[Idr] Use of BGP for Opaque Signaling

Robert Raszuk <robert@raszuk.net> Sat, 12 March 2016 21:10 UTC

Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7859212D855 for <idr@ietfa.amsl.com>; Sat, 12 Mar 2016 13:10:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.349
X-Spam-Level:
X-Spam-Status: No, score=-2.349 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CrQyoSdA264b for <idr@ietfa.amsl.com>; Sat, 12 Mar 2016 13:10:10 -0800 (PST)
Received: from mail-lb0-x230.google.com (mail-lb0-x230.google.com [IPv6:2a00:1450:4010:c04::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E3B712D866 for <idr@ietf.org>; Sat, 12 Mar 2016 13:10:05 -0800 (PST)
Received: by mail-lb0-x230.google.com with SMTP id x1so195932743lbj.3 for <idr@ietf.org>; Sat, 12 Mar 2016 13:10:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:message-id:subject:from:to:cc; bh=0EqoEwK8eGauvle2WDBNijxPPhznoF0XtpRlBuIeEZw=; b=kgr3NaGrLVbZAObthXSin56ZUanAMp8tfvYM7KNcaLp7U3FIB30/eHTEHtwn5mRSHU vK/x271w6noSDrVTGGtvrd+M3KWVQGptuDRGFGxhL5G0OJc4UebhkVX4ii/cDKTJiVOZ BdoEOyzug/Tm2TRLyhVs/C1rGyMpyAFOnirVMkAmoVmxrvI9+iEHEFS7/jI1rPwKWo7c lbcisuaif8YpjAfHi5jlQwXw0k3oizHoeqwrqkuZxYO3zIQ1XxlRwG5IDHGsvoBiwZrc 1pvzFFR4ZqmbUoFMiIoLP2Uh1xk4xx3rWmTfn7RLf9fjhiGKszVaPR/ZpBZSgC0aFkDQ KpHQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:date:message-id:subject:from :to:cc; bh=0EqoEwK8eGauvle2WDBNijxPPhznoF0XtpRlBuIeEZw=; b=bxm5VdrW1FlZUJUN/wluYXaDshD//ShafkGkovW8juD9NNbrGhg6eQNfJv+U/TxRfo mUJ4P+86BNnjIEtvVKLA174ZOhZ5rjl4bpP7POGT25K87GkUBPvt1iNQH/Ed40YqgzNk +TGsucqq+lhNa0TmD/vEPq7RdNRV8/SbZ8NywLb19pex9jgoHNw+W6Mbd+SPTbgR1C8a 1g8WJUbOjAjZHlT2OovBu9NuU8p0cToqPXGs7hUCX9vf69gefBTd0O2QeGuyIWd8bRL2 7oqWvdeWHSvsT3GBxqGXeVkouSHgIsWPO4SAghg8QFBAxro9To4rovOz6V6i9P9V6moy +lKw==
X-Gm-Message-State: AD7BkJIvtdZH5Pe/1TWDuRN4nTw33eG2lM+m+yodPN9D5uH9NyGMT51q+DBIfJrVmic3s3l3Vg4BuRtKkhZGVg==
MIME-Version: 1.0
X-Received: by 10.25.208.143 with SMTP id h137mr4119200lfg.110.1457817003499; Sat, 12 Mar 2016 13:10:03 -0800 (PST)
Sender: rraszuk@gmail.com
Received: by 10.25.136.133 with HTTP; Sat, 12 Mar 2016 13:10:03 -0800 (PST)
Date: Sat, 12 Mar 2016 16:10:03 -0500
X-Google-Sender-Auth: 9TB5o6ijt5QVHAtKbqd_069w24I
Message-ID: <CA+b+ERkotCpTbHjYZ0H0g9WvAUqqQNecBJNA2+gT6AT782+UiQ@mail.gmail.com>
From: Robert Raszuk <robert@raszuk.net>
To: Petr Lapukhov <petr@fb.com>, exa@juniper.net
Content-Type: multipart/alternative; boundary="001a11411876a42c42052de078b7"
Archived-At: <http://mailarchive.ietf.org/arch/msg/idr/XT8DQe6S6_B1A7srEnzIjpsXb8M>
Cc: idr wg <idr@ietf.org>
Subject: [Idr] Use of BGP for Opaque Signaling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Mar 2016 21:10:19 -0000

​Petr, Eben,

I have few questions and comments to your proposal.

- The draft ​attempts to reuse BGP mechanism for p2mp distribution of
opaque information. That alone is not a bad thing :) However when you make
reference to BGP-LS it needs to be observed that BGP-LS is not position to
directly impact routing (ie content of RIB and FIBs) unlike one of the use
cases described in your draft Intro paragraph. That means that unlike
BGP-LS it must co-exist with routing BGP on the same BGP speakers.

Here I would like to bring back my proposal to define new port for
Transport Instance BGP https://tools.ietf.org/html/draft-raszuk-ti-bgp-01
which at the time of discussion was supposed to be shortly addressed by
dynamic port allocations of multisessions which to the best of my knowledge
never happened.

So first comment is that if we go with reusing BGP-4 for this type of
signalling let's enforce it's early separation from "classic" BGP.

- Second comment is related to the scope of use. If the scope is private -
let's perhaps enforce it more explicitly such that by the spec it is
illegal AFI/SAFI pair in the public Internet. For example by stating that
it is illegal to have non private AS in the AS_PATH of such UPDATE msg.

- Third the draft states that there is no new security implications .. well
if the scope is non private I am afraid that is no the case. As you have
seen (and still seeing) securing BGP UPDATE MSG is MP_REACH content
dependent. If content is free form I am afraid it will be rather hard to
secure it well :)

- Last as opaque value container you are defining an transitive attribute ?
Is the intention to use this attribute in existing AFI/SAFIs as well ?
Otherwise if not why do you need this to be transitive if capability
negotiation already may implicitly define it's support by new AFI/SAFI.

Cheers,
R.

PS.

> There is an ongoing discussion around avoiding NLRI (key) collisions.

Where is such discussion taking place ? Shouldn't IDR be perhaps in the
loop a bit :)