Re: [Idr] I-D Action: draft-ietf-idr-route-leak-detection-mitigation-10.txt

"Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov> Mon, 22 October 2018 21:58 UTC

Return-Path: <kotikalapudi.sriram@nist.gov>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D8F1130DF6; Mon, 22 Oct 2018 14:58:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.47
X-Spam-Level:
X-Spam-Status: No, score=-2.47 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1GNdkttGycFN; Mon, 22 Oct 2018 14:57:58 -0700 (PDT)
Received: from GCC01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0091.outbound.protection.outlook.com [23.103.200.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1364130EB9; Mon, 22 Oct 2018 14:57:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=bZvCrle6yfudGpwsmTiQPd/Gu9dgA6JA4u6csCw6Bkw=; b=y79ymDFwka0MfPgAIxX2sG2IoCkGuDrm2VHTy+v9/fuBxKejE8qmWBXYFHRJ4ca4pSne3FX7+wjr3B/Aagup7Sum5WLZ+FtS7wpmTA4HplCc/Q2QMgoicYRmfx27kpKN3kw1lrg5+CbUP7MjpIAeFuO2/qI0C24M0pu+nQZOnA8=
Received: from SN6PR0901MB2366.namprd09.prod.outlook.com (52.132.115.159) by SN6PR0901MB2367.namprd09.prod.outlook.com (52.132.115.160) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1250.29; Mon, 22 Oct 2018 21:57:55 +0000
Received: from SN6PR0901MB2366.namprd09.prod.outlook.com ([fe80::4da3:e6e9:3e69:1183]) by SN6PR0901MB2366.namprd09.prod.outlook.com ([fe80::4da3:e6e9:3e69:1183%6]) with mapi id 15.20.1250.028; Mon, 22 Oct 2018 21:57:55 +0000
From: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>
To: "idr@ietf.org" <idr@ietf.org>
CC: "idr-chairs@ietf.org" <idr-chairs@ietf.org>, Alexander Azimov <aa@qrator.net>
Thread-Topic: Re: [Idr] I-D Action: draft-ietf-idr-route-leak-detection-mitigation-10.txt
Thread-Index: AdRqTRxk2IJj+n/JRoSo+S8C7L9Qpg==
Date: Mon, 22 Oct 2018 21:57:55 +0000
Message-ID: <SN6PR0901MB23669337FD49CBD274AA148F84F40@SN6PR0901MB2366.namprd09.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=kotikalapudi.sriram@nist.gov;
x-originating-ip: [129.6.140.161]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; SN6PR0901MB2367; 6:VcBzXiGd5qkMZ7Ie1msdsqaYebCvo7Gb1Fhvm+EFry3zzr7YgcKRZMkhzE2zBxzyR+sXogbJyWWlq36rbFGX/ZWtQXC4GdLJw8NDVJOOyTav9V7LXnHMeDa8Da0TWbFQBjSHYImd43QlKMfSp+PJJ5uifda79475ilEm2Q2Oyxclb+mZIw/MfQYlE5qLHHFs2N2KXgavH2ZJkUY5QXsMzEP1C+2Yxmv8coUTW5BB2pFwHYwn8dFOBOlKvgNNhvo9MBsy9Kmzkxiuip2xR+hBmAyumhPPJcHI8Fx4y+mvZ8NLDe48pUmHtAQUEgIFo0H/adKRHGOe1MWkRTwX3THnnewD6WjLRSdC02pElFzM7tMEBN7UptNmvNL60vnLPnTs9dAe2wlgxGiJZEeSNYwoyO5C9/NXGT2UIl2DpNgpNFhyOZKlsu7y70EwwYP2uP+T6BTEPvip8Ug9lP5TLBBIPA==; 5:pLSRzkf+JuZrMJcJIZJuHGL/GlJqmi25rrU2Z6t9EwRd/9tGBkqpwm1lmGIhlcDBfgq8JDfS4ljmTw0rA70At762nqWvExQQsoyEuEJYLyAbQkgX/EaHVV9m3xwGgKADdKx0Z7NO3O1TI2Vyn9wgZ/sAaOmJpIfviYtX1/tL4mo=; 7:3Jci1VT9hyvKna4IQwy2rzzf3HWOjtAV/Q79/OhQafCvAdoEBf/oep5AIsCuBQedzRploazJ4+GnjLcDqQ+bpNXAa2Eq89MInbDl5YcDGEioKUtb/RPivltR9Sq5/0/tvsMD7OPhwmIdpD0ZqnXiBu7G9b/+v3kJA+Sh67UetWMpOuQB3tTGxXVpg/KlXxd5N7JuQ5ewpQdvImCAjk8wW+mV3oCnrUfTq5Lt0jijYghePArxY5ZakDdaJKAWPDsM
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: eb3791a7-f862-47c0-2d98-08d638696bf2
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:SN6PR0901MB2367;
x-ms-traffictypediagnostic: SN6PR0901MB2367:
x-microsoft-antispam-prvs: <SN6PR0901MB236706156C38F41716FCF63184F40@SN6PR0901MB2367.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(2006787148836)(65766998875637)(21748063052155)(28532068793085)(190501279198761)(227612066756510);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231355)(944501410)(52105095)(3002001)(10201501046)(6055026)(148016)(149066)(150057)(6041310)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:SN6PR0901MB2367; BCL:0; PCL:0; RULEID:; SRVR:SN6PR0901MB2367;
x-forefront-prvs: 08331F819E
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(366004)(136003)(39860400002)(376002)(346002)(199004)(189003)(6306002)(81166006)(606006)(74316002)(105586002)(81156014)(7696005)(4326008)(1730700003)(5660300001)(2900100001)(71200400001)(86362001)(476003)(71190400001)(486006)(8676002)(2906002)(68736007)(6916009)(5640700003)(3846002)(102836004)(97736004)(186003)(229853002)(4001150100001)(6436002)(316002)(5250100002)(9686003)(2501003)(966005)(790700001)(7736002)(8936002)(26005)(5630700001)(54906003)(478600001)(6246003)(2351001)(54896002)(99286004)(53936002)(14444005)(236005)(256004)(14454004)(106356001)(6116002)(55016002)(6506007)(39060400002)(25786009)(33656002)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR0901MB2367; H:SN6PR0901MB2366.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts)
x-microsoft-antispam-message-info: dzmwILvC39AgxBR584XmbitE2FB9eDMPhAu5FWZ029ms5C2Z8oCD/KdNnSztWdWjaeBjy+3j1iiVUwkpzpQqhp4CrQLvttpzv+KCqVMifEOVcLQJEFhNgPdz+Qn5k5pf6EmZ2OLwJSeCB3CD5PloFyKsPFLvLbJcBi8IXNgcXrBar4a0EA5qj+Mjfu30l7k18SY+IcxeZxvJ7bMbvtXzUDvZimmsvHBpAKAtGaE8I++MpnTkF+qtOnLQYYf+wG9TsBonGLkCh1fkfZ4b9Cz8obDPsE/W73PD5h65q3FyD6ukH5COslQaHJYfHj0Zk/tYeGm3kpXvaAkvi73BjxFfc1GH2rp8+wu4SrLUpicPN5I=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_SN6PR0901MB23669337FD49CBD274AA148F84F40SN6PR0901MB2366_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-Network-Message-Id: eb3791a7-f862-47c0-2d98-08d638696bf2
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Oct 2018 21:57:55.2018 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR0901MB2367
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/y8FGM9QYmKGCoh4pDIUFpXTROPo>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-route-leak-detection-mitigation-10.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Oct 2018 21:58:09 -0000

Very substantial changes made from -09 to -10 version:
- Changes in the semantics of the RLP mechanism and the detection-mitigation algorithms
- In the draft, we're proposing to use BGP Large Community (transitive) to carry info about RLP
        * However, we are looking for WG feedback about the options -- Regular Community vs. Large vs. Extended?
        * See slides 19-24 for some details on these options (link to the slides below).

Authors' Team Discussion Slides may be helpful to see helpful graphics, scenario analyses:
https://www.nist.gov/sites/default/files/documents/2018/10/22/rlp_using_bgp_community-v4.pdf

Looking forward to your comments. Thanks.

Sriram

--------------------------------------------------------------

A New Internet-Draft is available from the on-line Internet-Drafts directories.

This draft is a work item of the Inter-Domain Routing WG of the IETF.



        Title           : Methods for Detection and Mitigation of BGP Route Leaks

        Authors         : Kotikalapudi Sriram

                          Alexander Azimov

        Filename        : draft-ietf-idr-route-leak-detection-mitigation-10.txt

        Pages           : 11

        Date            : 2018-10-22



Abstract:

   Problem definition for route leaks and enumeration of types of route

   leaks are provided in RFC 7908.  This document describes a solution

   for detection and mitigation route leaks which is based on conveying

   route-leak protection (RLP) information in a Border Gateway Protocol

   (BGP) community.  The RLP information is carried in a new well-known

   transitive BGP community, called the RLP community.  The RLP

   community helps with detection and mitigation of route leaks at ASes

   downstream from the leaking AS (in the path of the BGP update).  This

   is an inter-AS (multi-hop) solution mechanism.  This solution

   complements the intra-AS (local AS) route-leak avoidance solution

   that is described in ietf-idr-bgp-open-policy draft.



URL: https://tools.ietf.org/html/draft-ietf-idr-route-leak-detection-mitigation-10

Diff: https://www.ietf.org/rfcdiff?url2=draft-ietf-idr-route-leak-detection-mitigation-10