Re: [Idr] comments on draft-ietf-idr-rs-bfd

Nick Hilliard <nick@foobar.org> Tue, 01 August 2017 21:14 UTC

Return-Path: <nick@foobar.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98990127735 for <idr@ietfa.amsl.com>; Tue, 1 Aug 2017 14:14:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JA2q5jF8Ob7r for <idr@ietfa.amsl.com>; Tue, 1 Aug 2017 14:14:37 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E8A91124217 for <idr@ietf.org>; Tue, 1 Aug 2017 14:14:36 -0700 (PDT)
X-Envelope-To: idr@ietf.org
Received: from crumpet.local (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id v71LEXWY042537 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 1 Aug 2017 22:14:34 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.local
Message-ID: <5980EF38.8030500@foobar.org>
Date: Tue, 01 Aug 2017 22:14:32 +0100
From: Nick Hilliard <nick@foobar.org>
User-Agent: Postbox 5.0.16 (Macintosh/20170718)
MIME-Version: 1.0
To: Jeffrey Haas <jhaas@pfrc.org>
CC: IETF IDR Working Group <idr@ietf.org>
References: <59807D1E.4050807@foobar.org> <20170801171954.GF24942@pfrc.org>
In-Reply-To: <20170801171954.GF24942@pfrc.org>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/8MFvkUrNW9nNBHW41_PhSy86X4I>
Subject: Re: [Idr] comments on draft-ietf-idr-rs-bfd
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Aug 2017 21:14:38 -0000

Jeffrey Haas wrote:
> On Tue, Aug 01, 2017 at 02:07:42PM +0100, Nick Hilliard wrote:
>> It's unnecessary because if there is a mechanism available to broker bfd
>> sessions between rsclients, then this allows each rsclient to make their
>> own decision about whether they want to use this and make their own
>> decisions about NH reachability.  If this is in place, the RS doesn't
>> need to augment this information because the client has all the tools
>> they need to be able to do this.
> 
> In the absence of multiple paths from the RS, the only choice the client
> gets to make is use/don't use.

that's an acceptable compromise.  IXPs provide alternative / nearer
paths, but never the only path.  Add-path is orthogonal to this problem:
 it would be a useful addition for providing alternatives, but the
nature of IXPs is such that it's not necessary.

>> - it puts the ixp in the position of making pronouncements about the
>> reachability of its rsclient base.  From a layer 9 point of view, it
>> could be argued that there might be liability problems if it gets this
>> wrong due to e.g. poisoned / late / incorrect data from rsclients.
> 
> Vs. announce stuff that is blackholing?  Recall we're having this
> conversation for a reason.

this is a policy / optics point: the difference between the two things
is that a baseline RS announces a NH without making any pronouncement
about the NH's reachability. draft-ietf-idr-rs-bfd is making a statement
about the NH's reachability, but based on heuristics which we know will
not take into account all failure modes of an IXP fabric, particularly
some of the more common ones (i.e. partial reachability).

The baseline RS performance will not perform as well from a technical
point of view.

The draft-ietf-idr-rs-bfd could potentially open the IXP operator up to
service loss liability if a statement is made about NH reachability
which is not true from the point of view of any pair of RS clients.

[...]

> It's not clear what you're suggesting.

see my earlier reply to Gert.

Nick