Re: [Idr] WG adoption call for draft-abraitis-bgp-version-capability-08, to end September 25

Donatas Abraitis <donatas.abraitis@hostinger.com> Thu, 12 January 2023 19:43 UTC

Return-Path: <donatas.abraitis@hostinger.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0A15C16B1E4 for <idr@ietfa.amsl.com>; Thu, 12 Jan 2023 11:43:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.094
X-Spam-Level:
X-Spam-Status: No, score=-2.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=hostinger.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id quHMYPks6Db6 for <idr@ietfa.amsl.com>; Thu, 12 Jan 2023 11:43:02 -0800 (PST)
Received: from mail-lj1-x22e.google.com (mail-lj1-x22e.google.com [IPv6:2a00:1450:4864:20::22e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FB2EC15C510 for <idr@ietf.org>; Thu, 12 Jan 2023 11:43:02 -0800 (PST)
Received: by mail-lj1-x22e.google.com with SMTP id s25so20466166lji.2 for <idr@ietf.org>; Thu, 12 Jan 2023 11:43:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hostinger.com; s=google; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=BEyBexbUBD9t4reObVKVqC5Q7RL7zW6HTNP0Yhbanno=; b=dbWmPf9jf3DmzTedKpQoYP33rl2j8tXEWxrspESvXlWfdWpIIuaHu2zUrUywTVXPCf aVmgodqxgVBTUtOL4J/31M2vo7LC4CpPcHFRBvQpFCNAmfopUpE6r2fRNYxEMp/4wMu/ i/v5jKoM66F2FMKPKe6fYW4NjLGBo4a+CIuMndBdwbCEZn05AW+Q1dcPIHuIrzjaUu5b R8egcW3ryxUC/27m6diMKBlgiOP81f9kWxtDbhFnyMQJyBmD775NTA9tQ8NHHUCMiRSW 0NZIJW66ktByGQnPmbWoWfpoDer1ko+LttSS2T8kIiSoPV4hRMpuNB/gu9MGGNG464ff lU+g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=BEyBexbUBD9t4reObVKVqC5Q7RL7zW6HTNP0Yhbanno=; b=FlHIiip3GlD3k9lYjH60WExNqJyQ2P30lcuk3oG75+GL/O1cUka8YdZ9R9M/RT7mqR SNx2vnrRY1gV8NJ5ZHWz9mp4rJvvCtGqzM7jCPFQbvDatVuluPGgpVCytPUZW7dagWqr WA8AhYDZ/ZP7yji5aLGmTfqwW0NVQNJTwvX2nN06/40R7jEtvoy7Kfi+XKacKlyNqY2V e7DDx+G9htv3Ym/Lz61QmsUdL9wFux1IrcKXV/WDRpNTcY5TeTBABG3jFhH9U7o+7Y+k HqUWQw45PrA1o3O/BT3fq0R8odKmHOPsLisSbKAURbS0xukLF7gwnUxR8O5PvhEdn4C8 u3Ow==
X-Gm-Message-State: AFqh2kqY2v9i0fvFZo5bIGDw4jdUAq5Zlo7IQhsuvcCljLOMAnhwP7fj dlx8T8Efhf+R3P9+u16eO9w+S89qXBKSl2rXQXNMB1MjOk5QSk88SjsElecYRYnB/k8oxMMaTGX VB3Gjde1Y4D7H
X-Google-Smtp-Source: AMrXdXtvcUHjihPMBQnD1Uc6Sz0GRGip2DpZKN37QYcqVDVzXBWPbX3LGAvW/r+nXcrQPnRyddq5JdtOgw84rfhDTZY=
X-Received: by 2002:a2e:98d0:0:b0:27f:bede:6930 with SMTP id s16-20020a2e98d0000000b0027fbede6930mr4841660ljj.214.1673552580709; Thu, 12 Jan 2023 11:43:00 -0800 (PST)
MIME-Version: 1.0
References: <CAOj+MMG9BuCBjATYNKO5H0oFUipCE8iBU+DJ0FLDDUZdp+nM3Q@mail.gmail.com> <C9D01C45-90BD-465D-B2C4-0CCA6B2A21A3@juniper.net> <CAOj+MMFrke5-9+pMKZ7QTawiOT+N3fD=2ta8hGEu=CG+qv_OQw@mail.gmail.com> <C264E12E-08DE-4C90-AF36-C0B477825DFE@juniper.net> <CAOj+MMF0R3dFZ+Wo9ymRXfeY1_0YyCWpdMf-WFXsbZ69wfAOaQ@mail.gmail.com>
In-Reply-To: <CAOj+MMF0R3dFZ+Wo9ymRXfeY1_0YyCWpdMf-WFXsbZ69wfAOaQ@mail.gmail.com>
From: Donatas Abraitis <donatas.abraitis@hostinger.com>
Date: Thu, 12 Jan 2023 21:42:48 +0200
Message-ID: <CAJwpseUn3DgBhvs12Nbu6E656BM357c2CMsib+-aaYBnJ2evCg@mail.gmail.com>
To: Robert Raszuk <robert@raszuk.net>
Cc: John Scudder <jgs@juniper.net>, Jeffrey Haas <jhaas@pfrc.org>, "Jakob Heitz (jheitz)" <jheitz@cisco.com>, Alvaro Retana <aretana.ietf@gmail.com>, Bruno Decraene <bruno.decraene@orange.com>, IDR List <idr@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000016237905f21653ef"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/3_Mg1beYVDNdv3vjqrE-4v7B5IE>
Subject: Re: [Idr] WG adoption call for draft-abraitis-bgp-version-capability-08, to end September 25
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jan 2023 19:43:07 -0000

Thank you, All, for the very great comments/notes. To my understanding:

* It's better to stick with BGP Capability (as the initial version) instead
of BGP OPEN Optional Parameter;
* Requires this new BGP Capability to be used together with rfc9072 (as a
requirement);
* Keep going in IDR, not the ISE track.

Is this correct?

On Thu, Jan 12, 2023 at 9:11 PM Robert Raszuk <robert@raszuk.net> wrote:

> Hi John,
>
> Yes the following example I did not quote was about major support of IPv6.
> But it was just an example.
>
> But my point I think got lost in this discussion. IMO it is a feature not
> a bug to close the session when I am receiving stuff I do not understand.
>
> Please kindly observe that we are not talking about stopping in the middle
> of the flight .. we are talking about taking off or not.
>
> If you follow last paragraph of section 3 of RFC5492 and drop on the floor
> what I am sending to you then it is like I am talking chinese or hindu to
> you and you just ignore it. It does no one any good. In fact disabling this
> on the sender seems like a good thing to do.
>
> With that IMO BGP Capabilities (and perhaps one subset of their dynamic
> flavor) is not the right container to carry unrelated to BGP protocol and
> its operation free form text fields.
>
> So if we were to go for 5492-bis I would instead suggest removing the last
> paragraph of section 3.
>
> Kind regards,
> R.
>
>
>
>
>
>
>
>
>
> On Thu, Jan 12, 2023 at 7:24 PM John Scudder <jgs@juniper.net> wrote:
>
>> > On Jan 12, 2023, at 12:48 PM, Robert Raszuk <robert@raszuk.net> wrote:
>> >
>> >
>> > Hi John,
>> >
>> > But as you see based on real life deployments the very same happens
>> with BGP Capabilities too hence not much of practical difference.
>>
>> I disagree. Yes, it’s true that there have, historically, been
>> implementations that have a bug. Some blame falls to me — that Notification
>> code should never have been called “Unsupported Capability” — even though
>> the spec was ‘right’, the naming was wrong. :-( But I think the updated
>> language in RFC 5492 is explicit enough that anyone still shipping this
>> class of bug almost 13 years after publication has a lot of explaining to
>> do.
>>
>> > And section 3 of RFC5492 allows so ...
>> >
>> >    If a BGP speaker that supports a certain capability determines that
>> >    its peer doesn't support this capability, the speaker MAY send a
>> >    NOTIFICATION message to the peer and terminate peering (see Section
>> >    "Extensions to Error Handling" for more details).
>>
>> No. You’re taking that quote out of context, you left out the example
>> that follows — and that example should already have been enough for you to
>> understand your mistake. The behavior allowed by RFC 5492 is, “if I needed
>> my peer to send me a capability, and it didn’t, then I can close the
>> session”. The problematic behavior with respect to Optional Parameters is
>> “if my peer sent me a parameter I don’t understand, then I must close the
>> session”. These are completely different things. The first is caused by a
>> thing that is not there. The second is caused by a thing that is there. The
>> two examples you sent earlier are a third category, a bug where some
>> implementor decided to do the wrong thing. If it’s a recent version then
>> shame on them, see above.
>>
>> > The only difference seems to be MUST in RFC4271 in respect to
>> Unsupported Optional Parameters vs MAY in RFC5492 in respect to Unsupported
>> Capability.
>>
>> No. See above.
>>
>> The bottom line is, Capabilities are BGP’s main extensibility mechanism.
>> In my opinion (as, to be clear, an individual contributor to the WG) they
>> work OK and are fit for purpose, notwithstanding historical implementation
>> errors. They are suitable for the extension under discussion, just as they
>> are for other extensions.
>>
>> On the other hand, if the WG thinks Capabilities are *not* fit for
>> purpose, the WG should get to work on a replacement that obsoletes and
>> replaces RFC 5492. But saying “oh we’re too scared to extend the protocol
>> because there were bugs in the past” does not seem like a good way to
>> proceed.
>>
>> FWIW, as far as I know, the behavior permitted by the paragraph you quote
>> has never been used. If that’s true, it might not be a bad idea to do an
>> update of RFC 5492 that removes the paragraph and deprecates the
>> Unsupported Capability error code entirely, to avoid future generations
>> going through the same confusion. If the WG wants to do this, I’d be
>> willing to participate, although the first step would be to do a survey to
>> make sure nobody actually is making use of the feature and I’d want someone
>> else to lead on that.
>>
>> —John
>
>

-- 

*Donatas Abraitis*
*Principal Systems Engineer*
@: donatas.abraitis@hostinger.com
W: www.hostinger.com

-- 
This
 message and its attachments may contain privileged and confidential 
information. If you are not the intended recipient, do not use, copy, or
 
disclose this information. Please notify the sender and permanently 
delete 
the message from your system.