Re: [Idr] Doubt noticed while looking at draft-uttaro-idr-bgp-oad-02.txt

Robert Raszuk <robert@raszuk.net> Wed, 12 July 2023 09:30 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCEE8C151AFC for <idr@ietfa.amsl.com>; Wed, 12 Jul 2023 02:30:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.086
X-Spam-Level:
X-Spam-Status: No, score=-7.086 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ORuywSU3m4D3 for <idr@ietfa.amsl.com>; Wed, 12 Jul 2023 02:30:04 -0700 (PDT)
Received: from mail-ed1-x52c.google.com (mail-ed1-x52c.google.com [IPv6:2a00:1450:4864:20::52c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8547CC15109D for <idr@ietf.org>; Wed, 12 Jul 2023 02:30:04 -0700 (PDT)
Received: by mail-ed1-x52c.google.com with SMTP id 4fb4d7f45d1cf-51f7fb9a944so1806319a12.3 for <idr@ietf.org>; Wed, 12 Jul 2023 02:30:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; t=1689154202; x=1691746202; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=HQiC4QjvLYmkETvTpGvzvdP3Q0o9lxEhl4f5vumBOq8=; b=WJbGtwQrD7dvq+W+BjxX/CM800FHobMi0JBHfj8AllfTLKOY/IW2/2R0c5M0tpswiC himcepya5kwhKUDGssbktv/Gb38UoMRykoJJhw0MbWkz5Ej38CG6nrOfFjUVnDZ1fCvv MhqUe48pTMPHpwxbzXCT0Vq/k/nbN4bbmCctrObVt9fmgqpnDrD4WX4bDIdbo2fMojoS CL07Tw9thr4LASS9M14MK2YZ04PYISUujwoafBjI13yyU2isLPdO6DQ69LZa1k2QGCcm xCRNWBeiKa/K8FaBYbcg48BDOlOffTzkbsja6543kyLSrsYtEX1u8RpArzEPbch0riKu TZXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1689154202; x=1691746202; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=HQiC4QjvLYmkETvTpGvzvdP3Q0o9lxEhl4f5vumBOq8=; b=knVLBHarUu1NEZ1PUrVN1ecdhfhLuYFrp2YYvKO2N9cu5Rn1e+NykQd44PsmI98FJz 5ePb8ulWUTcvK2tsqJQXFlydEIpPJKqR9S1X+dB5yEL/f1+GrVL89clDd7GqLDWBr8+V bVb+viAWS0xphcfXcoyRggtOrCJdkykToUQxL4xZQQs/pzwcGsArv6n0HMx6eeFnogqY qgYwWLWYo/5crAHW4mLt5hToufq+ySJwX+lOVhF/WP1xc8b7M4hd+Wl9pHzBMjBP8Fsi XSc17ZajYRc1cPAx+VEBKbayd5lIwnE+ynnLZ8PB57Pxf0A1pvoczvc5pSDn70AliFgJ leNA==
X-Gm-Message-State: ABy/qLYJTQrLdkidh/qoQ7wXXUlyume5P/www6rFuf3+DXku9XZWYk+T NE0i/sXwul9iX+2wfR/J1J8cnmxchSXgHSvfas+s5Q==
X-Google-Smtp-Source: APBJJlGUrw5Yf9IqkRKlByMBCqAAUXcLSh4XLzScrBlte8KMZ6I5XX7Fn+EM5r4mHkPUIDDvb018sIpXUMOh/z1g0GE=
X-Received: by 2002:a05:6402:6cf:b0:519:b784:b157 with SMTP id n15-20020a05640206cf00b00519b784b157mr16923632edy.12.1689154202035; Wed, 12 Jul 2023 02:30:02 -0700 (PDT)
MIME-Version: 1.0
References: <CAOj+MME2aYv8Qhry67eGmgK5toc86LBWGgUFGyxs3JSm+Eo-kw@mail.gmail.com> <CABNhwV3TtczH9wC4dRk0864vbbZJkKpJ57DqTND4rvFLDqDiNw@mail.gmail.com>
In-Reply-To: <CABNhwV3TtczH9wC4dRk0864vbbZJkKpJ57DqTND4rvFLDqDiNw@mail.gmail.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Wed, 12 Jul 2023 11:29:51 +0200
Message-ID: <CAOj+MMGMyRe2PDUH8nVMdpTVc6A8P+_Qt7yP+8AUkYiS=G=KwQ@mail.gmail.com>
To: Gyan Mishra <hayabusagsm@gmail.com>
Cc: "UTTARO, JAMES" <ju1738@att.com>, "idr@ietf. org" <idr@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000002efad4060046dc1c"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/yFTgLKF5u-bQr5QTHNc0e_isKNE>
Subject: Re: [Idr] Doubt noticed while looking at draft-uttaro-idr-bgp-oad-02.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Jul 2023 09:30:08 -0000

Hi Gyan,

Glad to see you have the same opinion. But one point needs to be clarified
in your note.

Since the very beginning of BGP4 1771 and 4271 attribute
transitiveness flag never intended to indicate that a given attribute can
or can not be sent to a peer (in case of extended communities
transitiveness to a peering AS).

It only indicates what a BGP speaker is supposed to be doing with
unrecognized attributes. Pass it or not.

Then of course each attribute may define its own rules when it is expected
to be received over IBGP or EBGP sessions. MED or LOCAL PREF are examples
of that however that is different from the transitiveness bit in the
attribute header.

But your point remains valid, it is just for a little bit of a different
reason :).

For me it seems that this is a type of proposal with a lot of work for no
clear reason and huge risk. Furthermore lack of understanding the peers OAD
capabilities makes it single sided and therefore really a local policy
configuration.

Sure as said we could have a document (RFC/BCP) with definition of such a
policy template - nothing wrong with that.

Cheers,
Robert


On Wed, Jul 12, 2023 at 2:35 AM Gyan Mishra <hayabusagsm@gmail.com> wrote:

>
> I can see the very slight benefits for cooperating ASNs under the same
> administrative domain, however this is a MAJOR quite massive  update to RFC
> 4271 as  to how BGP was intended to work as far as what path attributes are
> transitive verses non transitive.
>
> Taking a step back if you look at the gains for cooperating ASNs within
> the same domain versus the massive change in BGP path selection process for
> the entire internet, I am not sure this is a good idea.
>
> Even within the same cooperating domain all operators and network
> designers, every engineer out there worldwide  knows how BGP works today
> and this is a complete rewrite of BGP following a brand new set of rules
> for best path selection.
>
> I am fearful of possible loops and routing issues that could arise with
> such a dramatic change.
>
> I think it would be good to test feasibility with some open BGP
> implementations and test to see if there are any major problems that come
> about before progressing.  This could be in a large virtual lab simulating
> the internet and with OAD and try to make things break to see if the change
> to the best path selection process causes any major problems.
>
> There are a few path attributes I see that could benefit from the change
> but there are already other path attributes that provide the same de
> preference of backup paths capabilities or any other policy type changes.
>
> If it’s not broken, don’t try to fix it.  I think that mantra applies to
> this type of change to BGP.
>
> I truly don’t think the benefits outweigh the risk.
>
> As well as the possible implementation bugs that could crop up.  OMG!  I
> hope I am retired before then.
>
> Gyan
> On Mon, Jul 10, 2023 at 4:25 PM Robert Raszuk <robert@raszuk.net> wrote:
>
>> Hi,
>>
>> The subject draft says:
>>
>> *3.3. NEXT_HOP*
>>
>>
>> *The NEXT_HOP attribute is a well-known mandatory BGP path attribute
>> [RFC4271] that MUST be present in UPDATE messages sent over EBGP-OAD
>> sessions. The origination and modification of the NEXT_HOP attribute MUST
>> comply with the EBGP-related specification in [RFC4271].*
>>
>> Well I am afraid this is wrong on multiple grounds.
>>
>> The reason to state this is that RFC4760 made NEXT_HOP attribute
>> optional. It is no longer mandatory as next hop information is carried in
>> MP_REACH_NLRI attribute.
>>
>> Moreover most protocol enhancements and in fact all which seems
>> applicable to the author's goal went into defining NEXT_HOP information
>> encoded in MP_REACH and not carried in standalone attributes.
>>
>> In fact RFC7606 very clearly highlights how NEXT_HOP path
>> attribute became optional if we negotiate MP capability in section 3d:
>>
>>
>>
>>
>> *   d.  If any of the well-known mandatory attributes are not present in
>>      an UPDATE message, then "treat-as-withdraw" MUST be used.  (Note
>>  that [RFC4760] reclassifies NEXT_HOP as what is effectively
>>  discretionary.)*
>>
>> Observing the history there is still confusion among vendors and
>> customers if standalone NEXT-HOP Attribute should be still sent in spite of
>> MP capability or not.
>>
>> However it is clear that it would not be a great idea to suddenly make it
>> mandatory for BGP-OAD.
>>
>> Thx,
>> R.
>>
>> PS. Yes, its mandatory nature as defined in RFC4271 was never formally
>> relaxed. But it really does not make any sense to send the same information
>> twice ... and it makes UPDATES much more fragile if they happen to contain
>> different data formats.
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>
> --
>
> <http://www.verizon.com/>
>
> *Gyan Mishra*
>
> *Network Solutions A**rchitect *
>
> *Email gyan.s.mishra@verizon.com <gyan.s.mishra@verizon.com>*
>
>
>
> *M 301 502-1347*
>
>