Re: [GROW] [Sidrops] I-D Action: draft-ietf-sidrops-route-server-rpki-light-00.txt

Matthias Waehlisch <m.waehlisch@fu-berlin.de> Sat, 14 January 2017 15:30 UTC

Return-Path: <m.waehlisch@fu-berlin.de>
X-Original-To: grow@ietfa.amsl.com
Delivered-To: grow@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E61D412A028; Sat, 14 Jan 2017 07:30:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.42
X-Spam-Level:
X-Spam-Status: No, score=-7.42 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.199, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 85h3sDbhyekq; Sat, 14 Jan 2017 07:30:48 -0800 (PST)
Received: from outpost1.zedat.fu-berlin.de (outpost1.zedat.fu-berlin.de [130.133.4.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 102D312A01F; Sat, 14 Jan 2017 07:30:48 -0800 (PST)
Received: from inpost2.zedat.fu-berlin.de ([130.133.4.69]) by outpost.zedat.fu-berlin.de (Exim 4.85) with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (envelope-from <m.waehlisch@fu-berlin.de>) id <1cSQI1-0023pl-Tp>; Sat, 14 Jan 2017 16:30:45 +0100
Received: from x5ce7e3a4.dyn.telefonica.de ([92.231.227.164] helo=mw-PC.fritz.box) by inpost2.zedat.fu-berlin.de (Exim 4.85) with esmtpsa (TLSv1:AES256-SHA:256) (envelope-from <m.waehlisch@fu-berlin.de>) id <1cSQI1-000Sas-K4>; Sat, 14 Jan 2017 16:30:45 +0100
Date: Sat, 14 Jan 2017 16:30:09 +0100
From: Matthias Waehlisch <m.waehlisch@fu-berlin.de>
To: Nick Hilliard <nick@foobar.org>
In-Reply-To: <587A03CF.3010001@foobar.org>
Message-ID: <alpine.WNT.2.00.1701141619550.14048@mw-PC>
References: <148433210469.9788.12815016683609966013.idtracker@ietfa.amsl.com> <20170113184009.GC1055@Vurt.local> <7C35D47D-6605-4D6D-A97E-BD7139F36DBA@gmail.com> <7f08f967-247e-4060-b643-52bc45d8ab29@Spark> <1E278B10-A5BF-40BE-95C4-7A9B6AF6C817@gmail.com> <c55845cc-ca06-45c8-9b2e-075421d0447c@Spark> <58795A0B.6000009@foobar.org> <alpine.WNT.2.00.1701141045460.14048@mw-PC> <587A03CF.3010001@foobar.org>
User-Agent: Alpine 2.00 (WNT 1167 2008-08-23)
X-X-Sender: waehl@mail.zedat.fu-berlin.de
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
X-Originating-IP: 92.231.227.164
Archived-At: <https://mailarchive.ietf.org/arch/msg/grow/i0NyqnDfAWy1Zso11qUN-WF0i3g>
Cc: sidrops@ietf.org, GMO Crops <grow@ietf.org>, job@ntt.net
Subject: Re: [GROW] [Sidrops] I-D Action: draft-ietf-sidrops-route-server-rpki-light-00.txt
X-BeenThere: grow@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Grow Working Group Mailing List <grow.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/grow>, <mailto:grow-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/grow/>
List-Post: <mailto:grow@ietf.org>
List-Help: <mailto:grow-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/grow>, <mailto:grow-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Jan 2017 15:30:50 -0000

On Sat, 14 Jan 2017, Nick Hilliard wrote:

> Matthias Waehlisch wrote:
> >   I think there are two cases: (1) RS client peers only with route 
> > server, (2) RS client peers additionally with other BGP speakers that 
> > don't peer with the RS.
> > 
> >   In case (1) (and assuming that the RS selects the best path on behalf 
> > of the client), the IXP provisioning system needs to provide all knobs 
> > to implement potential policies -- as you mentioned below. Should be s 
> > side note.
> > 
> >   In case (2), route-server-rpki-light would be still helpful.
> 
> Case (1) is not an ietf problem.
> 
> Case (2) is already documented in
> draft-ietf-sidr-origin-validation-signaling, which proposes a generic
> BGP signaling mechanism, i.e. nothing particularly to do with route
> servers.  In fact, if the -sidr- draft progresses, it should probably be
> mentioned somewhere that the proposed mechanism is likely to cause
> unexpected behaviour on route servers unless add-path tx is enabled on
> the route server.
> 
  the current discussion makes clear that documentation of 
origin-validation-signaling in IXP context is needed, either in 
sidr-origin-validation-signaling or in a separate document such as 
route-server-rpki-light. Personally, I tend to a separate doc 
(informational or best practice).



Cheers
  matthias

-- 
Matthias Waehlisch
.  Freie Universitaet Berlin, Computer Science
.. http://www.cs.fu-berlin.de/~waehl