Re: [Idr] community of the day - common header

"Jakob Heitz (jheitz)" <jheitz@cisco.com> Thu, 22 September 2016 01:58 UTC

Return-Path: <jheitz@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FCD412B15C for <idr@ietfa.amsl.com>; Wed, 21 Sep 2016 18:58:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.838
X-Spam-Level:
X-Spam-Status: No, score=-16.838 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-2.316, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ovEWyH7WB8vN for <idr@ietfa.amsl.com>; Wed, 21 Sep 2016 18:58:34 -0700 (PDT)
Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A47F12B466 for <idr@ietf.org>; Wed, 21 Sep 2016 18:58:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2039; q=dns/txt; s=iport; t=1474509512; x=1475719112; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=zZlglJ8CMtSrVwaSFq3URngyOXlzT4NESHp+sU0KvbY=; b=epAVyRdXPZ8x8OHz0fSNDQgEaQB1dwDJpDIUnZv8ir3lxgxSMj6c3Y/8 HWM9cj59hctrOUpmIFMQAfux4xCp1oOqIyxIH64Vh1b0LatYxklOj0DnH RvXhLd8alRBMAswFvNNa094GdN9fZdF2KVJjXtfWoPzN/Bect7UfNCytm Y=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0CoAQDIOeNX/51dJa1eGgEBAQECAQEBAQgBAQEBgzsBAQEBAR5XfAeNLKtFggQZC4V6AoFnOBQBAgEBAQEBAQFeHAuEYQEBAQQBAQE3NBcEAgEIEQQBAR8JBycLFAkIAgQTCAyINw67FQEBAQEBAQEBAQEBAQEBAQEBAQEBARcFhjeEVIoiBZl1AYYmiTSPc4xng3sBHjaFBXKFcwF+AQEB
X-IronPort-AV: E=Sophos;i="5.30,376,1470700800"; d="scan'208";a="326667603"
Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 22 Sep 2016 01:58:31 +0000
Received: from XCH-ALN-011.cisco.com (xch-aln-011.cisco.com [173.36.7.21]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id u8M1wVou031432 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for <idr@ietf.org>; Thu, 22 Sep 2016 01:58:31 GMT
Received: from xch-aln-014.cisco.com (173.36.7.24) by XCH-ALN-011.cisco.com (173.36.7.21) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 21 Sep 2016 20:58:31 -0500
Received: from xch-aln-014.cisco.com ([173.36.7.24]) by XCH-ALN-014.cisco.com ([173.36.7.24]) with mapi id 15.00.1210.000; Wed, 21 Sep 2016 20:58:30 -0500
From: "Jakob Heitz (jheitz)" <jheitz@cisco.com>
To: "idr@ietf.org" <idr@ietf.org>
Thread-Topic: [Idr] community of the day - common header
Thread-Index: AQHSChptGVptntK9JESk+FZHNSW2r6BwjkcAgAEQToCAAAMOgIAABGGAgAANEgCAAAUvgIAAAakAgAdycgCAANdPgIAKrJPw
Date: Thu, 22 Sep 2016 01:58:30 +0000
Message-ID: <4166dc4d49e944cba2ddfad3896cf8e9@XCH-ALN-014.cisco.com>
References: <20160908214031.GA23544@pfrc.org> <20160908231840.GB16775@puck.nether.net> <20160909153317.GC8370@pfrc.org> <8C072797-55A7-4D1A-87E4-67551953EF22@puck.nether.net> <20160909155952.GE8370@pfrc.org> <20160909164640.GE79185@Space.Net> <20160909170513.GE12105@pfrc.org> <20160909171110.GF79185@Space.Net> <alpine.DEB.2.02.1609141250080.1477@uplift.swm.pp.se> <m27faedp12.wl-randy@psg.com>
In-Reply-To: <m27faedp12.wl-randy@psg.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [128.107.151.44]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/osQlB27xpEK9o1vFEqugiDhxna4>
Subject: Re: [Idr] community of the day - common header
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 22 Sep 2016 01:58:36 -0000

https://tools.ietf.org/html/draft-heitz-idr-large-community-04
as approved by the WG for adoption does not share a common header
with any other BGP attribute. Judging from emails to the list,
there is widespread support for keeping it that way.

The first 7 attributes were added to BGP by RFC 1654 in 1994.
2 are reserved. 24 attributes have been added in the 22 years since.
There are 223 attribute codes left. At that rate we will run out in
over 200 years. And then we can define a common header under which
to define another 200 years of attributes.

I understand that there have been 3 "incidents" in the past,
caused by BGP bugs regarding attribute handling:
 o Corruption of unknown attributes,
 o Attr 128 ATTR_SET handling,
 o leak of confed ASN in AS4-PATH.
This has lead to many ASes filtering all unrecognized or unnecessary
BGP attributes.
RFC7606 will now prevent session resets under these and similar conditions.

If we define a header today under which to group a set of new 
BGP attributes, then if there is a bug in just one of them,
then ASes will filter the common header, thus filtering every
attribute under it.

I think large communities should be a BGP attribute not under
another header.

Thanks,
Jakob.


> -----Original Message-----
> From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Randy Bush
> Sent: Wednesday, September 14, 2016 4:45 PM
> To: Mikael Abrahamsson <swmike@swm.pp.se>
> Cc: idr@ietf.org
> Subject: Re: [Idr] community of the day - common header
> 
> > Since we don't have that, then now is the time to standardize a "does
> > the same as we have today for 16bitAS but for 32bitAS" which involves
> > as small code, operational and standardization changes as possible, so
> > code can get into operator routers ASAP.
> >
> > So get it out the door now. Not in 6-12 months time. Now. ASAP.
> 
> yes!
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr