Re: [Idr] Vendor Defaults (was Re: Review of draft-ietf-large-community-06.txt)

heasley <heas@shrubbery.net> Sun, 06 November 2016 04:08 UTC

Return-Path: <heas@shrubbery.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF06412943E for <idr@ietfa.amsl.com>; Sat, 5 Nov 2016 21:08:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.699
X-Spam-Level:
X-Spam-Status: No, score=-5.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.497, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JX3TntnlyKsw for <idr@ietfa.amsl.com>; Sat, 5 Nov 2016 21:08:50 -0700 (PDT)
Received: from guelah.shrubbery.net (guelah.shrubbery.net [198.58.5.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1027B12943D for <idr@ietf.org>; Sat, 5 Nov 2016 21:08:50 -0700 (PDT)
Received: by guelah.shrubbery.net (Postfix, from userid 7053) id 87A347A15C; Sun, 6 Nov 2016 04:08:49 +0000 (UTC)
Date: Sun, 06 Nov 2016 04:08:49 +0000
From: heasley <heas@shrubbery.net>
To: "Jakob Heitz (jheitz)" <jheitz@cisco.com>
Message-ID: <20161106040849.GB18931@shrubbery.net>
References: <CAH1iCiq6jNtnkta0Bt952EQ9zOKSGt=_cCySsT5XuOKuHYO2nQ@mail.gmail.com> <86860386-9C2B-4BD5-B457-2A6DA5446CF3@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <86860386-9C2B-4BD5-B457-2A6DA5446CF3@cisco.com>
X-PGPkey: http://www.shrubbery.net/~heas/public-key.asc
X-note: live free, or die!
X-homer: i just want to have a beer while i am caring.
X-Claimation: an engineer needs a manager like a fish needs a bicycle
X-reality: only YOU can put an end to the embarrassment that is Tom Cruise
User-Agent: Mutt/1.6.1 (2016-04-27)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/4tpYRcgCWZn073TeKwNGWh4KMVk>
Cc: heasley <heas@shrubbery.net>, "idr@ietf.org" <idr@ietf.org>, Robert Raszuk <robert@raszuk.net>
Subject: Re: [Idr] Vendor Defaults (was Re: Review of draft-ietf-large-community-06.txt)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 06 Nov 2016 04:08:52 -0000

Sat, Nov 05, 2016 at 11:13:46PM +0000, Jakob Heitz (jheitz):
> IOS-XR does not send communities or extended communities to eBGP neighbors by default.
> To send communities, you need to configure
>   send-community-ebgp
> Under the neighbor address-family.
> To send extended communities, you need to configure
>   send-extended-community-ebgp
> 
> The reason is that many operators use communities internal to an AS for many reasons and we don't want these to accidentally leak out to the wider internet. If an operator intends to send communities outside of their own AS, then they need to make a conscious decision to do so. Along with that conscious decision, they should filter out all the internally used communities in a route-policy.
> 
> In my large-community code, I have lumped them under send-community-ebgp. At this point, I am very open to suggestions for configuration. Once the code is released, it gets much harder to change configs.

If you consider draft-grow-bgp-reject, does that change your opinion about
filtering needing to be the default?