[Idr] Re: I-D Action: draft-krierhorn-idr-upa-00.txt

Jeff Tantsura <jefftant.ietf@gmail.com> Tue, 02 September 2025 19:30 UTC

Return-Path: <jefftant.ietf@gmail.com>
X-Original-To: idr@mail2.ietf.org
Delivered-To: idr@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 9B26E5C413AB for <idr@mail2.ietf.org>; Tue, 2 Sep 2025 12:30:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MjXWBKKgvBmU for <idr@mail2.ietf.org>; Tue, 2 Sep 2025 12:30:33 -0700 (PDT)
Received: from mail-pl1-x629.google.com (mail-pl1-x629.google.com [IPv6:2607:f8b0:4864:20::629]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 60B395C413A3 for <idr@ietf.org>; Tue, 2 Sep 2025 12:30:33 -0700 (PDT)
Received: by mail-pl1-x629.google.com with SMTP id d9443c01a7336-248a61a27acso1784635ad.1 for <idr@ietf.org>; Tue, 02 Sep 2025 12:30:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1756841432; x=1757446232; darn=ietf.org; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:from:to:cc:subject:date:message-id:reply-to; bh=+wMkSVlNRyeawQw/1xEkgwNRw9EqnFPcCuFLUutYCVY=; b=Jrpl2WovXZU4AJea1s9Ttdm/VhhwDq2x4DViGs+UTyYtnHF01tRsI4ffMiStXuNIo9 xYaNASyYGNOO4HVFMQUmUYfAkJFNDbk6q+nj6PFujWoEsJ/To8pJZG9LzTPUfx7vE7PD YLyKnp1Cp7PHDqnrzZXRlanmGofyPAY7nglc32ca44YUhuZgMfvyBXPIBJmFbPWr0EZC 0RJUq5I+1j6scpH4VgiKkvqEjsn/Yse2ABy4d3oEeRl7r8GeFDv6D0DYfxaO27Mxiw8Z jNCstUYebktUkSTVagGKfUFnrWoACquh9eMIe8Ipd7oA1TYqxX8EQasQnVzkb5UCS9Bo XQbA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1756841432; x=1757446232; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=+wMkSVlNRyeawQw/1xEkgwNRw9EqnFPcCuFLUutYCVY=; b=ndhjvt5s+oSZkVYCObPPXAtzHGxhufmy4prl33nItKebL/FAIKp54h/sMe1ANe3fzh 5/R4erWqN0cDx1mSdA2AY+Fspggc72Ki9JiGqK6EKSMRjchgSBhE6qfs/i/xaTUjbe1o l0oW3Azo3v/bLrY00nQG1aWMCFLpJZWXiTDXAcALfu4r/DVS2TLhjjhnwBdUdhyHAo0D 8sWhKOlIW5qzDR4n9kSeqpLSWq0+HgwgvbriI6ZCsXRffPYBN4ZJ2DbS3un7Ya+HB3yv XA8AInsrLDAeP47g9xCkYvOXoqQo2qwzRMrQS2HEIBTpJmXJyAFKkxxZVUeS8mCQ5kus Eumg==
X-Forwarded-Encrypted: i=1; AJvYcCW5/yeCm4LGL8lkuibdst+7CNEfAhI+6RGWlSydah7YNc6pf13Oa3dyO4lH/p4SyulhRRA=@ietf.org
X-Gm-Message-State: AOJu0YyZ0pC/c7T9SS2INF6EQXWCR7VZFyKTglj/Fp8BRv9eqa35dw83 1/49NRL1tWhu+8EAhZxYi54ZPME34HQXv10SLDJf0ZTdNkgE9puHU9MVhjltQw==
X-Gm-Gg: ASbGncvlawljebBA7Le+BAEi6ka9F122R9vxy3aYQyn2VRyMeqh4Z+a+wYNu7s9bII1 IhTChiMlh/kufqGxa+K7gXXC3lSO0/pMFEsbaFShM70vZt5UWp3eHyV6GRFjCtmKziL6Mw8Ik6q lnM0kOHC0li6SuynoiRE0/+kE1cELSNbUIj2Y0ilTDsS5Xkqnuo7AuSozfVJqxjPcqPq73pGhNd W0cBFfkb0slwSaEg+OQTHQZPFgWQDk3yAGKWB7/p0rMmWIEgNDtmFsO9G6Gd42qlUAlxvyVuksN qOk6ps0pVcoQ2mf95KRjXychthtB9RH93aoj3CWKj/VkmlWBtlEBZxNg7+lKmSzT3izq1blXsHh bbb72nG0PuO9zL9B+BxSruYSAUU3R3IAAATA1pn5Bk3pWmEHFVWcUs+hFGO7+P/6KhaoErvXceB qF
