Re: [Idr] I-D Action: draft-ietf-idr-error-handling-03.txt

Jakob Heitz <jakob.heitz@ericsson.com> Sat, 08 December 2012 16:43 UTC

Return-Path: <jakob.heitz@ericsson.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07C4B21F861F for <idr@ietfa.amsl.com>; Sat, 8 Dec 2012 08:43:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level:
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pUQcDKNb6064 for <idr@ietfa.amsl.com>; Sat, 8 Dec 2012 08:43:06 -0800 (PST)
Received: from imr3.ericy.com (imr3.ericy.com [198.24.6.13]) by ietfa.amsl.com (Postfix) with ESMTP id 3476C21F85E7 for <idr@ietf.org>; Sat, 8 Dec 2012 08:43:06 -0800 (PST)
Received: from eusaamw0711.eamcs.ericsson.se ([147.117.20.178]) by imr3.ericy.com (8.13.8/8.13.8) with ESMTP id qB8Gh34X026336 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Sat, 8 Dec 2012 10:43:04 -0600
Received: from EUSAAHC001.ericsson.se (147.117.188.75) by eusaamw0711.eamcs.ericsson.se (147.117.20.178) with Microsoft SMTP Server (TLS) id 8.3.279.1; Sat, 8 Dec 2012 11:43:03 -0500
Received: from EUSAAMB109.ericsson.se ([147.117.188.126]) by EUSAAHC001.ericsson.se ([147.117.188.75]) with mapi id 14.02.0318.001; Sat, 8 Dec 2012 11:43:03 -0500
From: Jakob Heitz <jakob.heitz@ericsson.com>
To: Chris Hall <chris.hall@highwayman.com>
Thread-Topic: [Idr] I-D Action: draft-ietf-idr-error-handling-03.txt
Thread-Index: AQHNyBxqy9fEwUYlVUSnx1DosT0Aspf0/iwAgBcupYCAADNcgP//yMCqgAGK/gCAAJrggIAA4PUAgAAGNdw=
Date: Sat, 08 Dec 2012 16:43:02 +0000
Message-ID: <9474D8DC-30FF-4C52-9504-15CBCC47E7D8@ericsson.com>
References: <20121121191321.6164.6887.idtracker@ietfa.amsl.com> <50AD2986.90705@cisco.com> <058b01cdd3b4$9f5193b0$ddf4bb10$@highwayman.com> <8ED5B0B0F5B4854A912480C1521F973A0F4940@xmb-rcd-x13.cisco.com> <94913EE5-2864-4EE2-B474-9631430B1E22@ericsson.com> <068701cdd478$2cf01cf0$86d056d0$@highwayman.com> <CAEGVVtBy-zdLz8hVajLnuAqgzfgQHrseK4r-N9=pOZGtqV7LbA@mail.gmail.com>, <074d01cdd536$173f5830$45be0890$@highwayman.com>
In-Reply-To: <074d01cdd536$173f5830$45be0890$@highwayman.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "idr@ietf.org" <idr@ietf.org>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-error-handling-03.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/idr>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 08 Dec 2012 16:43:07 -0000

The goal of "treat as withdraw" is not to reinterpret a broken update message and continue the session, like nothing happened.

IMO, the goal is to limit the disruption caused by a session reset, while alerting a human to fix the problem that no machine can.

--
Jakob Heitz.


On Dec 8, 2012, at 3:21 AM, "Chris Hall" <chris.hall@highwayman.com> wrote:

> Shyam Sethuram wrote (on Fri 07-Dec-2012 at 21:56 +0000):
> ...
>> One attribute follows another. There's really no way to tell
>> what pairs of octets are really acceptable as Flags and Type.
>  
> Currently, for both known and unknown Types there are some (small)
> restrictions on the Flags, and repeat Types are invalid.  However
> strong these cross-checks are, the draft relaxes them.
> 
> For known Types there are known restrictions on the length.  The draft
> relaxes all those cross-checks too.
> 
> ...
>> You can reset the session at this point if you haven't come
>> across MP_REACH so far and know that IPv4 NLRI length is 0.
>  
> Indeed.  If you have a messed up set of attributes and no NLRI in your
> hands, then it's fair to assume that some NLRI have been lost, so
> session-reset is the only way forward.
> 
> This is one of the few unambiguous cases.
> 
> ...
>> IMO, MP_UNREACH_NLRI does not enter the picture here. The
>> test for NLRI presence for the scenario you described is
>> limited to plain IPv4 NLRI and/or MP_REACH_NLRI.
>  
> I suggest that failing to withdraw some routes is worse than failing
> to install or update the attributes of some routes.
> 
> Suppose an MP_UNREACH_NLRI was sent, but is obscured by some broken
> attribute.  If the code takes the view that MP_UNREACH_NLRI do not
> matter, then routes which the sender knows should not be used, may
> continue to be installed and advertised by the receiver -- and may
> stay that way "forever".
> 
> Conversely, with an MP_REACH_NLRI the receiver may (a) not install a
> new route (which is effectively "treat-as-withdraw"), or (b) not
> update an existing route (which is bad, but may not actually matter).
> 
> Chris
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr