[Idr] 答复: New Version Notification for draft-liang-idr-bgp-flowspec-time-00.txt

Hi Thomas,

Thanks for your comments. 
The "Flow Validity Period" is proposed for the FlowSpec NLRI instead of FlowSpec components (e.g. filters). The filters defined in RFC5575 are used to match the packets; however, the "Flow Validity Period" is an attribute of the FlowSpec rule itself, not acting as a filter, in this document.

Thanks,
Jianjie

> -----邮件原件-----
> 发件人: Idr [mailto:idr-bounces@ietf.org] 代表 Thomas Mangin
> 发送时间: 2015年10月19日 13:59
> 收件人: idr@ietf.org
> 主题: Re: [Idr] New Version Notification for
> draft-liang-idr-bgp-flowspec-time-00.txt
> 
> Hello Jianjie,
> 
> Could you please explain why you choose a TLV vs individual new flow
> components. Naively, I would have thought that it would be easier to create a
> number of new individual tests (start time, duration, delay, ..).
> 
> While I am sympathetic to the idea, many of ExaBGP’s users have asked me to
> introduce a similar feature in the code, I would rather not see yet another TLV
> requiring yes another custom parser to be handled when RFC 5575 has a
> perfectly good generic mechanism to handle tests on flow routes.
> 
> Yours sincerely,
> 
> Thomas Mangin
> 
> http://exa.net.uk/about/contact-us
> On 19 Oct 2015, at 3:08, Youjianjie wrote:
> 
> > Dear all,
> >
> > This document proposes a new BGP path attribute called "Flow Extended
> > Attribute", which carries expected valid period information for a
> > FlowSpec rule.
> > Could you please review? Your comments are welcome.
> >
> > Thanks,
> > Jianjie
> >
> > -----邮件原件-----
> > 发件人: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]
> > 发送时间: 2015年10月19日 9:58
> > 收件人: Liangqiandeng; Zhuangshunwan; Youjianjie; Zhuangshunwan;
> > Youjianjie; Liangqiandeng
> > 主题: New Version Notification for
> > draft-liang-idr-bgp-flowspec-time-00.txt
> >
> >
> > A new version of I-D, draft-liang-idr-bgp-flowspec-time-00.txt
> > has been successfully submitted by Jianjie You and posted to the IETF
> > repository.
> >
> > Name:		draft-liang-idr-bgp-flowspec-time
> > Revision:	00
> > Title:		BGP FlowSpec with Time Constraints
> > Document date:	2015-10-18
> > Group:		Individual Submission
> > Pages:		9
> > URL:
> > https://www.ietf.org/internet-drafts/draft-liang-idr-bgp-flowspec-time-00.txt
> > Status:
> > https://datatracker.ietf.org/doc/draft-liang-idr-bgp-flowspec-time/
> > Htmlized:
> > https://tools.ietf.org/html/draft-liang-idr-bgp-flowspec-time-00
> >
> >
> > Abstract:
> > The BGP flow specification (FlowSpec) is an additional tool to
> > mitigate the effects of Distributed Denial of Service (DDoS) attacks.
> > Since DDoS attacks are dynamic, filtering of a flow may only be
> > necessary for some specified time, and be undesirable at other times.
> > This document proposes a new BGP path attribute called "Flow Extended
> > Attribute", which carries expected valid period information for a
> > FlowSpec rule.  So network administrators can control certain types of
> > traffic in a specified period.
> >
> >
> >
> >
> >
> > Please note that it may take a couple of minutes from the time of
> > submission until the htmlized version and diff are available at
> > tools.ietf.org.
> >
> > The IETF Secretariat
> >
> > _______________________________________________
> > Idr mailing list
> > Idr@ietf.org
> > https://www.ietf.org/mailman/listinfo/idr
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr