Re: [Idr] I-D Action: draft-sas-idr-maxprefix-inbound-02.txt

Melchior Aelmans <melchior@aelmans.eu> Tue, 11 May 2021 13:22 UTC

Return-Path: <melchior@aelmans.eu>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B04273A17A2 for <idr@ietfa.amsl.com>; Tue, 11 May 2021 06:22:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=aelmans.eu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oVxbMKSSZiVU for <idr@ietfa.amsl.com>; Tue, 11 May 2021 06:22:21 -0700 (PDT)
Received: from mail-pl1-x636.google.com (mail-pl1-x636.google.com [IPv6:2607:f8b0:4864:20::636]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31C2F3A179C for <idr@ietf.org>; Tue, 11 May 2021 06:22:20 -0700 (PDT)
Received: by mail-pl1-x636.google.com with SMTP id s20so10799337plr.13 for <idr@ietf.org>; Tue, 11 May 2021 06:22:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aelmans.eu; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=DjDZKWeMayLQ8RChySug9yQbuQPckn/0CE7g1mrDRdc=; b=AZNQHM5l4ojV/M0qP0i3tTRzx4SHxgbG8SigVC5X7sZx5KfPVuv5Tf7fgdeN5r5GS1 L+U+n7F/+QeJjiqNPH+e2ITEjfK5JxCVVDj9Q/Rj1iikF2fKxbSXFaSzsWtIfMPh4Sxm FYgbPaaLH1HB2+/CtKQZyr7IU2SFKg3euyqkijUGmo75FHf/E8Q2ZPv3EcrtvqPs19jh xBmiHjsSQ3Tx4ow15agy2r/zJyCWQmCvBSkh88UUf1SysBS7T3exhaKga1flCWkezVI+ /CG+4rWlPJPMreTeh3Buc9d+e1L96vjSECEZuJzyg9NvbE6rAkKcJTRyTbzNHMrQFLDJ qiWg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=DjDZKWeMayLQ8RChySug9yQbuQPckn/0CE7g1mrDRdc=; b=FOyuEyc16gdQ0v77QDb2OVa0VXOfErjmU3cSDYh4r9rPchgZYyXC8ygmsA8J29Uq4Z dfWV9UT9KXJcJznS6TftGxPnH8TdVpVlHDhglyxEMi2DGpOM3LgdR6D3gOApfAq3i9W2 U44+KdCSE+mQXVr9kqNNYN8YrpSDIAjFSPGVn98sbyoK5CyXGUvweEppUvebVacNDdLT Dj6qX6q8Lt86n7eR0U1e/g5yxbO8ozdprsk/lwcBczOFHLJFcyaVZ3LwLScBcITojf+n Pm4lqsSZvm9BjKc3B7EWagTHGln11Fnh5OtVsECxxcz0q1kYqZ3BjuTgc0qz++/h2Qur xLJw==
X-Gm-Message-State: AOAM532lS/HCCqJ1n/xD/O8pqvBKs1d4FH+iOBmchcpiYTM4TzSCYbI1 D7JQb6wKjdHCUEFrif1gXDXQfZBdafazkWSvsnDn9o3M5YOkWg98
X-Google-Smtp-Source: ABdhPJxrGNWZTKVoKzLSPi31SM9Sot2ZYDGrTz3qQ6HOIAF9SkahEw6vGXMrogHMfmGNBxJJIzbRnZ5mZj07vfb6cJ0=
X-Received: by 2002:a17:902:b7c9:b029:ed:5a0c:d1ca with SMTP id v9-20020a170902b7c9b02900ed5a0cd1camr29650104plz.4.1620739339461; Tue, 11 May 2021 06:22:19 -0700 (PDT)
MIME-Version: 1.0
References: <161843563034.11054.13811966622190622752@ietfa.amsl.com> <CAOj+MMH=cCgtn7cL=HvOjQOMH1B9tmjOYOT04jXE9oky4SuevQ@mail.gmail.com> <YHhJTB51/joiz9Pg@snel> <CAOj+MMEFOGm=hCQcZNAUoN8vsPeVT3gqnjsQihUMJo4AOObZfw@mail.gmail.com>
In-Reply-To: <CAOj+MMEFOGm=hCQcZNAUoN8vsPeVT3gqnjsQihUMJo4AOObZfw@mail.gmail.com>
From: Melchior Aelmans <melchior@aelmans.eu>
Date: Tue, 11 May 2021 15:22:08 +0200
Message-ID: <CALxNLBhtQDDo9Dn7vBAZx+RbVwJ5BSbZfRS1wGStt_k7C2nPuQ@mail.gmail.com>
To: Robert Raszuk <robert@raszuk.net>
Cc: Job Snijders <job@fastly.com>, Massimiliano Stucchi <max@stucchi.ch>, Melchior Aelmans <maelmans@juniper.net>, "idr@ietf. org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000009a3f8c05c20dc89c"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/XnIeu_tjtaVDVOC7yiHyNOl3Efg>
Subject: Re: [Idr] I-D Action: draft-sas-idr-maxprefix-inbound-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 May 2021 13:22:26 -0000

