Re: [Idr] WGLC for draft-ietf-idr-rfc5575bis-04

Job Snijders <job@ntt.net> Mon, 16 October 2017 16:30 UTC

Return-Path: <job@instituut.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 619C1133023 for <idr@ietfa.amsl.com>; Mon, 16 Oct 2017 09:30:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.418
X-Spam-Level:
X-Spam-Status: No, score=-1.418 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z5z3WmSTemsa for <idr@ietfa.amsl.com>; Mon, 16 Oct 2017 09:30:52 -0700 (PDT)
Received: from mail-wm0-f49.google.com (mail-wm0-f49.google.com [74.125.82.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A209A126E64 for <idr@ietf.org>; Mon, 16 Oct 2017 09:30:52 -0700 (PDT)
Received: by mail-wm0-f49.google.com with SMTP id f4so5182788wme.0 for <idr@ietf.org>; Mon, 16 Oct 2017 09:30:52 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=L/C7yHNr6Jwjmfgj2ru+yP/WRiQijt5j1dv/gtFJyCA=; b=rQV7ybcK/PCbx5pNwLlPAeunIuR2R8EA+rAhImbHWCEanF1UrPpqhW7QX4Pa9iXLPc ZT/4JaCYn9A4qcZIk7T3jhrY99pV+YDSC/zuGz0i8h0wDVFV/pghifUBecEGvnob7ZJY kEHWpNMlG1KAUud6wAwZZlAJbsvztGcrUmXt73qfwAc9jI31fqQuRT7fBzm52Wi67Qg7 so2Bm4XSri3CyNEuaAXvQ8OVy0yp2xz0DTef18bKDTvR0uelueh7n+b36ty0BF966ET6 oMi0DOYHgXWqVe12cYWHXk//sGINo3MWrW5iGONl8dtsdPW9FLohqWORUKNagqoBCwsE hNqg==
X-Gm-Message-State: AMCzsaVWarSouPMCOLnZWK/416+II3u8LbGDIHFaHAd4xapDUI5sLGFM zyf8M7e7gFJYnwnwtLcil+miuw==
X-Google-Smtp-Source: AOwi7QAw8xt81VT/ZuPaOjsNuzqwOaykNY0YGX7VKv+UVbAKsuq52ErOXlJkjB6Evao+obmAMNkFJg==
X-Received: by 10.80.166.133 with SMTP id e5mr13459905edc.51.1508171450789; Mon, 16 Oct 2017 09:30:50 -0700 (PDT)
Received: from localhost ([2001:67c:208c:10:e5a3:5934:947a:210d]) by smtp.gmail.com with ESMTPSA id x10sm6013984edb.24.2017.10.16.09.30.49 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 16 Oct 2017 09:30:49 -0700 (PDT)
Date: Mon, 16 Oct 2017 18:30:46 +0200
From: Job Snijders <job@ntt.net>
To: Christoph Loibl <c@tix.at>
Cc: draft-ietf-idr-rfc5575bis@ietf.org, idr@ietf.org
Message-ID: <20171016163046.mxgeamcgdx6xhzoh@hanna.meerval.net>
References: <00A83D9A-C00E-4A91-8007-421067DCE879@juniper.net> <20171014153402.GY19142@Vurt.local> <55EAFCD6-4783-4DDD-B1B9-30AF18FD2342@tix.at> <20171016120520.GM19142@Vurt.local> <5B6788C8-6E39-4CF0-880A-2D35DCCEEB82@tix.at>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <5B6788C8-6E39-4CF0-880A-2D35DCCEEB82@tix.at>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: NeoMutt/20170912 (1.9.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/jk78bKLStwa64DmeAFTDEgS8OGs>
Subject: Re: [Idr] WGLC for draft-ietf-idr-rfc5575bis-04
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Oct 2017 16:30:54 -0000

On Mon, Oct 16, 2017 at 01:00:26PM +0000, Christoph Loibl wrote:
> > I'm sorry, but I still don't understand. 9.0.0.0/8 and 10.5.0.0/24 don't
> > overlap, shouldn't they both be installed as ACLs? Maybe I don't
> > understand when this algorithm is used?
> 
> Both are actually installed (but the order is determined). This
> algorithm is used for sorting the ACL terms. 

Ah! I see now, thank you for your patience and clarification. For some
reason I derailed into the LPM routing mindset. OK, back to the original
issue. 

OLD: For IP prefix values (IP destination and source prefix) precedence
     is given to the lowest IP value of the common prefix length; if the
     common prefix is equal, then the most specific prefix has
     precedence

PERHAPS:
    For IP prefix values (destination or source) the common high-order
    bits are compared. The number of common bits to compare is the
    lowest prefix-length of the two prefixes. If the high-order bits are
    equal, the prefix with the longer prefix-length has higher
    precedence. If the common high-order bits are different, the prefix
    with the lowest numeric value takes higher precedence.

> >>>   Another question, and I realise this is a big ask: Is it
> >>>   possible to replace the pseudocode with an actual code example?
> >>>   Pseudo languages tend to not follow any specific set of rules
> >>>   and therefor oftentimes
> >> 
> >> IF the group thinks we shall use this - please carefully analyse
> >> the behaviour. I am sure I have hidden some bugs in there and I am
> >> sure it is possible to beautify what I came up with (I am not the
> >> programmer).
> > 
> > I think this is a very good direction and I hope the WG sees this as
> > path forward too.
> > 
> > In the I-D I'd leave out the unittest part for the sake of brevity.
> > I'd also specify what version of python this code was tested
> > against. And of course you can include a link to that github
> > repository in the I-D.  For other drafts we've taken a similar
> > approach.
> 
> Can you point me to some I-Ds that use a similar approach - maybe one
> can learn from that.

You can put the relevant python code inside CDATA block to preserve
formatting.

    <figure>
    <artwork><![CDATA[
    
    my python code ..

    ]]></artwork>
    </figure>

And in the paragraph introducing the code reference the full codebase as
following:

    The full python implementation of 'flowspec-cmp' is available at
    <eref target="https://github.com/stoffi92/flowspec-cmp">https://github.com/stoffi92/flowspec-cmp</eref>.

Be sure to add something liberal like a BSD-2 Clause LICENSE file to the
repository.

Kind regards,

Job