Re: [GROW] WGLC: draft-ietf-grow-ops-reqs-for-bgp-error-handling-04

"White, Russell" <riwhite@verisign.com> Tue, 10 July 2012 14:24 UTC

Return-Path: <riwhite@verisign.com>
X-Original-To: grow@ietfa.amsl.com
Delivered-To: grow@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9E3D21F868A for <grow@ietfa.amsl.com>; Tue, 10 Jul 2012 07:24:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.429
X-Spam-Level:
X-Spam-Status: No, score=-6.429 tagged_above=-999 required=5 tests=[AWL=-0.057, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, SARE_SUB_OBFU_Q1=0.227]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mZ29NjCpEJYh for <grow@ietfa.amsl.com>; Tue, 10 Jul 2012 07:24:02 -0700 (PDT)
Received: from exprod6og112.obsmtp.com (exprod6og112.obsmtp.com [64.18.1.29]) by ietfa.amsl.com (Postfix) with ESMTP id D7FF221F8688 for <grow@ietf.org>; Tue, 10 Jul 2012 07:23:59 -0700 (PDT)
Received: from osprey.verisign.com ([216.168.239.75]) (using TLSv1) by exprod6ob112.postini.com ([64.18.5.12]) with SMTP ID DSNKT/w7G9QBVvaRKKRobVLAODSpDGUXLu/a@postini.com; Tue, 10 Jul 2012 07:24:30 PDT
Received: from brn1wnexcas01.vcorp.ad.vrsn.com (brn1wnexcas01.vcorp.ad.vrsn.com [10.173.152.205]) by osprey.verisign.com (8.13.6/8.13.4) with ESMTP id q6AEONqf023070 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 10 Jul 2012 10:24:23 -0400
Received: from BRN1WNEXMBX01.vcorp.ad.vrsn.com ([::1]) by brn1wnexcas01.vcorp.ad.vrsn.com ([::1]) with mapi id 14.02.0247.003; Tue, 10 Jul 2012 10:24:23 -0400
From: "White, Russell" <riwhite@verisign.com>
To: "robert@raszuk.net" <robert@raszuk.net>
Thread-Topic: [GROW] WGLC: draft-ietf-grow-ops-reqs-for-bgp-error-handling-04
Thread-Index: AQHNXdMrB3AkwzWng0OCcKtRz3IQIpchoCFzgADZWwCAABeyIw==
Date: Tue, 10 Jul 2012 14:24:23 +0000
Message-ID: <3F74C1962631E14292BBF1B1B5F7021E043924@BRN1WNEXMBX01.vcorp.ad.vrsn.com>
References: <CAL9jLabOs02rOti4tezaZiHyiOD2f9vAhsoE9c-afFb4J1xYXQ@mail.gmail.com> <DCC302FAA9FE5F4BBA4DCAD46569377917449AF235@PRVPEXVS03.corp.twcable.com> <F8659490-D1B2-477D-ADCC-EC6FD7AD073A@rob.sh>, <4FFAD681.70607@raszuk.net> <3F74C1962631E14292BBF1B1B5F7021E043516@BRN1WNEXMBX01.vcorp.ad.vrsn.com>, <4FFBECCE.6050000@raszuk.net>
In-Reply-To: <4FFBECCE.6050000@raszuk.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.173.152.4]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailman-Approved-At: Wed, 11 Jul 2012 08:43:08 -0700
Cc: "grow@ietf.org" <grow@ietf.org>, Susan Hares <skh@ndzh.com>
Subject: Re: [GROW] WGLC: draft-ietf-grow-ops-reqs-for-bgp-error-handling-04
X-BeenThere: grow@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Grow Working Group Mailing List <grow.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/grow>, <mailto:grow-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/grow>
List-Post: <mailto:grow@ietf.org>
List-Help: <mailto:grow-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/grow>, <mailto:grow-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 14:24:03 -0000


>> o  AS1 is advertising 192.0.2.128/25 to both AS2 and AS3.
>> o  AS2 is advertising both 192.0.2.128/25 and 192.0.2.0/24 into AS4.
>> o  AS3 is advertising 192.0.2.128/25 into AS4
>>
>> I am afraid you are too optimistic :) 
>>
>> Actually, this is really simple to fix in one of two ways.
>>
>> First, AS4 could see the overlap on the outbound side, note the
>> origin AS is the same, and set the longer prefix to NO_EXPORT.
> 
> I don't think this is as simple as this ... Remember that when the less
> specific (/24) goes away the AS4 must readvertise the more specifics not
> to break routing. So therefor I do not think that any simple policy
> would work. The choice/decision what to advertise and what not must be
> done at best path run.

Sure --but won't best path be run when the best path towards a specific destination falls out of the table?

>> Alternatively, the BGP implementation in AS4 could be modified so
>> that when running bestpath if a losing route has a specific
>> community, it is transferred to the winning route. This would allow
>> the winning route to gain the BOUNDED community in processing.
> 
> Actually I am not that clear I understand this business reg communities
> marking. How about we consider even much simpler and ASBR local solution:

A local ASBR only solution won't work for various reasons, so let's not. :-)

> If this is PI address given to a customer I actually do not know any ISP
> who would advertise his smaller blocks in addition to his aggregate
> those blocks are taken from. Only for backdoor/multihoming the smaller
> blocks get advertised via some other ISPs, but never directly connected.

So what you are saying is that if a provider owns 10.1.0.0/16, and gives out 10.1.1.0/24 to a customer to advertise through some other provider the customer is connected to, the provider would never advertise 10.1.1.0/24 as well as 10.1.0.0/16? Why not? Since the longest match always wins, what you're saying is that the provider that handed out the address space would end up routing through the competing provider (the customer's other provider) to reach the customer, because there is a longer match being advertised by the customer through the competing provider.

That doesn't make any sense to me.

> Just to be very clear .. VA (any of the VA drafts) does not talk about
> the same problem. For one it does not stop BGP from advertising anything
> and second it is intra-domain solution.

Right --the VA drafts increase stretch and don't reduce the total table size for anyone. In return, you must inject a good bit of complexity, and consider the various problems involved with routing traffic on a smaller number of links through your network. 

I prefer the simpler solution. And yes, it is simpler, even if it doesn't solve (outright) every possible problem in the space.

:-)

Russ