Hi Robert, all,

First of all thanks for your feedback!

The part we are confused about is that soft-reconfiguration inbound is a
Cisco command to enable adj-RIB-In which then stores all the received
routes. On Juniper and OpenBGPd (and possibly other implementations as
well) adj-RIB-In is enabled by default and protected by a maximum-prefix
limit inbound.
Could you please elaborate on what you are exactly trying to describe and
as Job suggested make suggestions for text adjustments?

Thanks!
Melchior

On Thu, Apr 15, 2021 at 4:36 PM Robert Raszuk <robert@raszuk.net> wrote:

> Hi Job,
>
> The distinction between Per and Post policy is clear.
>
> Inbound Prefix Limit may (depending on implementation) apply to either or
> both of those processing stages.
>
> The observation I am trying to make is that IMHO soft in is not really a
> Pre Policy in a sense that you must not apply Prefix Limit to it. Otherwise
> the entire idea of soft-in becomes questionable.
>
> To me perhaps the proper way to visualize it is actually to divide Pre
> Policy into two blocks - ALL Prefixes and Pre-Policy Prefix-Limited. All
> Prefixes block would occur only when soft in is enabled. Otherwise some may
> expect or request to apply Inbound Prefix Limit before routes are stored
> when soft reconfiguration inbound is enabled.
>
> Or perhaps you actually want to do that sort of breaking that knob ?
>
> Many thx,
> R.
>
>
>
>
>
>
> On Thu, Apr 15, 2021 at 4:10 PM Job Snijders <job@fastly.com> wrote:
>
>> Dear Robert,
>>
>> On Thu, Apr 15, 2021 at 02:16:12PM +0200, Robert Raszuk wrote:
>> > I think I have one question or suggestion.
>>
>> Your review is appreciated!
>>
>> > As you all know some implementations allow you to explicitly force BGP
>> > speaker to keep (pre-policy) all routes/paths received.
>> >
>> > Example:
>> >
>> > neighbor 192.168.1.1 soft-reconfiguration inbound
>> >
>> > The draft does not seem to comment on this case yet if implementation
>> > maintains the above behaviour at least some of the justifications for
>> > the document is gone.
>>
>> Interesting, the draft's objective is to clarify that inbound limits can
>> be applied at multiple stages of the pipeline (pre and post policy), not
>> all Network Operating Systems appear to offer this (operationally
>> speaking much needed) granularity, and through this draft we hope to
>> clarify to implementers that it is something worth considering to add.
>>
>> > I think that draft should at least mention such behaviour, not force to
>> > change it however put some light that if
>> > configured by the operator some of the benefits of inbound prefix limit
>> > will not be fully effective.
>>
>> What you call 'soft-reconfiguration inbound' ends up storing into what
>> the draft refers to as 'Pre Policy'. (At least... that is the intention,
>> it is possible the text is readable to us but not easy to understand for
>> others)
>>
>> Do you have specific text in mind to add to the draft to clarify this?
>>
>> Kind regards,
>>
>> Job
>>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>