[Idr] Re: AD review of draft-ietf-idr-deprecate-as-set-confed-set-16

"Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov> Sat, 01 February 2025 20:15 UTC

Return-Path: <kotikalapudi.sriram@nist.gov>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFC3AC14F6B4; Sat, 1 Feb 2025 12:15:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.705
X-Spam-Level:
X-Spam-Status: No, score=-2.705 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.148, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.453, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=nist.gov
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12YNPjIWJa_x; Sat, 1 Feb 2025 12:15:36 -0800 (PST)
Received: from SA9PR09CU002.outbound.protection.outlook.com (mail-southcentralusazon11010070.outbound.protection.outlook.com [40.93.193.70]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EEEF3C151525; Sat, 1 Feb 2025 12:15:35 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=S/CDeHIUmx3PlcJ2kkWICyNxSiuSsQmaF3uwjkhw62h3p8PcveVMXK90sz7gXp9WpB5D4OmmZtn6EucyiBQj6z+GC8HcC7QH0OLcfbj6UqtjdwN8WQE//YR6T1/s20pa1olwZdbkIDVufVzm0sHQiaE1UK4O/bJ+IkK8NRI4ZsF/q9r87SahRT8mqqkBph1KE2gHXlkBsLnYNyXnsXEPJkKsTNqaU+pMSUHyq6H8RFlgWDxAE2yTmpl4wMi4tFGqVc3Lc2VektArqL+O/onRhoiXunL7SUHGvGmnYzFGtpPqdqPrT+UQbq6HE7I5AE4RLiZQpgDBbVfAReWDMDM56g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=XZ5M3Ql/3BIIeUj484RaULMRQ3d1s3fwyA1g/uQ2OSM=; b=uqIckRFzwaQf+AxA5o2beTJf8JhsjWI5wyNDPkEa613Xqki9QJaMQj34YtIDJMa0VgJfNJOyxNAopDj3IweG+FPEG+NliIy/b2+MfugvlhCVErr/km8fCVs6/e9RWv2KKfkQdXoTYnH8IECs/Ua3iP94LbP0g191CZhnVO5sjkuSLW/AcJpL2a0wf5gU9Uwf6QRD2e1on6e2UtkTDp/iD/kQY7tGMsZ4l3b6qGUBMcG+xXtyTJpQ/TXTrt50AHLDdIuB75qxW+g1DJrvNBgbT8lnBZV7ux/VqRodn8qE7MciIoU898HsEBZMU36g7JxNOqffSofLAducX55W1v2cpQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XZ5M3Ql/3BIIeUj484RaULMRQ3d1s3fwyA1g/uQ2OSM=; b=ZyebBjbsJnSYoZJglH+jhKOQyP9gjpafbNrJvAEms0NrwYcBq6kzAAD5YHm0r72adoj07HVkzakR20QJgzzujOAxyqhA01JlON+aNktQuYIFZGVYH6JF6VIXsrcPkhCRnpVOHQJyEajLtsDHSWJ/E0DRYxnSObe5kJ18szPjzloWjo5lUYROUg9qUOmBaA3LY4x3j9cZsStA691Pw1qIoisNo6RGONXZlqONlSK1iGHhe7jXCCxMjt+H/baM8cy6txN7t4TgkP+XiWw46hSsucyMjXhInN/OKElr1ICksa5BCQvj3Vq7RCsUvoVBalOvqUfqFLPCdwGF7k/3Oh+6Fg==
Received: from DS0PR09MB10598.namprd09.prod.outlook.com (2603:10b6:8:169::7) by PH8PR09MB9936.namprd09.prod.outlook.com (2603:10b6:510:182::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8398.23; Sat, 1 Feb 2025 20:15:31 +0000
Received: from DS0PR09MB10598.namprd09.prod.outlook.com ([fe80::843d:aa72:17f6:c549]) by DS0PR09MB10598.namprd09.prod.outlook.com ([fe80::843d:aa72:17f6:c549%7]) with mapi id 15.20.8398.021; Sat, 1 Feb 2025 20:15:31 +0000
From: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>
To: John Scudder <jgs@juniper.net>, "draft-ietf-idr-deprecate-as-set-confed-set@ietf.org" <draft-ietf-idr-deprecate-as-set-confed-set@ietf.org>
Thread-Topic: AD review of draft-ietf-idr-deprecate-as-set-confed-set-16
Thread-Index: AQHbdCjZXpetznAV0Um2bbjsVZ93qLMyz7rw
Date: Sat, 01 Feb 2025 20:15:31 +0000
Message-ID: <DS0PR09MB1059855CA967EA657615A2B8584EB2@DS0PR09MB10598.namprd09.prod.outlook.com>
