Re: [Idr] Stephen Farrell's No Objection on draft-ietf-idr-as-migration-03: (with COMMENT)

[joel jaeggli <[e-mail]>]

On 2/18/15 5:36 PM, Stephen Farrell wrote:
> Stephen Farrell has entered the following ballot position for
> draft-ietf-idr-as-migration-03: No Objection
> 
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
> 
> 
> Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
> 
> 
> The document, along with other ballot positions, can be found here:
> http://datatracker.ietf.org/doc/draft-ietf-idr-as-migration/
> 
> 
> 
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
> 
> 
> 
> In the security considerations, isn't there a threat of
> hijacking traffic (for whatever purpose) if an
> unauthorised party can migrate?

I wouldn't  expect the threat of hijack, either due to mis-origination
or as-path manipulation to be greater during the merger of two ASNs then
operating them seperately. the opportunity for grievous error exists but
that's not extrinsic to the common administrative domain encompassing
both ASNs.

With respect to a changing the backing asn on a router with changing the
asn on the bgp session with the customer,  the goal is to
leave-pre-eastablished relationships unchanged until they can later be
migrated. that can include the ip addresses in use on both ends, arp
entries, shared secrets if employed and potentially even the tcp session
itself, if supported by the platform.

>