Re: [Idr] I-D Action: draft-sas-idr-maxprefix-inbound-02.txt

Gyan Mishra <hayabusagsm@gmail.com> Thu, 15 April 2021 18:34 UTC

Return-Path: <hayabusagsm@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F9D63A2A54 for <idr@ietfa.amsl.com>; Thu, 15 Apr 2021 11:34:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.087
X-Spam-Level:
X-Spam-Status: No, score=-2.087 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 803B_N2rcDEN for <idr@ietfa.amsl.com>; Thu, 15 Apr 2021 11:34:27 -0700 (PDT)
Received: from mail-pj1-x1034.google.com (mail-pj1-x1034.google.com [IPv6:2607:f8b0:4864:20::1034]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDC023A2A57 for <idr@ietf.org>; Thu, 15 Apr 2021 11:34:27 -0700 (PDT)
Received: by mail-pj1-x1034.google.com with SMTP id kb13-20020a17090ae7cdb02901503d67f0beso1816378pjb.0 for <idr@ietf.org>; Thu, 15 Apr 2021 11:34:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=39FmA/BBH90PX1BYGThZyFkd/4FvSblJnuzXNhu4fLw=; b=e2dp8fsRP9HU2LwB/PL79l5AabCUFBl7BIs1Igm7/z12bkMBb44zqyaRtzJLWXjTa3 NO2yzFku0q/LqGEnPkHwrtBFy8hV7xxEpDpA/VLG7uQ83wWy3q5iEpJeb8Q8WxspjMdn AD3zrwDBIRKEz7a/EL1Gw7spgcJBfURiFGBZUXcHFMgHtWUFnG0u9gxTLglbVutmvBoe Ex0Q3hCRjtggEZBQuOeE8+f6jJg8oJ0Bjqfv2n30ChSup+pPUSZZO5s9FgG/6/qUpMzn SXLgHucG6znKTpk6zK4OdbsWGZGecP6XObQGUXpyjU2dMazkvm/ZycyNWbwYMJdwxEuf CbPw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=39FmA/BBH90PX1BYGThZyFkd/4FvSblJnuzXNhu4fLw=; b=fHEoommFHWFhsbqGCtqKuI/AVfGyiAPoC9dXCUTn6abWkxymlnSRePl6EKITbtS2QD 5UEVhDWJPvbMZYPZlO8FruGKW4yTc6aUdO8oVe0bHJZcLBWLXIuOBLbhTSpRSai9f3Ou DgfOIKH5Ltwhgdg0TK/MKdom14Jkqr2c/K8Bfe9Jeh3Ax2qhGZZf7zPs0pO1UzbajxWh ICedQnlO3yo8ZsTSsPpVPu3rNNH22gV0Rm8Wc2HBBue7KD8M5smOyktGm9QObxxtWc7D 14yHH+y9mOjhrw+wJjYNcmSN3A/qYg+io9rsQqub5CnPIkaDWal9+z1ra9tq/PZPqGYL KEpA==
X-Gm-Message-State: AOAM5316bK2na4TIY49w8FiXAmPTgGlkk5N24AFD77zud1lS9y9sQbOb 1A0xa4Mve6uXt18ePdmFEjbnb+wepNP7wBVUXjM=
X-Google-Smtp-Source: ABdhPJz0y76fkbWpt0bNHSfJNOrxlUfBnI2vyLBrlZbxjT5QX2rzNjfOXNZwazdmmDAWwOanW0VXGv0xjq6hk8TWDfM=
X-Received: by 2002:a17:90a:7a8b:: with SMTP id q11mr5437214pjf.215.1618511666060; Thu, 15 Apr 2021 11:34:26 -0700 (PDT)
MIME-Version: 1.0
References: <161843563034.11054.13811966622190622752@ietfa.amsl.com> <CAOj+MMH=cCgtn7cL=HvOjQOMH1B9tmjOYOT04jXE9oky4SuevQ@mail.gmail.com>
In-Reply-To: <CAOj+MMH=cCgtn7cL=HvOjQOMH1B9tmjOYOT04jXE9oky4SuevQ@mail.gmail.com>
From: Gyan Mishra <hayabusagsm@gmail.com>
Date: Thu, 15 Apr 2021 14:34:15 -0400
Message-ID: <CABNhwV3X58503wNC+pXuaTiAAzEOuvvM=zemRj8EskDSEUB+Sg@mail.gmail.com>
To: Robert Raszuk <robert@raszuk.net>
Cc: "idr@ietf. org" <idr@ietf.org>, job@fastly.com, maelmans@juniper.net, max@stucchi.ch
Content-Type: multipart/alternative; boundary="000000000000eba4cf05c0071cc8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/hbqCyIUG-i2LqVWlFct33W4AQRs>
Subject: Re: [Idr] I-D Action: draft-sas-idr-maxprefix-inbound-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Apr 2021 18:34:32 -0000

Hi Robert

I agree “soft-reconfigure inbound” should be mentioned.

With route refresh version 1 RFC 2918 the adj-rib-out or  adj-rib-in
dynamically with a soft clear in or out CLi command.

With RFC 7513 provided an enhancement to dynamically update the  adj-rib
without a CLI soft clear.

The cisco “soft-reconfigure inbound” existed for a long time prior to RFC
2918 where it creates an additional pre policy RIB, essentially a copy of
the BGP rib - pre policy.  Soft-reconfigure was the way Cisco was able to
do soft clear so you don’t have to hard clear a peer.

Once RFC 2918 came out some operators ripped out the soft-reconfigure,
however a lot of operations kept in place for troubleshooting BGP policies
issues looking at the “pre policy” RIB in and out.

For maxim prefix with  soft-reconfigure configured on a peer, I think the
pre policy rib could change or be impacted so we should definitely include
in the draft.  Since soft is pre policy and maximum prefix acts on
adj-rib-in post policy I am guessing that it may not impact the pre policy
rib.

Kind Regards

Gyan

On Thu, Apr 15, 2021 at 8:17 AM Robert Raszuk <robert@raszuk.net> wrote:

> Authors,
>
> I think I have one question or suggestion.
>
> As you all  know some implementations allow you to explicitly force BGP
> speaker to keep (pre-policy) all routes/paths received.
>
> Example:
>
> neighbor 192.168.1.1 soft-reconfiguration inbound
>
> The draft does not seem to comment on this case yet if implementation
> maintains the above behaviour
> at least some of the justifications for the document is gone.
>
> I think that draft should at least mention such behaviour, not force to
> change it however put some light that if
> configured by the operator some of the benefits of inbound prefix limit
> will not be fully effective.
>
> Many thx,
> Robert.
>
>
>
>
>
>
>
> On Wed, Apr 14, 2021 at 11:27 PM <internet-drafts@ietf.org> wrote:
>
>>
>> A New Internet-Draft is available from the on-line Internet-Drafts
>> directories.
>>
>>
>>         Title           : BGP Maximum Prefix Limits Inbound
>>         Authors         : Melchior Aelmans
>>                           Massimiliano Stucchi
>>                           Job Snijders
>>         Filename        : draft-sas-idr-maxprefix-inbound-02.txt
>>         Pages           : 8
>>         Date            : 2021-04-14
>>
>> Abstract:
>>    This document describes mechanisms to limit the negative impact of
>>    route leaks [RFC7908] and/or resource exhaustion in BGP [RFC4271]
>>    implementations.
>>
>>
>>
>> The IETF datatracker status page for this draft is:
>> https://datatracker.ietf.org/doc/draft-sas-idr-maxprefix-inbound/
>>
>> There are also htmlized versions available at:
>> https://tools.ietf.org/html/draft-sas-idr-maxprefix-inbound-02
>> https://datatracker.ietf.org/doc/html/draft-sas-idr-maxprefix-inbound-02
>>
>> A diff from the previous version is available at:
>> https://www.ietf.org/rfcdiff?url2=draft-sas-idr-maxprefix-inbound-02
>>
>>
>> Please note that it may take a couple of minutes from the time of
>> submission
>> until the htmlized version and diff are available at tools.ietf.org.
>>
>> Internet-Drafts are also available by anonymous FTP at:
>> ftp://ftp.ietf.org/internet-drafts/
>>
>>
>> _______________________________________________
>> I-D-Announce mailing list
>> I-D-Announce@ietf.org
>> https://www.ietf.org/mailman/listinfo/i-d-announce
>> Internet-Draft directories: http://www.ietf.org/shadow.html
>> or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
>>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>
-- 

<http://www.verizon.com/>

*Gyan Mishra*

*Network Solutions A**rchitect *

*Email gyan.s.mishra@verizon.com <gyan.s.mishra@verizon.com>*



*M 301 502-1347*