Re: [Idr] draft-ymbk-sidrops-rov-no-rr

Gert Doering <gert@space.net> Mon, 15 November 2021 18:39 UTC

Return-Path: <gert@space.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D73733A0791 for <idr@ietfa.amsl.com>; Mon, 15 Nov 2021 10:39:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=space.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OuGZwOKKihpJ for <idr@ietfa.amsl.com>; Mon, 15 Nov 2021 10:39:23 -0800 (PST)
Received: from gatekeeper1-relay.space.net (gatekeeper1-relay.space.net [IPv6:2001:608:3:85::38]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6A703A0798 for <idr@ietf.org>; Mon, 15 Nov 2021 10:39:22 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=space.net; i=@space.net; q=dns/txt; s=esa; t=1637001563; x=1668537563; h=date:from:to:cc:subject:message-id:references: mime-version:in-reply-to; bh=BVb1X5g3re2PzegD0YIYVWYd6QzEqsJxLU+RfsYc7+k=; b=jB0jFCs9P9fV8Ny/rjEPXvN/tj3qlhYMtX3VAX/bO0ay7zoUF9TFvm2/ ojexc+By7W0UY4bbxUfCNJ8XvV0yxmUtv4KdEVcC8GRSXAwifrIpIevds shc2+HVmnPtlba21CWDQuk5wCJDyY3+UDzEl02upHe/OVXc0OJYflpx0k +17OdG5rV7w10SZqT/rWLLnRtvrnknBhr3gYy+NZYhsRueM9Jpw+WFznC 72sc6EevUKuvMYHGI50w4nKJsLkXJs5gD8Ev2P/9pIG5w6W/pjnBnPr5R OUy6MherHbIXK6YtTxuJnwwvk5fWMKOddArU7it7GlvTm0dNq/flGvIwh w==;
X-SpaceNet-SBRS: None
Received: from mobil.space.net ([195.30.115.67]) by gatekeeper1-relay.space.net with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 15 Nov 2021 19:39:19 +0100
X-Original-To: idr@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id E660A4245E for <idr@ietf.org>; Mon, 15 Nov 2021 19:39:18 +0100 (CET)
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
X-SpaceNet-Relay: true
Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id A66D340EDB; Mon, 15 Nov 2021 19:39:18 +0100 (CET)
Received: by moebius4.space.net (Postfix, from userid 1007) id 9F82BC6139; Mon, 15 Nov 2021 19:39:18 +0100 (CET)
Date: Mon, 15 Nov 2021 19:39:18 +0100
From: Gert Doering <gert@space.net>
To: Robert Raszuk <robert@raszuk.net>
Cc: Randy Bush <randy@psg.com>, "idr@ietf. org" <idr@ietf.org>
Message-ID: <YZKpVnY/EORywfIQ@Space.Net>
References: <E1mmcrF-0007bA-27@ran.psg.com> <m28rxptrw8.wl-randy@psg.com> <CAOj+MMHUZ26KTQje5ZO0wVubHMfvvb3QwZZm_x+TmTpTChdUdw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CAOj+MMHUZ26KTQje5ZO0wVubHMfvvb3QwZZm_x+TmTpTChdUdw@mail.gmail.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/pg5R9eIdFLt0fDZmQxmJ4eIUbiY>
Subject: Re: [Idr] draft-ymbk-sidrops-rov-no-rr
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Nov 2021 18:39:28 -0000

Hi,

On Mon, Nov 15, 2021 at 03:45:05PM +0100, Robert Raszuk wrote:
>    When RPKI data cause one or more paths to be dropped, withdrawn, or
>    merely not chosn as best path due to RPKI-based policy (ROV, ASPA,
>    etc.), those paths MUST be saved and marked so that later VRPs can
>    reevaluate them against then current policy.
> 
> 
> And how about the case when we have an inbound policy and today RPKI says
> this is a VALID path. Well tomorrow it may say it is INVALID for zoo of
> reasons. So the above paragraph no longer covers those cases as those VALID
> today would not be per the above definition (specified in section 4) in its
> original format kept in the Adj-Rib-In.

Those prefixes that are accepted "today" (for whatever RPKI status) are
not the problematic ones - those are already there, to be re-evaluated if
needed. 

Problematic is the stuff that the router forgot about, and now needs to
re-evaluate - without "soft in always", a route refresh is needed, which
is costly if the RTR database changes often.

So, yes, I support this draft.  Need to move over and subscribe there :-)

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279