Re: [Idr] Choice of Large vs. Extended Community for Route Leaks Solution

"Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov> Thu, 01 April 2021 20:13 UTC

Return-Path: <kotikalapudi.sriram@nist.gov>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B24073A21C1; Thu, 1 Apr 2021 13:13:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.103
X-Spam-Level:
X-Spam-Status: No, score=-2.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ss5R6TyPpfkB; Thu, 1 Apr 2021 13:13:36 -0700 (PDT)
Received: from GCC02-DM3-obe.outbound.protection.outlook.com (mail-dm3gcc02on2127.outbound.protection.outlook.com [40.107.91.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A22A73A21C0; Thu, 1 Apr 2021 13:13:36 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VVcUD9PPuaUO+0zy4OWenQi9yA4SS0GSIOaX5ixzzx6KctsnecLB210PIeWaPNOXgbZSZChhYVsS3TN6wkTu1Im+UnMWMD6EhE4qaWYeBMYvn3w//FSspdnDq2mwfuk+vXiZIFdbKPUIReuQB1AiFJEKi3S+Hvk9YFgknEKhZ7VqN+godcZRa1bl7umuCMotkggqyqMmD6rolMJPaqz3LJpZNNHMpvGlNBLyyOjwuqTyC/gkpCcZ9K5FugjN6AvEgRhFbTrgd4bB6iGkTXDq0Xa6RGNej7k6VvToaKTCMlH1IPux3EsyWr9KrZxGHPkrMCuWLUDP1OljFduiOwDbXQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hWAOPJhUeaGF06DRHgVYnuOA4FJE10B92pPyxCnYyCs=; b=khar0yQKXGVHlhZJveD/3V7RAnsHHGX4k6eg4HCbulPzcZuas+3hgS7pHbyga//C6bNfFJ/ADDPnCMUVsJWCGw3Ps+p9tXhx+cZd3y9LsWHCxqNZzjLiGOgHKGQ0uqRYKF18d5kiVt/Za0vA2dPBxKNFDO9//QBCoFWjpnXOXwWUnybcIu3bysoGxnX6ThXRiq+JMJWSxF7ZaaMNsFnwZWfx0fb79JN9r9n6uwkpBmoRzq9LSd+IRUWGOiiTwRqp2PfUkvkjbE46EX86aGav9jVVGcfGGlzE3LYPlootxRb9w//wipTCsrWv7VUdAubhEcPfXXE3VeCi190cjAviXg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hWAOPJhUeaGF06DRHgVYnuOA4FJE10B92pPyxCnYyCs=; b=q49OdA/XKqBt6zBJ+cgTfmquF+6oZnowuZu290r5pzJqcXX4yfkQbTnmNzXiZhSKeiGjDGSs6vzcKHILw5XKCp02IjxccvjomiR8K5DobaoyTAUzW4gFxm7gGv6+lnmq/WZqLtywF7voX2x93QKI0xCVdzx2BMvyhLhhHBAraus=
Received: from SA1PR09MB8142.namprd09.prod.outlook.com (2603:10b6:806:171::8) by SA9PR09MB5984.namprd09.prod.outlook.com (2603:10b6:806:43::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3999.27; Thu, 1 Apr 2021 20:13:34 +0000
Received: from SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::54a1:82da:6cd9:a9b3]) by SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::54a1:82da:6cd9:a9b3%7]) with mapi id 15.20.3999.029; Thu, 1 Apr 2021 20:13:34 +0000
From: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>
To: Brian Dickson <brian.peter.dickson@gmail.com>
CC: Susan Hares <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>, "draft-heitz-idr-wklc@ietf.org" <draft-heitz-idr-wklc@ietf.org>, "grow@ietf.org" <grow@ietf.org>, "a.e.azimov@gmail.com" <a.e.azimov@gmail.com>
Thread-Topic: Choice of Large vs. Extended Community for Route Leaks Solution
Thread-Index: AQHXJjlK5mSz8dfqZEmidVsO6NqPaKqeqMUAgAFpqA4=
Date: Thu, 01 Apr 2021 20:13:33 +0000
Message-ID: <SA1PR09MB814297F9B9C36DA958E0D5D8847B9@SA1PR09MB8142.namprd09.prod.outlook.com>
References: <SA1PR09MB814269138AEE1567CEED703B847C9@SA1PR09MB8142.namprd09.prod.outlook.com>, <CAH1iCip6WaQFaBM2DAjf++vW3WTm_NHmXvLTgOhpTdpRdFKigg@mail.gmail.com>
In-Reply-To: <CAH1iCip6WaQFaBM2DAjf++vW3WTm_NHmXvLTgOhpTdpRdFKigg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=nist.gov;
x-originating-ip: [129.6.165.67]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 606b9739-aa8b-4d34-3b3d-08d8f54aa06e
x-ms-traffictypediagnostic: SA9PR09MB5984:
x-microsoft-antispam-prvs: <SA9PR09MB598486E63FD4A2E1587FA8CE847B9@SA9PR09MB5984.namprd09.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: vOGC5c6+ILPlqV9yhI4YKrc+Tw/2aaIMvbls18Bq5uVKCvBnkLwjQ6IhfRcapv7IP9mFZIOxhfcRA9vpIZGDjMaHcDpoXwqZzs+uIb3RdFAScLjU7WUooQl/QirhU23xsEWOBtMIyXL6tAchnKoEsf0ISKV9FMwL48wTRJHkAmpzq2UvSqNHQJRJN59rxR1OyXqyWb2ADYAjJCj6Vq9Ns5GvMuXLBazZcunBm6FYGbFeiDHg6n2PcHntfzxIhg31BhebaaYDLJwGlGmGW+goNTzmXJHOzSI06y78WicEuNFl+9xCyC+jIpUCNXMch0HwHr9ORHIBia4fQBQu2WmqUfVhSeRk6zhTGyfZsra1Zi3e/f7y6Nqa6JphcOP0bzjGS0cL1f5bUGmfXqXZ5ZkH0GE+dqbi+UY5aq0udHiXR/8atIXodJVESDq8B2jrKnWsWJpZLW2argywLXSz4PiYk8ruCI2FTR+H3PhJ04fQMEkUm+8CaaBBgvjg8iPvIHAdl+MXXPF220O9YAuWx14s1oBahfO0rg8UmevYH1T3ILqaJDC/s9IBjgPghF0dJGs2IaZtnfoncPzQXnbP+9GRM5vx2RnfeZIIgzA9owlIR7qbWrFotHop09OGN7USiwqxf0ZUK+E4tQv1EMPienxfP/VVWmYCgY6KnTOfB/mwJug=
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SA1PR09MB8142.namprd09.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(346002)(396003)(136003)(376002)(39860400002)(26005)(7696005)(2906002)(52536014)(9686003)(55016002)(8676002)(66446008)(64756008)(186003)(6506007)(86362001)(8936002)(478600001)(76116006)(66946007)(71200400001)(33656002)(4326008)(6916009)(38100700001)(54906003)(316002)(91956017)(66556008)(53546011)(5660300002)(66476007)(83380400001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata: 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
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SA1PR09MB8142.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 606b9739-aa8b-4d34-3b3d-08d8f54aa06e
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Apr 2021 20:13:33.9848 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA9PR09MB5984
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/EOwx73QgQTJGVj2Zl-_d-aTZQMQ>
Subject: Re: [Idr] Choice of Large vs. Extended Community for Route Leaks Solution
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Apr 2021 20:13:42 -0000

