Re: [Idr] WGLC on draft-ietf-idr-as-private-reservation-00

Nick Hilliard <nick@foobar.org> Wed, 12 December 2012 22:22 UTC

Return-Path: <nick@foobar.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 903FA21E8054 for <idr@ietfa.amsl.com>; Wed, 12 Dec 2012 14:22:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zj81zQkDJ3Cm for <idr@ietfa.amsl.com>; Wed, 12 Dec 2012 14:22:32 -0800 (PST)
Received: from mail.acquirer.com (mail.netability.ie [IPv6:2a03:8900:0:100::5]) by ietfa.amsl.com (Postfix) with ESMTP id 0342821E8044 for <idr@ietf.org>; Wed, 12 Dec 2012 14:22:31 -0800 (PST)
X-Envelope-To: idr@ietf.org
Received: from cupcake.foobar.org ([IPv6:2001:4d68:2002:100:79d2:636d:2532:9d2f]) (authenticated bits=0) by mail.acquirer.com (8.14.4/8.14.4) with ESMTP id qBCMKofc051022 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Wed, 12 Dec 2012 22:20:57 GMT (envelope-from nick@foobar.org)
Message-ID: <50C9039E.1050104@foobar.org>
Date: Wed, 12 Dec 2012 22:22:22 +0000
From: Nick Hilliard <nick@foobar.org>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/17.0 Thunderbird/17.0
MIME-Version: 1.0
To: David Farmer <farmer@umn.edu>
References: <CA+b+ERnuWZ+r2O-eFhe3hU00uoU4UKnRcbhLNVXU7p5+DjoWbQ@mail.gmail.com> <C6C16AE3B7961044B04A1BCEC6E2F93603D12A0C@xmb-rcd-x14.cisco.com> <20121210225858.GC24937@puck.nether.net> <m2d2yh32cw.wl%randy@psg.com> <CA+b+ERnSVvewSpftXs3FhW12-S+sgnB1SwD4L+xqFW+hhbQayw@mail.gmail.com> <7120600D-71BD-4E61-8F06-25B7C2BAE6A8@riw.us> <20121211185917.GA21813@puck.nether.net> <CA+b+ERnzo2BLWjE1J_dMfYuExbG9WYJroPE4ZAWg++KK2_jy1g@mail.gmail.com> <CA+b+ERm=Agr7b6JXcXOwiP4wBjnEFmnVNt5fAJrn18R0hGtSzg@mail.gmail.com> <50C78C29.3070406@foobar.org> <50C8B8D9.4090903@umn.edu>
In-Reply-To: <50C8B8D9.4090903@umn.edu>
X-Enigmail-Version: 1.4.6
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: IETF IDR Working Group <idr@ietf.org>
Subject: Re: [Idr] WGLC on draft-ietf-idr-as-private-reservation-00
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/idr>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Dec 2012 22:22:33 -0000

On 12/12/2012 17:03, David Farmer wrote:
> Come on guys,
> 
> I think the proposed range is more than reasonable, 4,278,190,080 to
> 4,294,967,294. Yes, the start and end of the range are not really that
> human or decimal friendly. 
>
> And, if some how that isn't enough, you can pickup another 5 million
> ASNs with two other adjacent ranges that are only a little less human
> and decimal friendly, 4,279,000,000 to 4,279,999,999 and
> 4,290,000,000,000 to 4,294,999,9999.
> 
> Something more than 16 million ASNs is way more than enough, reserving
> 300 million or more ASNs, just to start the range at the 4 billion point
> is just crazy.

this isn't about what particular subset you could choose to use from this
allocation, and I honestly don't care about the size of the proposed
allocation as long as it's large enough to deal with really pathological
lab cases.  It's about vendors and operators and everyone else tending to
align their choice of private ASN to the boundary of the formal allocation
range, because that's what people naturally do when presented with a big
pile of numbers: they select the first in the range, or maybe the last.
It's also about making the entire range visually easy for operators to
handle so that private ASNs are immediately identifiable as such.  As a
side effect, this will make it much easier to write regexps to handle these
ASN ranges, because the tools we have for mucking around with AS paths tend
to involve RE engines.

It would be operationally more sensible to use a much lower range and
suffer fewer ASNs as a result.  This is because operational people like me
routinely need to visually inspect ASNs in as-paths, and it's a whole lot
easier to distinguish between a 5- or 6-digit numbers than 10 digit numbers.

If the draft ends up with 10 digit private ASNs, operational people will
end up with with a whole pile of "wtf were they _thinking_?" and hair
pulling, as they try to figure out whether they've just typed eight 0s or
nine, or made a mistake in position 4, 5 or 6.  We're human, not machines
and things like this make a difference.

As a side issue, we actually don't really need 2^24 private ASNs,
regardless of how complicated anyone's lab network is, but that is a less
important issue.

I'd like to formally propose a smaller range, decimal aligned, from a lower
starting point.  There are several large blocks free in various areas of
the IANA pool, any of which might be suitable for an allocation for private
use:

www.iana.org/assignments/as-numbers/

>From a subjective point of view, I take this position:

Bit-aligned 4278190080 to 4294967294:

	pros:
	- out of the way of RIR assignments

	cons:
	- impossible to recognise visually in operational context
	- the bounding regexp is ridiculous
	- the numbers are large enough that they will attract typos
	- complete mouthful and impossible to transmit down e.g. phone, across the
room, etc (yes, we shout ASNs across the room, and sometimes even talk to
customers).

Low, decimal-aligned range:

	pros:
	- immediately identifiable as private in operational context
	- out of the way of RIR assignments
	- trivial bounding regexp
	- smaller numbers mean fewer typos

	cons:
	- ?

900000 to 999999 would work fine for me.  I'd be even happier with
90000-99999.  In fact I'd be really pleased with the lower range because I
can relate to 5 digit numbers even more easily than 6 digit numbers - but
perhaps 10k private ASNs may not be enough for crazy large lab models.

> Get over it. 

What we need to get over is this idea that bit alignment is relevant to
asn allocation policy.  It simply isn't.

This is an operational draft.  Please let's request a range which works
well for operators.

Nick