Re: [Idr] TCP & BGP: Some don't send terminate BGP when holdtimer expired, because TCP recv window is 0

[Jeffrey Haas <[e-mail]>]

Brian,


> On Dec 16, 2020, at 6:08 PM, Brian Dickson <[e-mail]> wrote:
> Thinking a bit bigger-picture, who could or should be able to (a) detect, and (b) respond to, a situation like this in future?
> What are the pros/cons of different approaches, in terms of risk (of accidental or malicious outages induced), or effectiveness?
> 
> I'll start:
> A large network peering with another large network, is likely to have more visibility.
> If all of the sessions are stuck (but still up), that's a much stronger indicator, and maybe that'd be a good situation when auto-reaction would be appropriate.
> Assuming the auto-reaction was limited to large peers of a large network, I think this is less risky, and still very effective.
> (There would still be a challenge of how to share this state discovery across an ASN, but that's a more constrained problem to solve, IMHO.)

This sort of analysis is amenable to current centrally collected telemetry situations.  It's just not one that would be in people's playbooks.

> A large ASN may want a reliable, secure method of shutting down peers for some modest duration. Is that also something to consider developing a solution for?

Arguably, how is this different than your billing system deciding someone hasn't paid the bill and you shut down their BGP?  In this case, it's just a matter of finding all of either the impacted peering sessions, or having a list of all peering sessions by AS.

> I don't see that possible without signatures a la RPKI, but don't know if it's something anyone would really want to have available.

Pushing this action into someone else's system is probably a non-starter.  If you think people were upset at the Dutch court attack scenario...

> The conceptual model would be that of a rapid administrative shutdown of peering sessions, possibly with a pre-configured timer to re-enable sessions and/or a start time?

I think in the scenario in question, automated and persisted shutdown is the desire.  Figuring out whether you have stable BGP, much less safe transit BGP through the provider is trickier.

-- Jeff