Brian,

>We would like to continue proceeding with use of a LC range for implementation, using a single (or small number) of Global Administrator values.

I should have clarified. I am not opposed to staying on course with a WKLC based solution. I only thought transitivity readily came with Transitive Extended Community. Your proposal about one or a very small number of WKLC GA values seems fine and it is consistent with Sue’s advice.  Please see my next post (in this thread) which is about transitivity measurements of EC and LC that should be helpful in this discussion.

Sriram 
________________________________________
From: Brian Dickson <brian.peter.dickson@gmail.com>
Sent: Wednesday, March 31, 2021 6:10 PM
To: Sriram, Kotikalapudi (Fed)
Cc: Susan Hares; idr@ietf.org; draft-heitz-idr-wklc@ietf.org; grow@ietf.org; a.e.azimov@gmail.com
Subject: Re: Choice of Large vs. Extended Community for Route Leaks Solution

On Wed, Mar 31, 2021 at 7:57 AM Sriram, Kotikalapudi (Fed) <kotikalapudi.sriram@nist.gov<mailto:kotikalapudi.sriram@nist.gov>> wrote:
Hi Sue,

Thanks for the detailed thoughts you have shared on the IDR list about the WKLC draft and route leaks solution draft (while also responding to Brian’s post).

At one point in the past, the route leaks solution needed 8 bytes of user data space to accommodate two ASNs but then there was a design change (more than a year ago) and the current draft [1] requires only 4 bytes of user data space (one ASN). So, it seems possible to use a Transitive Extended Community instead of WKLC.

We (authors of the WKLC draft) can continue working on creating an IANA WKLC registry for the future but I think the route leaks solution draft can switch to using Transitive Extended Community. Especially, if that could help expedite the route leaks draft and its deployment? I would like to seek advice regarding that (I'm cc'ing GROW also here).

[Brian] Sorry to argue in public, but I disagree very strongly on the second part here.

[Brian] We would like to continue proceeding with use of a LC range for implementation, using a single (or small number) of Global Administrator values.

[Brian] I think we should request that a small block of GAs surrounding the initial assignments be tentatively marked something like Reserved for IANA assignment.
That is different from actually establishing a registry or assigning them specifically for WKLCs, but would be compatible with subsequent WKLC work.

[Brian] The move to using LC values was precipitated by the observation that the path for getting attributes deployed would be very long, and that operators (actual network operators) are looking for a solution which can be deployed *now*.

[Brian] Nothing has changed in this regard; the WKLC draft is IMHO still the right path, and only the size of the initial allocation is problematic.

[Brian] Having 1-4 GA values (from the 32-bit range of potential values) is not burdensome IMNSHO, and is a lot less of a concern than the 1/64 (or 1/16) of the range of 32-bit ASNs originally requested/suggested.

[Brian] If we can all agree that 1-4 GA values assigned for this is acceptable, I suggest a revised version of the draft and assessment of consensus on the revised draft for adoption and last call.

[Brian] LC is the ONLY viable path, given the nebulous state of implementation and use for EC/WC or attributes. LC is already deployed, and assigning a few GAs by IDR is the only roadblock to the draft in GROW getting approved.

Brian