Re: [Idr] new ID on expansion of private use ASN range

Jon Mitchell <jrmitche@puck.nether.net> Tue, 03 July 2012 13:39 UTC

Return-Path: <jrmitche@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E32E21F87C6 for <idr@ietfa.amsl.com>; Tue, 3 Jul 2012 06:39:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.912
X-Spam-Level:
X-Spam-Status: No, score=-5.912 tagged_above=-999 required=5 tests=[AWL=0.087, BAYES_00=-2.599, J_CHICKENPOX_23=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0wVsPjoIHmhP for <idr@ietfa.amsl.com>; Tue, 3 Jul 2012 06:39:42 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [IPv6:2001:418:3f4::5]) by ietfa.amsl.com (Postfix) with ESMTP id 764BF21F87C9 for <idr@ietf.org>; Tue, 3 Jul 2012 06:39:42 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by puck.nether.net (8.14.4/8.14.4) with ESMTP id q63DdmLe026892 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 3 Jul 2012 09:39:48 -0400
Received: (from jrmitche@localhost) by puck.nether.net (8.14.4/8.14.4/Submit) id q63DdmvP026891; Tue, 3 Jul 2012 09:39:48 -0400
Date: Tue, 03 Jul 2012 09:39:48 -0400
From: Jon Mitchell <jrmitche@puck.nether.net>
To: Jeffrey Haas <jhaas@pfrc.org>
Message-ID: <20120703133948.GB22598@puck.nether.net>
References: <20120702164834.GB13713@puck.nether.net> <20120702184737.GV18361@pfrc> <20120703015521.GB22452@puck.nether.net> <20120703021238.GM18361@pfrc>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <20120703021238.GM18361@pfrc>
User-Agent: Mutt/1.5.21 (2010-09-15)
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.6 (puck.nether.net [204.42.254.5]); Tue, 03 Jul 2012 09:39:48 -0400 (EDT)
Cc: idr@ietf.org
Subject: Re: [Idr] new ID on expansion of private use ASN range
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/idr>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Jul 2012 13:39:43 -0000

[JM] inline...

On Mon, Jul 02, 2012 at 10:12:38PM -0400, Jeffrey Haas wrote:
> Jon,
> 
> On Mon, Jul 02, 2012 at 09:55:21PM -0400, Jon Mitchell wrote:
> > > I suggest that we leave 65535 alone as a reserved AS.
> > 
> > [JM] I think it should be clarified either way, and I think adding it to
> > the private use ASN range with this draft is the better approach for the
> > following reason.  I consider this an after-the-fact registration (RFC
> > 5226 section 6.3) since this ASN seems to have widespread (mis-)use as
> > many implementations strip it using their remove private ASN knobs and
> > various networks undoubtedly have it deployed since it seems more than
> > since a large amount of Internet documentation including RFC 1930 seem
> > to include it as a private Use ASN.  Also, if this document progress,
> > implementors will need to update their knobs and documentation anyway,
> > so they, IETF and IANA can all be on the same page, allowing this ASN to
> > be stripped if there are vendors that don't do it today (note even some
> > vendors with published documentation stating that private ASN range is
> > 64512-65534 strip 65535 with their remove private knobs).
> 
> A strong part of my recommendation has to do with the fact that this AS has
> assumed a level of "magic" in some implementations.  In the case of much
> older implementations on antique hardware may, in fact, be a magic internal
> value as it is UINT16_MAX.  As a WG, we can deal with such things two ways:
> 
> 1. Good grief, your code is that old and broken? Replace it/the hardware.
> Let's use it!
> 2. We don't really need that one extra AS lying around.  Assume it may
> potentially be toxic and try to pay no attention to the man behind the
> curtains.
> 
> I will agree with anyone that the above opinion is one of strong cynicism.
> :-)

[JM] This is interesting, however given these ASNs are in use today and
there is widespread mis-understanding that the 65535 ASN is a private
use ASN already based on widespread vendor and other networking
documentation, I think publishing this informational draft to
officially allocate it as such is not going to cause a rush of changes
to use it on devices this old.  However new implementors would have
clear guidance on what a private ASN if they are trying to comply with
this draft/RFC if/when it's published and therefore could avoid this
leaving this open to error in new implementations.

> > Can I suggest your alternative proposal for
> > folks to comment on then is 4293918720 - 4294967295 (maintaining ~1M) or
> > are you suggesting a different range location or sizing?
> 
> If you want ~1M, pick 2^20 addresses.  You could probably even just do 2^16
> and have most providers happy.  (2^16 was the number I had in mind for my
> draft.)  This lets you align the private AS number at a convenient as.dot
> boundary.  I could even forsee someone's CLI saying PRIVATE.<num> :-)

[JM]  Although 65K private ASNs meet our near term needs, BGP is being
used further and further down in the DC, with proposals that push it
even to the host/hyper-visor.  Therefore, given the large amount of
space available, I think it makes sense to not limit this so artifically
and be frustrating operators again 5-10 years from now as more and more
creative network designs are proposed.  As for any implementation hoping
to make more asdot friendly implementations and encourage it's use, I
think this sounds like a good reason not to make the range 16 bits!