Re: [Idr] draft-litkowski-idr-bgp-timestamp

Robert Raszuk <robert@raszuk.net> Thu, 24 July 2014 20:27 UTC

Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E76FD1ABB2E for <idr@ietfa.amsl.com>; Thu, 24 Jul 2014 13:27:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.277
X-Spam-Level:
X-Spam-Status: No, score=-1.277 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dsf3ALr2yJHS for <idr@ietfa.amsl.com>; Thu, 24 Jul 2014 13:27:03 -0700 (PDT)
Received: from mail-ig0-x233.google.com (mail-ig0-x233.google.com [IPv6:2607:f8b0:4001:c05::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C94B1B2897 for <idr@ietf.org>; Thu, 24 Jul 2014 13:26:56 -0700 (PDT)
Received: by mail-ig0-f179.google.com with SMTP id h18so3138344igc.0 for <idr@ietf.org>; Thu, 24 Jul 2014 13:26:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=OknX/i84bRclEdFYIPK9ZdMPlrYYcZQFdUJuy1KuVeA=; b=gN3RdlCrj3UnAP7ROxdwRyzXYqUsKNII5QXe6lkYwHP4nP/dcpxjxBc9LGuuVQNeKf n6Fi33BQgAedbywb7hp0+L3/MR6iD6PIs/beK2r3+yHGJDcPHDO4vUsPX3OIN51e+CJ6 erpKj5rmag5GYDvzRTzDp0HNc0P0ROvWwxWljTT2087W6aNkyg6B6tWeveIE55OfvgB8 HPVx55B1fDtJeQMLkLtx1/gFVgtw/En2U+PL22g3h0BGKKi1hIOxG60+fNmbyvV5knPh Rwb23Q9chB1hcGdq5aNtK+I/uJ5m+/fk/LNsfjh1Cp1ZLI4aRqlOTN/3LEB49H4xmJ9F 2zCQ==
MIME-Version: 1.0
X-Received: by 10.42.154.132 with SMTP id q4mr15591504icw.4.1406233615833; Thu, 24 Jul 2014 13:26:55 -0700 (PDT)
Sender: rraszuk@gmail.com
Received: by 10.64.128.99 with HTTP; Thu, 24 Jul 2014 13:26:55 -0700 (PDT)
In-Reply-To: <006a01cfa770$165cccf0$431666d0$@ndzh.com>
References: <5637_1406056798_53CEB95E_5637_4963_1_9E32478DFA9976438E7A22F69B08FF92044435@OPEXCLILM34.corporate.adroot.infra.ftgroup> <20140722212735.GA11770@puck.nether.net> <25601_1406066454_53CEDF16_25601_752_1_9E32478DFA9976438E7A22F69B08FF9204461C@OPEXCLILM34.corporate.adroot.infra.ftgroup> <20140722222246.GB19654@puck.nether.net> <006a01cfa770$165cccf0$431666d0$@ndzh.com>
Date: Thu, 24 Jul 2014 22:26:55 +0200
X-Google-Sender-Auth: Eihw_nYyAcNmSv6aRi1sn8B2iyU
Message-ID: <CA+b+ERnhKxVL=CqKV7St-aSew0XXrH-yyKOfEwo8jM8LShXfmw@mail.gmail.com>
From: Robert Raszuk <robert@raszuk.net>
To: Susan Hares <shares@ndzh.com>
Content-Type: multipart/alternative; boundary="90e6ba6e87a624a02b04fef64747"
Archived-At: http://mailarchive.ietf.org/arch/msg/idr/U9BYNoS6bD8GrzJLi7ju4vTI9Bw
Cc: Jeffrey Haas <jhaas@juniper.net>, idr wg <idr@ietf.org>
Subject: Re: [Idr] draft-litkowski-idr-bgp-timestamp
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Jul 2014 20:27:05 -0000

Sue your observation is valid however I have two comments to it:

*A* it does not apply to specifically crafted beacons as by such "special
crafting" you eliminate by design the expected variations.

*B* in general case you are right, but the general case is still broken if
timestamp is a property of the BGP path. Path may sit idle in BGP speaker
for minutes or hours and longer before at some event it is promoted as best
and send with say 30 min in/out delta falsely indicating potential problems
with given BGP speaker. And the way to eliminate that is *A* hence perhaps
just sticking to A is sufficient.

best regards,
R.


On Thu, Jul 24, 2014 at 8:50 PM, Susan Hares <shares@ndzh.com> wrote:

> Jon and Stephan:
>
> Based on work with vendor boxes for the BMWG BGP work - I would recommend
> you timestamp the BGP trace NLRI as you leave the BGP Peer and as you
> receive it. Otherwise, you run into the data flow patterns the trace NLRI
> is
> included in causing variation in your flows.
>
> Sue
>
> -----Original Message-----
> From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Jon Mitchell
> Sent: Tuesday, July 22, 2014 6:23 PM
> To: stephane.litkowski@orange.com
> Cc: Jeffrey Haas; idr wg; Robert Raszuk
> Subject: Re: [Idr] draft-litkowski-idr-bgp-timestamp
>
> On 22/07/14 22:00 +0000, stephane.litkowski@orange.com wrote:
> > Hi Jon,
> >
> > Thanks for your comment.
> > Regarding packing, depending of the address family you are trying to
> monitor, current packing may be low or high. In case where existing packing
> is low, it does not change anything. In case packing is high, yes I agree
> that the processing of the update is a bit changed and my beacon would be
> sent may be faster. Packing is introducing slight delay but I don't think
> delay introduced by packing is a major component expect if an
> implementation
> get stucks in packing (it may happen but I never seen it). IMHO, I don't
> think this is a critical point but I'm open to other opinions.
> >
> > Now for BMP, we are not targeting to monitor our beacons on all PEs, just
> a subset of representative.
> > Moreover it's not only a question about number of sessions, it's a
> question of ordering the information retrieved. If you consider using BMP ,
> the tool will peer with selected PEs, but also "transit BGP Speakers"
> (ASBRs, RRs ...). When the tool will receive the timestamp information (if
> implementation of BMP supports timestamp), it requires to sort and
> reorganize the received information based on the knowledge of the topology
> :
> you cannot just sort by timestamp, you have to find relationship between
> BGP
> Speakers (information from BMP and topology) and combine them to recreate
> our timestamp vector. BGP transport permits to create automatically this
> timestamp vector without having to implement a complex machinery in the
> tool. But BMP can be used at the selected PE to the tool to retrieve
> timestamp vectors.
> >
>
> Stephane - yes, I think this second point is the real object of the draft
> (correct me if I'm wrong).  Offline correlation engines are complicated to
> implement and/or expensive, although commercially available.  Getting the
> timestamp data seems not to be the real issue here at all (via BMP or other
> mechanisms a local implementation can provide).  Maybe this point should be
> more clear in the intro and text.
>
> Jon
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>
>