Re: [GROW] Comment on draft-iops-grow-bgp-session-culling

Tore Anderson <tore@fud.no> Tue, 14 March 2017 11:31 UTC

Return-Path: <tore@fud.no>
X-Original-To: grow@ietfa.amsl.com
Delivered-To: grow@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42B31120726 for <grow@ietfa.amsl.com>; Tue, 14 Mar 2017 04:31:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oO9_6Cy5mOGz for <grow@ietfa.amsl.com>; Tue, 14 Mar 2017 04:31:00 -0700 (PDT)
Received: from mail.fud.no (mail.fud.no [IPv6:2a02:c0:4f0:bb02:f816:3eff:fed3:8342]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E34E1294CE for <grow@ietf.org>; Tue, 14 Mar 2017 04:30:58 -0700 (PDT)
Received: from [2a02:c0:2:1:1194:17:0:1029] (port=52428 helo=echo.ms.redpill-linpro.com) by mail.fud.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.86_2) (envelope-from <tore@fud.no>) id 1cnkfH-0000c2-8a; Tue, 14 Mar 2017 11:30:56 +0000
Date: Tue, 14 Mar 2017 12:30:54 +0100
From: Tore Anderson <tore@fud.no>
To: Nick Hilliard <nick@foobar.org>
Message-ID: <20170314123054.3b971d1d@echo.ms.redpill-linpro.com>
In-Reply-To: <58C7D033.8060203@foobar.org>
References: <20170313121134.6676bd02@echo.ms.redpill-linpro.com> <71D584DF-94F5-40B3-BCE0-4736354ECCCB@harg.net> <20170314072225.55fdd871@echo.ms.redpill-linpro.com> <58C7BD67.6080308@foobar.org> <20170314111326.3714e0ed@echo.ms.redpill-linpro.com> <58C7D033.8060203@foobar.org>
X-Mailer: Claws Mail 3.14.1 (GTK+ 2.24.31; x86_64-redhat-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/grow/D-l5Znl4yYbB2zpmYbsLbEJLIWw>
Cc: grow@ietf.org
Subject: Re: [GROW] Comment on draft-iops-grow-bgp-session-culling
X-BeenThere: grow@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Grow Working Group Mailing List <grow.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/grow>, <mailto:grow-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/grow/>
List-Post: <mailto:grow@ietf.org>
List-Help: <mailto:grow-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/grow>, <mailto:grow-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Mar 2017 11:31:01 -0000

* Nick Hilliard <nick@foobar.org>

> Tore Anderson wrote:
> > My point here was that if the IXP is doing maintenance, it could shut
> > all ports to all members simultaneously, and thus get the exact same
> > effect as the «when someone yanks the physical connector» scenario
> > described in the draft.  
> 
> this doesn't work because 1. some ixp participants connect their
> routers via intermediate switches and if all ports are yanked
> simultaneously, they will blackhole traffic on their side and 2. any
> ixp with more than one switch in their peering fabric needs to be
> able to performance maintenance on part of their ixp without
> affecting the rest.

Maybe we're talking past each other.

I fully agree with you that this does not work sufficiently well, which
by extension means that the draft is wrong in suggesting that BGP
session culling is only needed «in topologies where upper layer fast
fault detection mechanisms are unavailable and the lower layer topology
is hidden».

In other words: in my opinion, BGP session culling should be considered
a BCP even in situations where link state signaling and/or BFD is used.
IP-transit providers should perform culling towards their customers
ahead of maintenance works. Direct peers, likewise.

IXPs aren't at all special regarding the fundamental need for session
culling, only in the method by which it is accomplished (i.e., using
layer-2 ACLs).

Tore