Re: [Idr] [GROW] draft-snijders-idr-shutdown-00: Drop a line in the peer's syslog at shutdown

Job Snijders <job@ntt.net> Sun, 20 November 2016 09:55 UTC

Return-Path: <job@ntt.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E25F41295BE; Sun, 20 Nov 2016 01:55:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.432
X-Spam-Level:
X-Spam-Status: No, score=-3.432 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-1.497, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JhZ-nKDhrESE; Sun, 20 Nov 2016 01:55:03 -0800 (PST)
Received: from mail3.dllstx09.us.to.gin.ntt.net (mail3.dllstx09.us.to.gin.ntt.net [IPv6:2001:418:3ff:5::26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BB1A1295BC; Sun, 20 Nov 2016 01:55:03 -0800 (PST)
Received: by mail3.dllstx09.us.to.gin.ntt.net with esmtpsa (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.84_2) (envelope-from <job@ntt.net>) id 1c8Opx-0007t8-Un (job@us.ntt.net); Sun, 20 Nov 2016 09:55:02 +0000
Date: Sun, 20 Nov 2016 10:54:59 +0100
From: Job Snijders <job@ntt.net>
To: Robert Raszuk <robert@raszuk.net>
Message-ID: <20161120095459.GB1121@Vurt.local>
References: <CA+b+ERkMsCGhyHsttjq0Pout0vrAvGQ6F+HaTxr8=78YMeRFOA@mail.gmail.com> <58306620.4000308@foobar.org> <319AD952-C571-4085-8D56-C06A51F021E3@domino.org> <CA+b+ERnQ8FQXxJ6No6GUr9mdp7APRkULqsGbKf5bAigp34TvmQ@mail.gmail.com> <CAO367rW_TuXsMNJBanAc2gL66TW8s4p2u5zDKfHER5rb1rk7-Q@mail.gmail.com> <058F756D-3A68-4AA6-A9DC-63A1BF9A5184@domino.org> <20161119194138.GG47336@dhcp-9d92.meeting.ietf.org> <87DDAB88-78AC-431A-ABE7-55249BF5D654@domino.org> <5830CAEB.7070400@foobar.org> <CA+b+ER=6zCyRpnJUCi4zQQ79sRfyS+r8fzn-bQm_O9wrMoAABw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CA+b+ER=6zCyRpnJUCi4zQQ79sRfyS+r8fzn-bQm_O9wrMoAABw@mail.gmail.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: Mutt/1.7.1 (2016-10-04)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/fq8d4KCHMmJCTgt9nFi0SYJ4HSc>
Cc: idr@ietf.org, grow@ietf.org
Subject: Re: [Idr] [GROW] draft-snijders-idr-shutdown-00: Drop a line in the peer's syslog at shutdown
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 20 Nov 2016 09:55:04 -0000

On Sat, Nov 19, 2016 at 11:09:27PM +0100, Robert Raszuk wrote:
> Those who do not automate may not even look at the syslog at all. I
> those cases as Jared said adding it to sh bgp neig may help with the
> risk of having the screen scraping parsers broken.

Hypothetical operators come in all shapes and sizes, but we've had a
show of hands here from a set of actual operators who find this
functionality useful in their daily workflow, and expect their peers
would as well. 

There is a wide range of scenarios that are addressed by the proposal in
it's current form, including:
    
    * An engineer actively troubleshooting a router connected to a large
    Internet Exchange wishing to tell the rest of the peers a human is
    on it (and avoid the mail flood of "you're flapping!")

    * An automated system "enriching" the session termination with ticket
    related metadata to allow a user exploring a log to find context
    
    * A set of default messages that could be implemented by a vendor
    depending on which cli command triggered the shutdown to
    transparently enrich the remote side with information
    
It is essentially an incarnation of the old 'wall' command from UNIX,
with users substituted by peers, and the delivery mechanism being BGP.
The aim is to enable an inter-domain version of:

    # echo "brb, kernel update" | wall

Nothing more.
    
Any implications on screenscrapping are an artifact of implementation,
and vendors seeking a consistent machine-parsable CLI can send the
message directly into the log instead of modifying the output of a CLI
status description command. JunOS is a good example of how
screenscraping can be avoided with their "| output xml" feature.
Shutdown will be just another leaf in such XML output.

This proposal does not aim to solve all challenges of inter-domain
operations orchestration, but to specifically provide a tool to annotate
an unexpected event to ease the triaging process by a human operator. 

In its current form, it provides an ideal fit for this purpose, while
leaving enough flexibility to experiment with structured communications
for those who intend to use BGP for general inter-domain operations
orchestration signaling.

> As to what's the point of this discussion ... is to not change format
> of NOTFICATION as per 4271 yet define someting even if not structured
> to be machine readable.

We're updating 4486, please try to keep up.

Kind regards,

Job