References: <F5106B13-CF72-4019-AB98-0AEE13C675EC@juniper.net>
In-Reply-To: <F5106B13-CF72-4019-AB98-0AEE13C675EC@juniper.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nist.gov;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DS0PR09MB10598:EE_|PH8PR09MB9936:EE_
x-ms-office365-filtering-correlation-id: 6ea3b194-0aa6-41c9-2066-08dd42fd2d71
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|1800799024|38070700018;
x-microsoft-antispam-message-info: NJh/mcu+e/rP6o05vnzHekVbWO+3BMk2nuSoePq02NXaa/UNxSz4EE4uEPaxFb3jugXPIy2eovkS7pflqccjqacH6FVZw6dXRXxUAypg4wUpxo5Z9oBkgLQcUEKVUxslOIVfgLtwOmF6PkWMCdOT9e+RZOJdIwfZ51Xern1XF431mhf/M2u3g9p0yleIoqSRUcHZ6tXCYjVWjgpW1frPXTx4G7ojJhYLtaKZymK8ew4NgCStRBc15/HLCiNgkO0t1BUCvd6SC53f6PzWj3RHfxNIPuE9Bih5JJm1J6in1UdnAeabE8f9al8/12tiqtrxnn5NEl3Lqq8w5JncF3c5jZVi1UdqaMbJQ1D4xMABwvDSD/NmdAHNKlyCJ5D5WdAH9K2FBJBv/6XWspmfKD5LfXbqHeIh+xePBsG+SDYPsEE2F3AW+2Lax6/GvBqbURPGEdumJ0DB42bBc0eIoa3jJCCJSCfNY2pJUKvuWvgcRJDa6/g79jOgF+VNGlkiZbiNr62D8ROKmaSa1JhmJGu+6c3XobJkS18NDCDGPdXXQd1ugDsPv0HfxH5RpRXz28TruiZWZHSRQyHvcWzsY9DU4xsIwBzV0RzzDrllNS5iX0BGhV9zROmIBw+hvtAacCDZF1qcX+fdwymf9jNCbLOjBiI68U01Q/NZmhCD7amOaYhgGJzfp0JnbNT/EoXyIdTUO0xnIawqD/XlBCdu/1Ya8GTbeBqhBc8plm3WOdaV9NV7o5QAYEodZCbZLn1DQZ1wEb9n9a+JyUASpDpCemjQ6th0x9YsC+yWxpL8y/Ew9jT1powzXNqD1Jl/ijJGoY1tlxuyRtYCMYoLppaNoLuUnz7QyF2aOJL0VGsUKzFsv+IfU+8xcH4WkYGmgdt+hSksgOPAskUvircOLv8RTUMv6zMlhGPVud5XYcn7rVkOxGmiGIo1YisUlcR1ey8NjBKsVzHUhAH9Cxbif3zUEke/UgmVRQnp7dwqX+kTruKdp0w08Xpzv6KZFudFN6PDcTs8iFjsy4I2cBAzXSBoJGRVEbCzRudOe3Mui6AhmQtHGkTLAbxHhRwqxGQd57AxOI60Jj4Ky9MvakrmbFg+KIN3iaR1BItGn69d26DSS6m3TGHV+NPO+wQnqcZ5djFUnEUYXvr0W8p4hRLuYJqFzDn+EGXtQqYldAZTcs3qMme1eRvB7duniOX7S0BAdexuSE1owravySsxVkziKnK/U7VU9uB5cTXh8l/mSedpQwM+xRMk/2oEtNCXM4DNS/AG97o2gz5YTN2FBplGRMeocsmEXRHjl+pJcw/DL4BMR+vuyUv88NJORuFanlRqXI6mx7R+KdUQiFGmIJlmlLrNN8tYMByhYojEuzpV0pXfHBGBYAbwpfSJBU3crPsuaouICeu8O+4gN2ybbqXLI1cCh/xHog64IdF10tOFoEKK5zIImYXpV/43znQpkmq0Aehu0KuI
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DS0PR09MB10598.namprd09.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DS0PR09MB10598.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6ea3b194-0aa6-41c9-2066-08dd42fd2d71
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Feb 2025 20:15:31.2573 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR09MB9936
Message-ID-Hash: LA2TFYMMTS75NBUF6QJC3WCWN337OEPR
X-Message-ID-Hash: LA2TFYMMTS75NBUF6QJC3WCWN337OEPR
X-MailFrom: kotikalapudi.sriram@nist.gov
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-idr.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "idr@ietf.org" <idr@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Idr] Re: AD review of draft-ietf-idr-deprecate-as-set-confed-set-16
List-Id: Inter-Domain Routing <idr.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/9Q544uXiMRCHXaGU4ZA-xu4G7OI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Owner: <mailto:idr-owner@ietf.org>
List-Post: <mailto:idr@ietf.org>
List-Subscribe: <mailto:idr-join@ietf.org>
List-Unsubscribe: <mailto:idr-leave@ietf.org>

