[GROW] Limiting AS path length?

Iljitsch van Beijnum <iljitsch@muada.com> Mon, 16 September 2019 08:21 UTC

Return-Path: <iljitsch@muada.com>
X-Original-To: grow@ietfa.amsl.com
Delivered-To: grow@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5ACCB12081C for <grow@ietfa.amsl.com>; Mon, 16 Sep 2019 01:21:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=muada.com header.b=mYZy/iHT; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=xUWvFtYe
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iFHFnYiUDT_5 for <grow@ietfa.amsl.com>; Mon, 16 Sep 2019 01:21:14 -0700 (PDT)
Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3407812003F for <grow@ietf.org>; Mon, 16 Sep 2019 01:21:14 -0700 (PDT)
Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.nyi.internal (Postfix) with ESMTP id 86AB021857 for <grow@ietf.org>; Mon, 16 Sep 2019 04:21:13 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Mon, 16 Sep 2019 04:21:13 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=muada.com; h= from:content-type:mime-version:subject:message-id:date:to; s= fm1; bh=XuVfMOfbDikGg+zLAsCoqbTCF8hpA4VRsgmaoIDmWXk=; b=mYZy/iHT NaYmgfuc70bAOD/j3nSTPlCCRJCRAawBc//7riil83cN+2wM//Pcr+/rPEdFnd3G 7rCFxOlWJWciFj2XK0yWiie7oQZeB5yD+2hJq8D2S2s0XA49r14e6cE4TSdmcAT1 ei8jvF5Q7qr72shDkjYZtFDkr4ufS9WMffFtu1sQ2P23+9iNBp/KT6+BIwY4C5ID xk9xqcVFHXg3F70xyulI1A8bnsWkeSam8xCCdkMvEzn1pkqxZeyvkHgVU5Jv3AI4 zR785zc41ontcrJuoPAzABbfNjYZKCkmC03wE44Uwq9GbCXbsdjrhCGISQT2eY+m kSgGJIVJ7HWlyA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=XuVfMOfbDikGg+zLAsCoqbTCF8hpA 4VRsgmaoIDmWXk=; b=xUWvFtYeVhCGF0syUYffhFedQ4fiU/kM7jn+sMPRv8mbi JleYjzN/DckuO2l9n/2rYWB5iW6w3vwfMHAd67dV6r/mQllv4OTwqdgl0aSiTRJo 6gxC/8CFg3IYrafpKeKh/trLDQmnoteRmcUvSMl9/pUNST9tlBYw5wUPs54UUvam q9GVHco4WY4gurpt8KWq89kqHooDKnY/wcPkcoxoSvtgXT2eNCZhjcLrtx6Pqk8n 9L75NgQAdq+2ZcxCjwEIxx1teRAIFnzOO17m6lvXdZlYEVc4uATfhXa9+egGMKQP v7AEd8/IU2jx/YPu2ShPHyIiHySQfNmiweW+qBIyg==
X-ME-Sender: <xms:-UV_XVhR29az7O9xspEZlrWnXwd_kEZguBbaHT1N1tGz6uDTYI0T1A>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedufedrudefgddtgecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhephfgtggfukfffvffosegrtdhmrehhtd dvnecuhfhrohhmpefklhhjihhtshgthhcuvhgrnhcuuegvihhjnhhumhcuoehilhhjihht shgthhesmhhurggurgdrtghomheqnecuffhomhgrihhnpehnlhhnohhgrdhnvghtpdhnsh hrtgdrohhrghenucfkphepkeefrdekhedrjedurdelheenucfrrghrrghmpehmrghilhhf rhhomhepihhljhhithhstghhsehmuhgruggrrdgtohhmnecuvehluhhsthgvrhfuihiivg eptd
X-ME-Proxy: <xmx:-UV_XXMJz-mPCmIummaCwSxWHTH26EGkVeRfIA9D7qbped7p712d5g> <xmx:-UV_XZnQX_dt_OjcCxIUIvXhBKB80Dift-LqJc6kWnS89RE2RV4eiQ> <xmx:-UV_XWdOCnq2CwJlEpFLouMW30FkXG5UJ_nNJe7ISldHajhpekLEDA> <xmx:-UV_XXLsMKmhA7NO563bLvc5P0eJ6lFpHli0hm7iDWbSwH61_wTFWg>
Received: from [192.168.178.23] (83-85-71-95.cable.dynamic.v4.ziggo.nl [83.85.71.95]) by mail.messagingengine.com (Postfix) with ESMTPA id C59F38006E for <grow@ietf.org>; Mon, 16 Sep 2019 04:21:12 -0400 (EDT)
From: Iljitsch van Beijnum <iljitsch@muada.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_E7571323-9682-476C-BEA0-5A212DAFA1C9"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Message-Id: <5E0A3463-AAB3-416E-A694-BD74A56BD7C9@muada.com>
Date: Mon, 16 Sep 2019 10:21:08 +0200
To: grow@ietf.org
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/grow/tQQ2mneyaH8t7yANYObvQINVn-c>
Subject: [GROW] Limiting AS path length?
X-BeenThere: grow@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Grow Working Group Mailing List <grow.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/grow>, <mailto:grow-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/grow/>
List-Post: <mailto:grow@ietf.org>
List-Help: <mailto:grow-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/grow>, <mailto:grow-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Sep 2019 08:21:16 -0000

Dear Global Routing Operators,

I attended a presentation by someone from a tier-1 network who talked about BGP filtering. One thing he mentioned is filtering out prefixes with excessively long AS paths, in their case paths longer than 40 AS hops.

There are a few best practices style documents that suggest this:

http://bgpfilterguide.nlnog.net/guides/long_paths/ <http://bgpfilterguide.nlnog.net/guides/long_paths/>

https://nsrc.org/workshops/2018/linx103-bgp/networking/peering-ixp/en/presentations/05-BGP-BCP.pdf <https://nsrc.org/workshops/2018/linx103-bgp/networking/peering-ixp/en/presentations/05-BGP-BCP.pdf>

My question: is rejecting excessively long AS paths something we want to do?

If so, I think it's important to publish a best practices document that creates clear expectations, so we avoid the situation where people prepend their paths, and then those paths are filtered by some ASes but not others.

Similar how there's a clear expectation that any IPv4 prefix of /24 or shorter will be accepted by all ASes but ones longer than /24 will not, /48 for IPv6.

FYI: the number of IPv4 paths with AS paths with 20 - 45 hops (with 45 being the maximum currently seen by Routeviews) is 0.04% of all 32 million paths.

Iljitsch