Re: [Idr] WGLC on draft-ietf-idr-as-private-reservation-00

Jared Mauch <jared@puck.nether.net> Thu, 29 November 2012 17:50 UTC

Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A717C21F8B47 for <idr@ietfa.amsl.com>; Thu, 29 Nov 2012 09:50:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d5GSbma-fjpf for <idr@ietfa.amsl.com>; Thu, 29 Nov 2012 09:50:47 -0800 (PST)
Received: from puck.nether.net (puck.nether.net [IPv6:2001:418:3f4::5]) by ietfa.amsl.com (Postfix) with ESMTP id B4C2721F8B40 for <idr@ietf.org>; Thu, 29 Nov 2012 09:50:47 -0800 (PST)
Received: from [10.0.0.137] (173-167-0-105-michigan.hfc.comcastbusiness.net [173.167.0.105]) (authenticated bits=0) by puck.nether.net (8.14.4/8.14.4) with ESMTP id qATHojCl027766 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 29 Nov 2012 12:50:45 -0500
Mime-Version: 1.0 (Apple Message framework v1283)
Content-Type: text/plain; charset="iso-8859-1"
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <CA+b+ERneavhy1gzKRSnCfN+YjYcU0+3WgBg6f68gq=tpx8yV5g@mail.gmail.com>
Date: Thu, 29 Nov 2012 12:50:44 -0500
Content-Transfer-Encoding: quoted-printable
Message-Id: <1AC79BDA-C088-47B4-888D-4B0428FB7C4F@puck.nether.net>
References: <B6B72499-E9D0-4281-84EB-6CA53694866E@juniper.net> <D704E7E3-3A95-4696-9757-9E17605E670C@tony.li> <378E396E-3F4B-4ACC-83D1-C4931524FECD@puck.nether.net> <CA+b+ERneavhy1gzKRSnCfN+YjYcU0+3WgBg6f68gq=tpx8yV5g@mail.gmail.com>
To: Robert Raszuk <robert@raszuk.net>
X-Mailer: Apple Mail (2.1283)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.6 (puck.nether.net [204.42.254.5]); Thu, 29 Nov 2012 12:50:46 -0500 (EST)
Cc: idr wg <idr@ietf.org>, Tony Li <tony.li@tony.li>
Subject: Re: [Idr] WGLC on draft-ietf-idr-as-private-reservation-00
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/idr>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Nov 2012 17:50:49 -0000

Robert,

On Nov 29, 2012, at 12:36 PM, Robert Raszuk wrote:

> I think this is yet one more case where the "Internet BGP" is trying
> to fight with "Private_Use of BGP".
> 
> There are multiple applications BGP can serve and we have single
> protocol and single resource pool of ASes used by that protocol. Leave
> alone types of communities, attributes etc ...
> 
> Internet folks will say "Do not trash our environment"

As an operator, I feel this is a fair thing for me to say. :)

This isn't about private use of bgp vs public use of bgp.  It's about the engineering decisions that went into using BGP as the tool in the first place, and the implementation secondary.  The added requirement of a larger space isn't unreasonable, but looking for a reservation (and the side-effects this will have on vendor code, deployability, usability, etc..) are not insignificant and to be outright dismissed.

Picking on Cisco - The configuration directive is listed here:

http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080093f27.shtml

remove-private-as

Will there be remove-private-as [oh-yeah-and-that-extended-space-too] ?  How will this be incrementally deployed and used?

If the goal is something like "I have 5000 racks of gear, want a top-of-rack-switch with a /64 on each of them", this is a solvable problem in current running code today.  You use rfc2270 and allow-as-in with the existing space outlined in rfc1930.

If the goal is to use the ASN as that identifier, eg: encoding the POP/ROW/RACK in the ASN, then I will be the first to say this is a misapplication of technology.  That should either be encoded in your addressing plan or your network documentation.  BGP can't be the place for each need to find the solution fulfilled. (note lowercase "need").


> Applications and services folks will say "We just find BGP useful to
> our application, why not use it - we have nothing in common with big
> I"
> 
> On that basis I see no harm in allowing some bigger AS space for personal use.
> 
> In fact I just looked at various RIR policies (some of them written by
> Geoff ;) which say that given LIR can get only single AS number
> allocation - even for experiments. Moreover RIRs get 1K AS pools from
> IANA and there are clear rules where the subsequent pool can be
> requested.

These policies are community driven, and could be changed.  I'm not saying they are right or wrong, but if you have collisions in numbering, you should get unique space to properly work around it vs using a hack.

> Yes Jared is right that RFC2270 or similar techniques can be used. In
> fact I spoke with John offline today about one of such cases where
> private as just get's stripped immediately. But those ideas are just
> moving the issue and not really solving it - making the internal
> network troubleshooting more complex.

I'm not convinced that the AS(4)_PATH is the right place to encode this information.  Numerous elements go into a network and site documentation.  If your premise rises or falls based on this individual element, perhaps it was poorly conceived in the first place?

- Jared

> 
> Regards,
> R.
> 
>> On Thu, Nov 29, 2012 at 5:53 PM, Jared Mauch <jared@puck.nether.net> wrote:
>> 
>> Greetings,
>> 
>> Jon pointed me to this draft earlier today so please be kind (for the first 5 minutes after this is delivered in your mailbox.).
>> 
>> After reading the list history back a few months or so on this topic, I must express the same reservation that Randy and Geoff have raised.
>> 
>> I do not feel this is a problem space that needs to be addressed.  Vendors easily disable loop-detection in current running code, and rfc2270 seems to clearly apply in the problem space this is attempting to address.
>> 
>> The issue of ASN collisions were raised, and I feel can be dismissed easily by one party engaging with their local RIR for a nominal "cost of running BGP" threshold.  The recurring annual cost is likely a budgetary "rounding error" and is not a barrier to entry IMHO.
>> 
>> I have other concerns should this move forward that would impact operations.  I will comment on them in private should folks desire.
>> 
>> I do not feel this draft can be supported.
>> 
>> - Jared
>> 
>> 
>> On Nov 29, 2012, at 11:40 AM, Tony Li wrote:
>> 
>>> 
>>> Support.
>>> 
>>> Editorial nit: I would find it MUCH more helpful if the constants were also expressed in hex.
>>> 
>>> Tony
>>> 
>>> 
>>> On Nov 28, 2012, at 1:26 PM, John Scudder <jgs@juniper.net> wrote:
>>> 
>>>> Folks,
>>>> 
>>>> We have received a request for a working group last call on draft-ietf-idr-as-private-reservation-00. A URL for the draft is http://tools.ietf.org/html/draft-ietf-idr-as-private-reservation-00
>>>> 
>>>> Please send comments to the list by December 14. [*]
>>>> 
>>>> Thanks,
>>>> 
>>>> --John
>>>> 
>>>> [*] Unless the world ends on December 12, in which case send them by December 12.
>>>> _______________________________________________
>>>> Idr mailing list
>>>> Idr@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/idr
>>> 
>>> _______________________________________________
>>> Idr mailing list
>>> Idr@ietf.org
>>> https://www.ietf.org/mailman/listinfo/idr
>> 
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr