Re: [Idr] RFC-4893 handling malformed AS4_PATH attributes

Paul Jakma <paul@clubi.ie> Wed, 17 December 2008 17:33 UTC

Return-Path: <idr-bounces@ietf.org>
X-Original-To: idr-archive@megatron.ietf.org
Delivered-To: ietfarch-idr-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C4E0C28C1A3; Wed, 17 Dec 2008 09:33:59 -0800 (PST)
X-Original-To: idr@core3.amsl.com
Delivered-To: idr@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7262228C1A3 for <idr@core3.amsl.com>; Wed, 17 Dec 2008 09:33:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EgFYp8ecXxQ7 for <idr@core3.amsl.com>; Wed, 17 Dec 2008 09:33:57 -0800 (PST)
Received: from hibernia.jakma.org (cl-9.dub-01.ie.sixxs.net [IPv6:2001:770:100:8::2]) by core3.amsl.com (Postfix) with ESMTP id 37FFB28C19B for <idr@ietf.org>; Wed, 17 Dec 2008 09:33:56 -0800 (PST)
Received: from melandri.gla.jakma.org (IDENT:U2FsdGVkX1+hCpsFTCgPOfgZwPkf6b9Y7Mxwi7jwF3I@melandri.jakma.org [81.168.24.37]) (authenticated bits=0) by hibernia.jakma.org (8.14.2/8.14.2) with ESMTP id mBHHXZSi019735 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 17 Dec 2008 17:33:42 GMT
Date: Wed, 17 Dec 2008 17:33:34 +0000
From: Paul Jakma <paul@clubi.ie>
X-X-Sender: paul@localhost.localdomain
To: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <6F174CCF-5295-4FB1-BAB2-8DC7DF1592E0@juniper.net>
Message-ID: <alpine.LFD.2.00.0812171603230.5839@localhost.localdomain>
References: <CD705FABA8532448AA1FB7A96C88FF140898F8A4@emailbng1.jnpr.net> <4D86C4C6-F7CD-46B9-ABBE-04530F4D1278@juniper.net> <164BE5B4-1A18-42D7-A11B-DE2056890C78@tcb.net> <4946AC94.2080605@cisco.com> <5340D990-F446-4C37-8307-1DB31ADF2273@tcb.net> <4946B996.4040907@cisco.com> <A35E9CEC-BC77-4CDF-AF3D-1ECFE63D8FD3@tcb.net> <4946F36B.8050903@cisco.com> <alpine.LFD.2.00.0812160932000.5839@localhost.localdomain> <20081216140212.GA55748@verdi> <alpine.LFD.2.00.0812161618080.5839@localhost.localdomain> <F5B1A3A0-C1DA-4370-9051-0F12E46B0EAD@juniper.net> <alpine.LFD.2.00.0812170808130.5839@localhost.localdomain> <6F174CCF-5295-4FB1-BAB2-8DC7DF1592E0@juniper.net>
User-Agent: Alpine 2.00 (LFD 1167 2008-08-23)
Mail-Copies-To: paul@jakma.org
X-NSA: al aqsar fluffy jihad cute musharef kittens jet-A1 ear avgas wax ammonium bad qran dog inshallah allah al-akbar martyr iraq hammas hisballah rabin ayatollah korea revolt pelvix mustard gas x-ray british airways washington peroxide cool
MIME-Version: 1.0
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0rc1 (hibernia.jakma.org [212.17.55.49]); Wed, 17 Dec 2008 17:33:47 +0000 (GMT)
X-Virus-Scanned: ClamAV 0.92.1/8775/Wed Dec 17 10:06:49 2008 on hibernia.jakma.org
X-Virus-Status: Clean
Cc: Inter-Domain Routing List <idr@ietf.org>
Subject: Re: [Idr] RFC-4893 handling malformed AS4_PATH attributes
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/idr>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Sender: idr-bounces@ietf.org
Errors-To: idr-bounces@ietf.org

On Wed, 17 Dec 2008, John G. Scudder wrote:

> That's more or less correct, modulo the adverb :-).  The point is that as 
> long as the loop gets broken, regardless of by whom (in this case the OLD 
> speaker preceding the NEW speaker which removed the AS4_PATH), it will 
> proceed to unwind.  That is to say, it's only a transient loop.
> Keep in mind this behavior SHOULD never be seen in the wild since it's 
> predicated on broken behavior along the path someplace to begin with;

Things like private-AS removal technically are broken, I guess, yes.

Also, it's not clear to me whether the "the number of AS numbers" in 
the reconciliation scheme means literally that or the traditional 
path-length metric from 4271. I presume it means it literally. That 
might come into play for things like where an OLD speaker receives:

 	1_2_{23456,23456,23456}

and then re-announces the set as, say due to how it implements as-set 
sorting:

 	1_2_{23456}

Though, I guess that's not much of a worry.

> with luck this is just a chalkboard exercise.  I for one find it 
> heartening that the protocol appears to be robust even in the face 
> of certain types of mangling of the AS4_PATH.

It's reassuring, that it's robust in this way, yes. It would be more 
robust if NEW speakers considered AS_TRANS to == any >65535 ASN. E.g. 
it's not robust if two OLD speakers in a cycle each remove the 
other's ASN, with the remaining speakers on the cycle all being NEW.

I don't see why we would want to leave loop-detection degraded in 
this way, given a respin, when it seems so trivial to strengthen it.

But anyway.. :)

regards,
-- 
Paul Jakma	paul@clubi.ie	paul@jakma.org	Key ID: 64A2FF6A
Fortune:
Anger kills as surely as the other vices.
_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr