Re: [Idr] [GROW] draft-snijders-idr-shutdown-00: Drop a line in the peer's syslog at shutdown

"Neil J. McRae" <neil@domino.org> Sat, 19 November 2016 20:26 UTC

Return-Path: <neil@domino.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3C63129493; Sat, 19 Nov 2016 12:26:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.922
X-Spam-Level:
X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=domino.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vZp89vWHGw0R; Sat, 19 Nov 2016 12:26:30 -0800 (PST)
Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40120.outbound.protection.outlook.com [40.107.4.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 349A0129444; Sat, 19 Nov 2016 12:26:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=domino.onmicrosoft.com; s=selector1-domino-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=HtnS7BaCX6RQNNosc/tf66K01B6Tlp3qR2yUkC5enNA=; b=nB1D3cxAvw5QuLs4ILBUGNvcd7zgikNKKqL5MdMxOnBPX8QuF0Y2VG1yDBl41T7QRi7xL1NAn9CZP7uaT6HBxZiC7Hc4wmdlamlh+kdMda8HlG8l+4At1U0kQlSNg1ul4SUsmXrxvzci39BuzaQ50BdnFLNoxtiluGneKIwre5Y=
Received: from AM4PR03MB1425.eurprd03.prod.outlook.com (10.164.77.155) by AM4PR03MB1427.eurprd03.prod.outlook.com (10.164.77.157) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.721.10; Sat, 19 Nov 2016 20:26:26 +0000
Received: from AM4PR03MB1425.eurprd03.prod.outlook.com ([10.164.77.155]) by AM4PR03MB1425.eurprd03.prod.outlook.com ([10.164.77.155]) with mapi id 15.01.0721.017; Sat, 19 Nov 2016 20:26:25 +0000
From: "Neil J. McRae" <neil@domino.org>
To: Job Snijders <job@ntt.net>
Thread-Topic: [Idr] [GROW] draft-snijders-idr-shutdown-00: Drop a line in the peer's syslog at shutdown
Thread-Index: AQHSQpz7gCGRQsDpy0e2Wz93nHcpRqDgwSzZ
Date: Sat, 19 Nov 2016 20:26:25 +0000
Message-ID: <87DDAB88-78AC-431A-ABE7-55249BF5D654@domino.org>
References: <FBD63625-3E82-44AC-9318-D6B6DFE86082@domino.org> <CAO367rVSyeBcJnt8yogV27POyS3VwWGCqgmD3ex79dUPN-Misg@mail.gmail.com> <CA+b+ER=EFuQ8L_A4VtdzWna4ZNM-rhPo8gXURaN2s3WAykrL+w@mail.gmail.com> <CAO367rX9gBfNHgqmy0NqiNMGkjzLRATj6PdiDYk_M1fAQx5s8g@mail.gmail.com> <CA+b+ERkMsCGhyHsttjq0Pout0vrAvGQ6F+HaTxr8=78YMeRFOA@mail.gmail.com> <58306620.4000308@foobar.org> <319AD952-C571-4085-8D56-C06A51F021E3@domino.org> <CA+b+ERnQ8FQXxJ6No6GUr9mdp7APRkULqsGbKf5bAigp34TvmQ@mail.gmail.com> <CAO367rW_TuXsMNJBanAc2gL66TW8s4p2u5zDKfHER5rb1rk7-Q@mail.gmail.com> <058F756D-3A68-4AA6-A9DC-63A1BF9A5184@domino.org>, <20161119194138.GG47336@dhcp-9d92.meeting.ietf.org>
In-Reply-To: <20161119194138.GG47336@dhcp-9d92.meeting.ietf.org>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=neil@domino.org;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [188.29.164.72]
x-microsoft-exchange-diagnostics: 1; AM4PR03MB1427; 7:SGslck59Qs+gIydbNEpQgG3dSMs/tDNgYFBQfZ9bi5sH/5SGeCXEZ5Gqs5FbsKjWL2pQIBI11fom7xjy4ymHkPHhokQVnIYuikWQf1hlcs0Dmrr7LOd3u0Y8ZE/SceJ/4Psd4ESUy1/VdJnZ7ohIj9k9BcmQdrtG124TPYvlosnTct3DMhr/51I4Do8um9Spq2+w3QKd8h4xaTxBfNBzBsW7AUzez/6gmuYC2wS8Gr1iLdFk/eaXm32BZgy+P5QDeH4S2Bt8xAIKIxAyFFXFp2wyWyFmcVt0SCCfuqFcoAqVMIb7GihuXqCERu82r4VLWos3EMTPcOFrjiDzpJJLcEEM7BnLVuwfOR3fa8pZT7U=
x-ms-office365-filtering-correlation-id: c1fed6ea-e1f8-4b83-fe9e-08d410ba5600
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:AM4PR03MB1427;
x-microsoft-antispam-prvs: <AM4PR03MB14279F04C8920F3EBF70D7BFAEB30@AM4PR03MB1427.eurprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6060326)(6040307)(6045199)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6041248)(6061324)(2016111802025)(6043046); SRVR:AM4PR03MB1427; BCL:0; PCL:0; RULEID:; SRVR:AM4PR03MB1427;
x-forefront-prvs: 0131D22242
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(24454002)(189002)(199003)(6916009)(2950100002)(4326007)(2906002)(3280700002)(110136003)(3660700001)(122556002)(102836003)(6116002)(3846002)(97736004)(106116001)(305945005)(7846002)(7736002)(5660300001)(36756003)(189998001)(106356001)(105586002)(8676002)(33656002)(76176999)(54356999)(101416001)(50986999)(229853002)(83716003)(77096005)(81156014)(66066001)(6506003)(87936001)(8936002)(81166006)(82746002)(6512003)(38730400001)(68736007)(230783001)(93886004)(86362001)(2900100001)(92566002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:AM4PR03MB1427; H:AM4PR03MB1425.eurprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:0; LANG:en;
received-spf: None (protection.outlook.com: domino.org does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: domino.org
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2016 20:26:25.7999 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 398f3eb4-3394-48e7-885c-de1ab2a9cf2e
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR03MB1427
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Cfa-OXJbAjFW-CdNzQ0cnvs5Rec>
Cc: "idr@ietf.org" <idr@ietf.org>, "grow@ietf.org" <grow@ietf.org>
Subject: Re: [Idr] [GROW] draft-snijders-idr-shutdown-00: Drop a line in the peer's syslog at shutdown
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 19 Nov 2016 20:26:33 -0000

I just wish I thought we had the luxury of lazy operations like this!

Neil 

> On 19 Nov 2016, at 19:41, Job Snijders <job@ntt.net> wrote:
> 
>> On Sat, Nov 19, 2016 at 05:23:15PM +0000, Neil J. McRae wrote:
>> It's a wonderfully useless solution when it could be a wonderfully
>> useful solution - it's just more  operational noise that we already
>> have and we will start filtering like everything else. 
> 
> What's really useless is hyperbole argumentation. :-) Don't forget to
> recognise that your network operations might differ from how other
> people operate their network.
> 
> A common pattern:
> 
>    supplier: "2 weeks from now at 18:00 UTC we will do maintenance XYZ on router ABC, this work is tracked in V-NOC-24789244"
>    *two weeks pass*
>    *supplier starts the work*
>    *customer sees BGP session with router ABC go down*
>    customer calls supplier's NOC: "hey my session is down, whats up!?"
> 
> If in the above scenario the customer had seen "V-NOC-24789244 maintenace started" in their syslog (where they started their
> investigation), the customer would search for the V-NOC-24789244 string
> in their mailbox and all details would become clear. I think this is
> useful and a good starting point.
> 
> I suspect that where Neil is coming from, the customer would have
> already parsed the maintenance notification 2 weeks before the
> maintenance work, and added that to their organisational-wide calendar,
> pre-silenced alerts, drained the traffic away, etc.
> 
> The "shutdown" draft is not a replacement for efforts such as
> https://www.maintenancemanager.org/ - but maybe, when "shutdown" is more
> ubiquitously available, it could be a component in such maintenance
> manager toolchains.
> 
> Maybe in 2 or 3 years time we'll revisit the topic and based on that
> operational experience define a taxonomy and create a structured
> approach. Maybe the structured approach will be entirely out-of-band
> (companies posting yang to each others' maintenance API endpoints?).  I
> think the free form approach is an excellent starting point to see (and
> immediately benefit) how a tool like this is used in the wild.
> 
> Kind regards,
> 
> Job
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr