar.org>
References: <20170313121134.6676bd02@echo.ms.redpill-linpro.com> <71D584DF-94F5-40B3-BCE0-4736354ECCCB@harg.net> <20170314072225.55fdd871@echo.ms.redpill-linpro.com> <58C7BD67.6080308@foobar.org> <20170314111326.3714e0ed@echo.ms.redpill-linpro.com> <58C7D033.8060203@foobar.org> <20170314123054.3b971d1d@echo.ms.redpill-linpro.com> <58C7D895.4070002@foobar.org>
X-Mailer: Claws Mail 3.14.1 (GTK+ 2.24.31; x86_64-redhat-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/grow/4lSaNSEog26eOURW_AbAdc9l-00>
Cc: grow@ietf.org
Subject: Re: [GROW] Comment on draft-iops-grow-bgp-session-culling
X-BeenThere: grow@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Grow Working Group Mailing List <grow.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/grow>, <mailto:grow-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/grow/>
List-Post: <mailto:grow@ietf.org>
List-Help: <mailto:grow-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/grow>, <mailto:grow-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Mar 2017 12:05:12 -0000

* Nick Hilliard <nick@foobar.org>

> Tore Anderson wrote:
> > In other words: in my opinion, BGP session culling should be
> > considered a BCP even in situations where link state signaling
> > and/or BFD is used. IP-transit providers should perform culling
> > towards their customers ahead of maintenance works. Direct peers,
> > likewise.  
> 
> probably not much need if bfd is used because that would operate
> route-to-router.

Quite the contrary, there is very much a need in this case too. If there
are many active routes that will become invalid, converging on
alternate paths (reprogramming the FIB) can take significantly longer
than actually detecting the outage (even if it's detected only using
BGP timers).

> > IXPs aren't at all special regarding the fundamental need for session
> > culling, only in the method by which it is accomplished (i.e., using
> > layer-2 ACLs).  
> 
> Correct, but for direct peers over PNIs, etc, the operator will usually
> have control over the bgp session.  What we're talking about here is a
> situation where there is an intermediate operator which has no direct
> admin control over bgp sessions.

The draft is most definitively also talking about the situations where
the operator does have admin control over the BGP session (section 2.1).

Tore