Re: [Idr] RFC-4893 handling malformed AS4_PATH attributes

Kaliraj Vairavakkalai <kaliraj@juniper.net> Tue, 16 December 2008 08:55 UTC

Return-Path: <idr-bounces@ietf.org>
X-Original-To: idr-archive@megatron.ietf.org
Delivered-To: ietfarch-idr-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D409B28C12E; Tue, 16 Dec 2008 00:55:06 -0800 (PST)
X-Original-To: idr@core3.amsl.com
Delivered-To: idr@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9886928C131 for <idr@core3.amsl.com>; Tue, 16 Dec 2008 00:55:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.299
X-Spam-Level:
X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uLs3gSdUhBPB for <idr@core3.amsl.com>; Tue, 16 Dec 2008 00:55:04 -0800 (PST)
Received: from exprod7og104.obsmtp.com (exprod7og104.obsmtp.com [64.18.2.161]) by core3.amsl.com (Postfix) with ESMTP id 8925728C12E for <idr@ietf.org>; Tue, 16 Dec 2008 00:55:04 -0800 (PST)
Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob104.postini.com ([64.18.6.12]) with SMTP ID DSNKSUds17pf9ZXhMN8q85bZuhw4gaqLJmdv@postini.com; Tue, 16 Dec 2008 00:54:58 PST
Received: from p-emfe01-sac.jnpr.net (66.129.254.71) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Tue, 16 Dec 2008 00:50:55 -0800
Received: from p-emlb02-sac.jnpr.net ([66.129.254.47]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Tue, 16 Dec 2008 00:50:55 -0800
Received: from emailbng1.jnpr.net ([10.209.194.15]) by p-emlb02-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Tue, 16 Dec 2008 00:50:54 -0800
x-mimeole: Produced By Microsoft Exchange V6.5
Content-Class: urn:content-classes:message
MIME-Version: 1.0
Date: Tue, 16 Dec 2008 14:20:41 +0530
Message-ID: <CD705FABA8532448AA1FB7A96C88FF140898F8DB@emailbng1.jnpr.net>
In-Reply-To: <AB40DA4B-874F-4755-A9FA-E0C70DCD8B90@tcb.net>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [Idr] RFC-4893 handling malformed AS4_PATH attributes
Thread-Index: AclfG+3TyICol6wbTNKltUM3Z14ROQAO5HxA
References: <CD705FABA8532448AA1FB7A96C88FF140898F8A4@emailbng1.jnpr.net><4D86C4C6-F7CD-46B9-ABBE-04530F4D1278@juniper.net><164BE5B4-1A18-42D7-A11B-DE2056890C78@tcb.net><4946AC94.2080605@cisco.com><5340D990-F446-4C37-8307-1DB31ADF2273@tcb.net><4946B996.4040907@cisco.com><A35E9CEC-BC77-4CDF-AF3D-1ECFE63D8FD3@tcb.net><4946F36B.8050903@cisco.com> <AB40DA4B-874F-4755-A9FA-E0C70DCD8B90@tcb.net>
From: Kaliraj Vairavakkalai <kaliraj@juniper.net>
To: Danny McPherson <danny@tcb.net>, Enke Chen <enkechen@cisco.com>
X-OriginalArrivalTime: 16 Dec 2008 08:50:54.0782 (UTC) FILETIME=[67F93DE0:01C95F5B]
Cc: Inter-Domain Routing List <idr@ietf.org>, quaizar.vohra@gmail.com
Subject: Re: [Idr] RFC-4893 handling malformed AS4_PATH attributes
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/idr>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: idr-bounces@ietf.org
Errors-To: idr-bounces@ietf.org

I agree with the text proposed by Danny, to handle this particular
malformed-ness in AS4_PATH attribute.

> Recommended addition to RFC 4893 - S 4.2.3:
>
>   If a NEW BGP speaker receives an UPDATE message containing the path
>   segment types AS_CONFED_SEQUENCE or AS_CONFED_SET [RFC3065] in the
>   AS4_PATH attribute, it MUST strip and discard those segments from
the
>   attribute and continue processing the the AS4_PATH attribute.  The
>   BGP speaker MUST log the event in a manner that assists network
>   operators in determining the originator of the malformed attribute.

Further, may be the general handling of "malformed
optional-transitive-attributes" needs a closer look (RFC-4271) too -
given the fact that whenever new-features using newer
opt-trans-attributes are deployed, we may hit this issue. 

May be implementations should provide the operator with means to be
cognizantly lenient and skip the malformed optional-transitive-attribute
without dropping the session.

i.e.

RFC-4271: section "6.3 UPDATE Message Error Handling"
---------
May be we can consider Changing this text:
   If an optional attribute is recognized, then the value of this
   attribute MUST be checked.  If an error is detected, the attribute
   MUST be discarded, and the Error Subcode MUST be set to Optional
   Attribute Error.  The Data field MUST contain the attribute (type,
   length, and value).
To:
   If an optional transitive attribute is recognized, then the value of
this
   attribute MUST be checked.  If an error is detected, the attribute
   MUST be discarded. And the speaker MAY continue processing the UPDATE

   after logging the event in a manner that assists network operators in

   determining the originator of the malformed attribute; this decision 
   should be taken on a case-by-case basis as specified by the
attribute's 
   error-handling mechanisms. If the speaker chooses to send a
Notification, 
   Error Subcode MUST be set to Optional Attribute Error.  The Data
field 
   MUST contain the attribute (type, length, and value).

Thanks,
Kaliraj 
-----Original Message-----
From: idr-bounces@ietf.org [mailto:idr-bounces@ietf.org] On Behalf Of
Danny McPherson
Sent: Tuesday, December 16, 2008 6:45 AM
To: Enke Chen
Cc: Inter-Domain Routing List; quaizar.vohra@gmail.com
Subject: Re: [Idr] RFC-4893 handling malformed AS4_PATH attributes


On Dec 15, 2008, at 5:16 PM, Enke Chen wrote:
>
> The logic here appears twisted. I have never said that either RFC  
> should NOT be updated. I just gave the rational why the behavior was  
> not spelled out explicitly in the 4byte AS document (because we  
> thought that's covered by the confed documentation). Also I stated  
> that the behavior for processing unexpected confed segments should  
> be the same in both RFCs.

Heh, ok then :-)

> If the WG consensus is to update RFC 5056 / RFC 4893, or both, I  
> will be glad to do my share with Quaizar on RFC 4893.

Very well, thanks Enke!

-danny
_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr
_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr