Re: [Idr] Brian Haberman's No Objection on draft-ietf-idr-error-handling-18: (with COMMENT)

Brian Haberman <brian@innovationslab.net> Mon, 09 March 2015 12:21 UTC

Return-Path: <brian@innovationslab.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3255E1A87EB; Mon, 9 Mar 2015 05:21:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zXzBdEfzwAwy; Mon, 9 Mar 2015 05:21:29 -0700 (PDT)
Received: from uillean.fuaim.com (uillean.fuaim.com [206.197.161.140]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5A7F1A87E4; Mon, 9 Mar 2015 05:21:29 -0700 (PDT)
Received: from clairseach.fuaim.com (clairseach-high.fuaim.com [206.197.161.158]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by uillean.fuaim.com (Postfix) with ESMTP id 8B0178814A; Mon, 9 Mar 2015 05:21:29 -0700 (PDT)
Received: from Brians-MacBook-Pro.local (clairseach.fuaim.com [206.197.161.141]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by clairseach.fuaim.com (Postfix) with ESMTP id D111771B0001; Mon, 9 Mar 2015 05:21:28 -0700 (PDT)
Message-ID: <54FD9043.7000702@innovationslab.net>
Date: Mon, 09 Mar 2015 08:21:23 -0400
From: Brian Haberman <brian@innovationslab.net>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: rob.shakir@bt.com, shares@ndzh.com, iesg@ietf.org
References: <20150306204043.28239.82980.idtracker@ietfa.amsl.com> <122301d0584e$e8395830$b8ac0890$@ndzh.com> <D11FC3C4.96400%rob.shakir@bt.com> <54FA1795.5000406@innovationslab.net> <D12248F1.96424%rob.shakir@bt.com>
In-Reply-To: <D12248F1.96424%rob.shakir@bt.com>
Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="tbfParc86IqrfWe2RUG34dVP2SuPDeBgv"
Archived-At: <http://mailarchive.ietf.org/arch/msg/idr/0C-EqRp5H_1haHEVz-5Du1p17WI>
Cc: idr@ietf.org, draft-ietf-idr-error-handling.all@ietf.org, idr-chairs@ietf.org
Subject: Re: [Idr] Brian Haberman's No Objection on draft-ietf-idr-error-handling-18: (with COMMENT)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Mar 2015 12:21:31 -0000

Hi Rob,
     Thanks for continuing this conversation...

On 3/8/15 2:49 PM, rob.shakir@bt.com wrote:
> 
> Hi Brian,
> 
> 
> [06/03/2015 21:09, "Brian Haberman" <brian@innovationslab.net>]
> 
>> Hi Rob,
>>
>> On 3/6/15 3:59 PM, rob.shakir@bt.com wrote:
>>> <snip>
>>>
>>
>> The above is quite clear and shows me how I think I misread the second
>> paragraph.  I read it has saying the operator SHOULD identify the
>> offending route and trace it back to its ingress into the network.  The
>> description above sounds like the text is saying the router SHOULD
>> provide enough information so that the operator knows to trace the
>> offending route.
> 
> In my view, it¹s both.
> 
> If we have erroneous UPDATEs that are being transmitted by a router, this
> means that something, somewhere is wrong. It¹s not really desirable for
> there to be routing updates that are known to have issues present in the
> system, and as such an operator should really examine this and fix it.
> Today, they have to do so, as the router transmitting the error is likely
> to be disconnected from the network (or some other system downstream will
> be, due to it transmitting the erroneous message).
> 
> The recommendation is maybe stating something obvious, but I see no harm
> in having it in the document - we should remind people that transmitting
> an erroneous UPDATE is still a BadThing (tm), and is likely to be causing
> log messages for all other operators that see it in the DFZ. The best
> practice is clearly to clean up the error.

I agree that it belongs in the document, but it appears to me to be a
little opaque.  I read the text in the draft as strictly something the
operator has to worry about.  The description you provided indicated
that there needs to be sufficient notification from the router so that
the operator can act on it.

Perhaps what is needed is just a little clarification.  Given that I
raised this as a Comment, making any changes is really up to the
authors/WG/AD.  My thought would be a slight re-wording of the 2nd
paragraph to indicate that the router needs to provide a notification
when a malformed attribute is detected.  That then provides the input
needed for the operator to act on the recommendation in the section.

Regards,
Brian