[Idr] draft-ymbk-idr-bgp-open-policy

Robert Raszuk <robert@raszuk.net> Sat, 19 November 2016 11:47 UTC

Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75935129683 for <idr@ietfa.amsl.com>; Sat, 19 Nov 2016 03:47:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.399
X-Spam-Level:
X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ieVv2KXGbP3K for <idr@ietfa.amsl.com>; Sat, 19 Nov 2016 03:46:59 -0800 (PST)
Received: from mail-qk0-x236.google.com (mail-qk0-x236.google.com [IPv6:2607:f8b0:400d:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 336B4129680 for <idr@ietf.org>; Sat, 19 Nov 2016 03:46:59 -0800 (PST)
Received: by mail-qk0-x236.google.com with SMTP id n21so297484005qka.3 for <idr@ietf.org>; Sat, 19 Nov 2016 03:46:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:from:date:message-id:subject:to; bh=6NvxzspWSltFnwTR0ULQiLjPyOtsd5nv7l/6kW4cCz4=; b=r4ohYLDXyxlWokK5AxV7Hu9eJn+Llu1j5K9bPn4BaxsrVNCib5pPWu4j1Ayw/kE4Qp xCra+vAfApRIdEVx6iviN3UJ9MK41pO7wyv5n3UJ78yRzYatzXDq9L2UI+9w5lSrBK03 koEU5V+KFDabcXSxjPbX3CcCmU+WmNPKXS9G76PjwZhMpB9+6byWsGBk/njnmyFC8VfT voAxIuDxcDx211nY/DKjyIoBtMTzTC7PJJmbV2S0npc5Q/403OHrO1XExqdOq1bS+Kp2 IKoL2uSZ7TNmrGjwCaotCXzrvwt0KWQwLMxkbsMolAZWtK2VMI7p5TLuq6P/ojBU4S2z upQQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:from:date:message-id:subject :to; bh=6NvxzspWSltFnwTR0ULQiLjPyOtsd5nv7l/6kW4cCz4=; b=fh2M/6Lly2GeTa91NKwyREPY89XQ63yDwa3NNYih37SdAWqf6bQWq3wGS/ER+njNbc 7ICg1TvODfcYqzwpj8pOmwoYkEyHg9E4s5eX2ZThqOb3OZnDn5EQ+Sy2U4dBPZyXnXVW 4d4hZAiM0Bry6f7SaQp4feee/KIaCpd1XwgxJLMllrE9LTjNykLoFN3624OctYRUyNqf gKlhCSOC5v8m9oPht1bEzb1R2PYwrfet9kxz8FBfg8iLs2o9aOFkMBN/WWgqQ8PMZx4G tPshvxabL6/x9Vmt25WwcuM4Kn1iRv6q/0Wf6Bm1XZ50f/HSK0IrGxiMNBcbHmJ5OKCg 52aA==
X-Gm-Message-State: AKaTC01a7iH2/d2g9S34PCtv3mK6ok1B9zUh7L0tWY443xGB8WsSNqeM4/DMN3Iolng/ngx8awj9nio75Z06lQ==
X-Received: by 10.55.162.83 with SMTP id l80mr4979518qke.168.1479556018194; Sat, 19 Nov 2016 03:46:58 -0800 (PST)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 10.140.16.50 with HTTP; Sat, 19 Nov 2016 03:46:57 -0800 (PST)
From: Robert Raszuk <robert@raszuk.net>
Date: Sat, 19 Nov 2016 12:46:57 +0100
X-Google-Sender-Auth: xutXNeX2Nle6W2E6yfaRp5chmOU
Message-ID: <CA+b+ERkpfbrn0sYk7n-Dkx1qxg-9w85kt+aHTkBVaxKGGFxGpg@mail.gmail.com>
To: idr wg <idr@ietf.org>
Content-Type: multipart/alternative; boundary="001a114faecce3d24c0541a5fab9"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/ICWBZzXMZ-zWQ7Pdb46eKoGUynw>
Subject: [Idr] draft-ymbk-idr-bgp-open-policy
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 19 Nov 2016 11:47:00 -0000

Dear Authors and WG,

I would like to share few observations on this proposal.

Let me start with comment that hardcoded automation is a good thing and
this does provide for automate filtering so it is very good direction which
I support.

Observations:

1. What role would be assign to peering to route server ?

2. This proposal to twick session capabilites looks very innocent on the
surface till we have seen proposal to leak local pref or send med based on
those capabilities. I am sure just around the corner there would be
proposals to stop next hop self on ebgp or to ignore extended community
transitive bit when sending to internal (even if internal is another AS).

So here I would propose to instead to hide this under the table clearly
define new types of BGP sessions with clear semantics on what is expected
from said new types of BGP sessions: to peers, to same admin peer AS, to
customers, to complex or to providers etc ...

3. It has been suggested that the default should be "customer" I think this
would be very bad idea deployment wise as it will take ages for all
customers to upgrade their routers. Instead I would propose that customers
sessions would be exactly what we have today as basic eBGP. The new
attribute imposition may be associated with current customers peerings.

Many thx,
R.