Re: [Idr] [Responses for the comments during the IETF108] New Version Notification for draft-wang-idr-rd-orf-01.txt

Gert Doering <gert@space.net> Mon, 10 August 2020 09:28 UTC

Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 040773A145F for <idr@ietfa.amsl.com>; Mon, 10 Aug 2020 02:28:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=space.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jy5PvXnrRqO5 for <idr@ietfa.amsl.com>; Mon, 10 Aug 2020 02:28:52 -0700 (PDT)
Received: from gatekeeper1-relay.space.net (gatekeeper1-relay.space.net [IPv6:2001:608:3:85::38]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2546D3A144E for <idr@ietf.org>; Mon, 10 Aug 2020 02:28:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=space.net; i=@space.net; q=dns/txt; s=esa; t=1597051732; x=1628587732; h=date:from:to:cc:subject:message-id:references: mime-version:in-reply-to; bh=g7VRzSMyKnySR3fwyAhGTs3u5UZzNAPqBOB2IQpLc9k=; b=L9+jCJhZTIsOVbhzm2ioFG+aYoixKD1u5xRwUFCmv6th3d9FTOsLmIGa JXbAYH5CFCiTKHOe1rYDGnh5DDKyaYCjAQncztpIESy77EYaU/r4s8C+o SUw1qMbNnM1LmzJ213mDwK8BORnIsxd4NnaED+hpdgYq7a2hDhdxYaM1r 9yjokYTMWFtwTMRwe81Lyy5HhkTfss6wVlzN0TPnJqwjmiAF/DFPnrlzv hqmiBr0ygKsHUiIRCgrd39e6Y2l7WiRcX35OOKjxLCplkcv3N1JUbn4eW jAx2wVbkchYaEoqeZMUVB1z8GOjb7AD0Eiia4todV12Hpl+sbImq4a2uV g==;
IronPort-SDR: sCxFG/kZRJ21BP4uiWMQrrncO9bt7z/Ghp0mqW6WiWtBYKy/ZNzr6fdGSrQL6IcIuq8Z1WUsz2 wdlwIRsAf4E15/HPjPRtYHjWgZU3nwg+8qYU9riBWSTM9/YZPNemJpxzu3PcnK1dGRO93vkl61 MJIDzI9QAyUWByNqMYjxzCuLBdW1jIMPQtDJe4MMEQ70v+nh/F8rPJH9RJf+9R3ELzLvD3VwEq YT2N8FaRdUsNJsPnpZwmxCjkGldeGbk4UyWeYkYOv1ZbMzGkFVp/4LvezDNo6d8vmthUby63es ZPI=
X-SpaceNet-SBRS: None
Received: from mobil.space.net ([195.30.115.67]) by gatekeeper1-relay.space.net with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 10 Aug 2020 11:28:46 +0200
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id 00B704205E for <idr@ietf.org>; Mon, 10 Aug 2020 11:28:42 +0200 (CEST)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id C877442052; Mon, 10 Aug 2020 11:28:41 +0200 (CEST)
Received: by moebius4.space.net (Postfix, from userid 1007) id C104020893; Mon, 10 Aug 2020 11:28:41 +0200 (CEST)
Date: Mon, 10 Aug 2020 11:28:41 +0200
From: Gert Doering <gert@space.net>
To: Aijun Wang <wangaijun@tsinghua.org.cn>
Cc: 'Robert Raszuk' <robert@raszuk.net>, 'idr' <idr@ietf.org>, 'Keyur Patel' <keyur@arrcus.com>, 'John E Drake' <jdrake=40juniper.net@dmarc.ietf.org>, wangw36@chinatelecom.cn, "'UTTARO, JAMES'" <ju1738@att.com>
Message-ID: <20200810092841.GA2485@Space.Net>
References: <CAOj+MME=-sC30LSEi9sdMZAwN-iWi-ATR7oT0n_4KeG5-o98ZQ@mail.gmail.com> <00ae01d66c58$de4da280$9ae8e780$@tsinghua.org.cn> <CAOj+MMH47cvi4YZCrgb_tDt6ttaL7M9_TS6fdFAX6GvFxs6LGA@mail.gmail.com> <DM5PR05MB3388C9D4EC80F129F67D6934C7490@DM5PR05MB3388.namprd05.prod.outlook.com> <CABNhwV0x2Nscniw0=pdUBinWmstv8MyyqKVy9evKnSNG2zeL6Q@mail.gmail.com> <67ef32c7d3aa43419382f9398ce1dc69@att.com> <CABNhwV2iTr6P7OwDYk5oLVfrA7Zt-j3WtHSdLF4T6gHoZJ3V1g@mail.gmail.com> <009201d66eb9$cad23ff0$6076bfd0$@tsinghua.org.cn> <CAOj+MMEufX1fjFk_R19=t2P7+49oJtYQH2rVB95U70KqxLwgqg@mail.gmail.com> <003701d66ef7$6d79bac0$486d3040$@tsinghua.org.cn>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <003701d66ef7$6d79bac0$486d3040$@tsinghua.org.cn>
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/7K1TN5IrGj__IGLNpSWQTAomOho>
Subject: Re: [Idr] [Responses for the comments during the IETF108] New Version Notification for draft-wang-idr-rd-orf-01.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Aug 2020 09:28:56 -0000

Hi,

On Mon, Aug 10, 2020 at 05:20:02PM +0800, Aijun Wang wrote:
> ???Prefix Limit??? mechanism can only protect the edge between PE-CE, can???t be deployed within PE that peered via RR.  We should not rely solely on the edge protection.

You must have proper edge protection in place.

If you do not have this, everything else is bandaid at best, and dangerous
at worst.

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279