X-Google-Smtp-Source: AGHT+IH5W3JAdfw83m7MfuptLQckF5/kYZc1oJ6TcL1ycDsZUat1z6P7PdRsIV/TzwRl30Hn2EEDEg==
X-Received: by 2002:a17:903:1ca:b0:249:1f5f:f99d with SMTP id d9443c01a7336-2493ef91e19mr164061085ad.22.1756841432021; Tue, 02 Sep 2025 12:30:32 -0700 (PDT)
Received: from smtpclient.apple (thunderhill.nvidia.com. [216.228.112.22]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3276f5a0bf9sm20882092a91.13.2025.09.02.12.30.31 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 02 Sep 2025 12:30:31 -0700 (PDT)
From: Jeff Tantsura <jefftant.ietf@gmail.com>
Message-Id: <B8E955D2-5B45-4300-A1B7-4A4DCBE4DBDD@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_02947945-5533-4DB2-AC06-381F9BEE5CEA"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81\))
Date: Tue, 02 Sep 2025 12:30:20 -0700
In-Reply-To: <SJ2PR11MB8422C3BE9669BC3640C87B50CE4EA@SJ2PR11MB8422.namprd11.prod.outlook.com>
To: "Jakub Horn (jakuhorn)" <jakuhorn=40cisco.com@dmarc.ietf.org>
References: <175190992223.1833125.11465365158591699525@dt-datatracker-6fcb845cd4-p6tkq> <CAOj+MMH-mNPFD2YOuHdXGQ=f2-ZR4m1LwGmSfW9pZYu-Sf6uOA@mail.gmail.com> <SJ2PR11MB8422FC5E3254B741CBA2A0FFCE4EA@SJ2PR11MB8422.namprd11.prod.outlook.com> <CAOj+MMGNKye=oo_1qHtVp1iunAg9Swab15KyaDf5+tAg_uSh8A@mail.gmail.com> <SJ2PR11MB8422C3BE9669BC3640C87B50CE4EA@SJ2PR11MB8422.namprd11.prod.outlook.com>
X-Mailer: Apple Mail (2.3826.700.81)
Message-ID-Hash: XK3HCHHSHZYZWPLKG6G3MO766K32EY3T
X-Message-ID-Hash: XK3HCHHSHZYZWPLKG6G3MO766K32EY3T
X-MailFrom: jefftant.ietf@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-idr.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Robert Raszuk <robert@raszuk.net>, IETF IDR WG <idr@ietf.org>, "Ciurea Mihai, INI-NET-VNC-TIP" <mihai.ciurea@swisscom.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Idr] Re: I-D Action: draft-krierhorn-idr-upa-00.txt
List-Id: Inter-Domain Routing <idr.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/-d2yVP9PQpB-N89jTnxr5uBAivY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Owner: <mailto:idr-owner@ietf.org>
List-Post: <mailto:idr@ietf.org>
List-Subscribe: <mailto:idr-join@ietf.org>
List-Unsubscribe: <mailto:idr-leave@ietf.org>

Hi,

I support the work, it has quite useful applicability that is going beyond currently described use cases.

I believe that MP_UNREACH + new SAFI + new capability is the best way to proceed:
-common way of introducing new feature in BGP in a backward compatible manner
-enforces route propagation boundaries
-doesn't’ cause unintended consequences when deployed in brownfield 


Cheers,
Jeff

> 
> From: Robert Raszuk <robert@raszuk.net <mailto:robert@raszuk.net>>
> Date: Tuesday, July 8, 2025 at 7:55 PM
> To: Jakub Horn (jakuhorn) <jakuhorn@cisco.com <mailto:jakuhorn@cisco.com>>
> Cc: idr@ietf. org <idr@ietf.org <mailto:idr@ietf.org>>, Serge Krier (sekrier) <sekrier@cisco.com <mailto:sekrier@cisco.com>>, Ciurea Mihai, INI-NET-VNC-TIP <mihai.ciurea@swisscom.com <mailto:mihai.ciurea@swisscom.com>>
> Subject: Re: I-D Action: draft-krierhorn-idr-upa-00.txt
> 
> Hi Jakub,
>  
> Due to personal reasons I am not planning to be in Madrid. However we could always chat here on the list or directly say via zoom or webex. 
>  
> As I mentioned in your draft I see fundamental issues which IMO are blocking for even an adoption call. 
>  
> Just to start with the most important issue: 
>  
> You say: 
>  
> " The specific prefix whose reachability is lost is encoded in the
>    MP_UNREACH_NLRI attribute [RFC4760]."
> + 
> "A new Transitive IPv4-Address-Specific Extended Community is defined
>    for UPA."
> + 
> "  The UPA state for the prefix SHOULD be retained for a time period to
>    ensure it has been propagated to its neighbors and avoid generation
>    of multiple UPA messages for the same prefix."
> +
> "10.  UPA Timer
>    The UPA state needs to be retained in the BGP table for a
>    configurable duration.  This is crucial to prevent unwanted flooding
>    and to allow sufficient time for the UPA to be propagated to all
>    relevant peers.
> "
>  
> Well all of the above is not how BGP or for that matter any distance vector protocol works. 
> [JH] correct but we believe what we are proposing is big improvement to the distance vector concept and industry will benefit it greatly
>  
> You can't think of propagating BGP withdrawals for the prefixes which were not advertised to the peer before. 
> [JH] very correct
>  
> If you really want to do that you need to use MP_REACH attribute not MP_UNREACH_NLRI. But for 
> MP_REACH you would need to make sure that suddenly it propagates negative routes. 
>  
> [JH] we spent lot of time discussing this, and we believe that MP_UNREACH is proper way to do that because of backward compatibility and limited reach, but we are very open to discuss other option
>  
> The concept of negative routes is not new. If you search the CPOL database you will likely find a few 
> entries there and methods on how to do that :) 
>  
> [JH] Certainly! But never applied in BGP (or any distance vector protocol) so this statement is actually prove it is necessary, and need the solution in BGP
>  
> Another major concern is leakage. As you may be reading the IDR list there are reports of BGP attributes escaping and leaking. Here you are opening a completely new chapter and as this is called to be supported in 2/1 global IPv6 table may one day explode due to a bunch of negative routes generated intentionally or not by someone or something (again assuming that you switch from using MP_UNREACH_NLRI as this goes to your peer and no further to MP_REACH). 
>  
> [JH] this is actually why we picked MP_UNREACH which naturally limits reach of the message to the devices “UPA aware” and will never spread across the boundary! Still open for discussion here
>  
> Maybe if you really want to do that in BGP you need a new SAFI where you can safely redefine the semantics of UPDATE message (just like we did it for a bunch of new functionality). 
>  
> [JH] again lot of discussions in that area, and currently we do not believe that new SAFI would be valuable here. Again happy to discuss details here
>  
> Kind regards,
> Robert
>  
>  
> On Tue, Jul 8, 2025 at 2:12 AM Jakub Horn (jakuhorn) <jakuhorn@cisco.com <mailto:jakuhorn@cisco.com>> wrote:
> Hi Robert,
>  
> Thanks a lot for your initial comments and pointing us to your older draft. I think if I correctly understand your draft is addresses something slightly different than ours. Yours addresses mainly “mass withdrawal” our is trying to address “advertise unreachability of the specific component of aggregate”. But still happy to discuss your approach f2f in Madrid as there might be some useful synergies in both.
> Looking forward for more comments!
>  
> Thanks
>  
> -j
>  
> From: Robert Raszuk <robert@raszuk.net <mailto:robert@raszuk.net>>
> Date: Tuesday, July 8, 2025 at 6:59 AM
> To: Serge Krier (sekrier) <sekrier@cisco.com <mailto:sekrier@cisco.com>>, Jakub Horn (jakuhorn) <jakuhorn@cisco.com <mailto:jakuhorn@cisco.com>>, Ciurea Mihai, INI-NET-VNC-TIP <mihai.ciurea@swisscom.com <mailto:mihai.ciurea@swisscom.com>>
> Cc: idr@ietf. org <idr@ietf.org <mailto:idr@ietf.org>>
> Subject: Fwd: I-D Action: draft-krierhorn-idr-upa-00.txt
> 
> Hi,
>  
> Allow me to observe before even further commenting on the draft that motivation for the IGP UPA work was based on the trigger of node down event (planned or unplanned) in one non backbone areas. 
>  
> With that the analogy in the BGP world is not to advertise all atomic prefixes which may have become unreachable, but instead quickly propagate information about the next hop down event which is by design shared across all such prefixes/locators. 
>  
> I along with few collegues in 2005 we wrote a draft - https://www.ietf.org/archive/id/draft-raszuk-aggr-withdraw-00.txt
>  
> At that time there was no sufficient interest in signalling such events in BGP. 
>  
> If you think that times have changed I recommend you take a look at this draft and possibly respin it or reuse it. 
>  
> Thx a lot,
> Robert
>  
> PS. After a quick read I do have a number of comments on the text in the draft however before we go down that path let's consider the alternative approach. 
>  
>  
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>>
> Date: Mon, Jul 7, 2025 at 7:41 PM
> Subject: I-D Action: draft-krierhorn-idr-upa-00.txt
> To: <i-d-announce@ietf.org <mailto:i-d-announce@ietf.org>>
> 
> 
> Internet-Draft draft-krierhorn-idr-upa-00.txt is now available.
> 
>    Title:   SRv6 BGP Unreachable Prefix Announcement (UPA)
>    Authors: Serge Krier
>             Jakub Horn
>             Mihai Ciurea
>    Name:    draft-krierhorn-idr-upa-00.txt
>    Pages:   8
>    Dates:   2025-07-07
> 
> Abstract:
> 
>    Summarization is often used in multi-domain networks to improve
>    network efficiency and scalability.  With summarization in place,
>    there is a need to signal loss of reachability to an individual
>    prefix covered by the summary.  This enables fast convergence by
>    steering traffic away from the node which owns the prefix and is no
>    longer reachable.
> 
>    This mechanism, referred to as Unreachable Prefix Announcement (UPA),
>    has been specified for IGPs.  This document specifies an and
>    equivalent BGP mechanism for multi-AS networks where BGP is used to
>    carry summary routes.
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-krierhorn-idr-upa/
> 
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-krierhorn-idr-upa-00.html
> 
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org <http://rsync.ietf.org/>::internet-drafts
> 
> 
> _______________________________________________
> I-D-Announce mailing list -- i-d-announce@ietf.org <mailto:i-d-announce@ietf.org>
> To unsubscribe send an email to i-d-announce-leave@ietf.org <mailto:i-d-announce-leave@ietf.org>_______________________________________________
> Idr mailing list -- idr@ietf.org <mailto:idr@ietf.org>
> To unsubscribe send an email to idr-leave@ietf.org <mailto:idr-leave@ietf.org>