Hi John, Warren:

Warren: Thank you. You took care of most of John's comments correctly. I differ a little on two of the points as explained below. 

[JS:] >### Section 6.2

[JS:] >I get why this is a good practice. I don’t get why it’s a mandatory practice, given that as you point out in Section 6.3, there is supposed to be a discard route covering the aggregate anyway. Would it make sense to change the MUST in this section to SHOULD?

I feel that "MUST" and "MUST NOT" in Section 6.2 can be left as they are.  The reason is as follows.  Section 6.2 and Section 6.3 are talking about different things with different goals (though within the aggregation context).  Suppose AS 3 is aggregating p1/24 and p2/24 contributed by customers AS 1 and AS 2, respectively, along with p3/23 that AS A owns but *does not currently utilize*. Thereby it forms an aggregate q/22 (= p1/24 + p2/24 + p3/23).  Section 6.2 is requiring not announcing q/22 to AS 1 or AS 2 but announcing p2/24 to AS 1 and p1/24 to AS 2. So, AS 1 will not route packets with destination in its own prefix p1/24 to AS A (in case AS 1 temporarily lost connection to its own subnet p1/24). Thus, data looping between AS 1 and AS A is prevented.  OTOH, Section 6.3 is reminding (as you say) about Rule #2 of Section 5.1 of [RFC4632]. In the current example, Rule #2 requires AS A to set "next hop" for the aggregate route q/22 to null destination (so any externally received packets destined to p3/23 are null routed).

John: With above explanation, do you feel it is OK to leave the MUST and MOST NOT as they are? I'm open to suggestions.

[JS:] ### Appendix C

[JS:] >In point 1, shouldn’t it be “one or more more-specific routes” and not “multiple more-specific routes”?

What we have in point 1 is an exact quote: 

1.  Rule #2 of Section 5.1 of [RFC4632]: A router that generates an aggregate route for multiple, more-specific routes must discard packets that match the aggregate route, but not any of the more-specific routes. In other words, the "next hop" for the aggregate route should be the null destination.

That is why we kept "multiple, more-specific routes" as is.  In any case, aggregation is performed on multiple more-specific routes (never on one route).  

Sriram