Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard

Enke Chen <enkechen@cisco.com> Thu, 20 April 2017 15:36 UTC

Return-Path: <enkechen@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09B7A129AC1 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:36:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level:
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zJGNzJI8NIo4 for <idr@ietfa.amsl.com>; Thu, 20 Apr 2017 08:36:19 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F216129AAF for <idr@ietf.org>; Thu, 20 Apr 2017 08:36:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5088; q=dns/txt; s=iport; t=1492702579; x=1493912179; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=W9CefBswR1zml3xoIUwCb7SCaVUZAR4Sl2Jfv61RyH4=; b=DD53GTsQaufzOoxmhFQ2AqXBtVugUcj0IVGe+1MBPaCccu5s7IQwwOir JgkTIf3bYXCqLuJuEyb24VRB9DGrnm4D2KbFxNbBRUl4HAW8Mm+oXGO+3 TutxvOf81YTlUmEFZ1xjhV3GkNt7awNZs4mFc7M2KrHgFi3NggqfpvrGh I=;
X-IronPort-AV: E=Sophos;i="5.37,225,1488844800"; d="scan'208";a="415190561"
Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Apr 2017 15:36:18 +0000
Received: from [10.24.16.81] ([10.24.16.81]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id v3KFaGhV025799; Thu, 20 Apr 2017 15:36:17 GMT
To: Jared Mauch <jared@puck.nether.net>
References: <D4E812E8-AA7B-4EA2-A0AC-034AA8922306@juniper.net> <abe393d3-d1e4-7841-4620-38dab751765b@cisco.com> <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net>
Cc: John G Scudder <jgs@juniper.net>, idr@ietf.org, Hares Susan <shares@ndzh.com>, Enke Chen <enkechen@cisco.com>
From: Enke Chen <enkechen@cisco.com>
Message-ID: <275cf744-1f64-bcbc-dabe-a47479921230@cisco.com>
Date: Thu, 20 Apr 2017 08:36:17 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <68B29403-9AD9-4F06-9FE4-3F077E793D9F@puck.nether.net>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/yaGy6K7VqlqAOEYh6jx9lnB0hIo>
Subject: Re: [Idr] IETF LC for IDR-ish document <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2017 15:36:21 -0000

Hi, Jared:

If it is not obvious, let me state the I participate in IDR WG as an individual
contributor, just like you do I suppose.

Let me rephrase what I said, for a code base with a large and diverse customer base
I do not foresee any possibility for the default behavior change in this case. Again
please treat it as my personal opinion.

I am certainly aware of other cases where the default behavior has been changed. But
this one is different.  This case seems similar to the default behavior ("permit" or
"deny") for an empty ACL.  Once the "permit" or "deny" is set in the code and is
widely deployed for a long time, it is just not possible to make the switch between
"permit" and "deny".

Regards,  -- Enke

On 4/20/17 6:41 AM, Jared Mauch wrote:
> 
>> On Apr 19, 2017, at 6:53 PM, Enke Chen <enkechen@cisco.com> wrote:
>>
>> Hi, Folks:
>>
>> The document defines or changes the "default behavior" for EBGP.  However, the default
>> behavior for a particular code base or release was set long time ago, and in some cases
>> more than 20 years ago. To avoid breaking existing deployment in this case, the default
>> behavior in the code can not be changed (with or without this document). Then it becomes
>> a deployment practice for the policies to be configured.
>>
>> So it seems to me that "Standard Track" may not be the right classification for this
>> document.  "Deployment recommendation or Practice" might be more appropriate.
> 
> Please see my other thread on this topic.
> 
> I’m disappointed to see Cisco coming out for BGP insecurity.
> 
> - Jared
> 
>>
>> Thanks.  -- Enke
>>
>> On 4/19/17 9:49 AM, John G. Scudder wrote:
>>> IDR folks,
>>>
>>> As many of you have already noticed, draft-ietf-grow-bgp-reject-05 has completed GROW WGLC and is now in IETF LC.
>>>
>>> As nobody other than Alvaro noticed (thank you for noticing, Alvaro!) draft-ietf-grow-bgp-reject-05 represents an update to RFC 4271, in that it mandates what a BGP implementation MUST do. See section 2 of the draft for the details. It's short and easy to read.
>>>
>>> If we had noticed this earlier, we would have either chosen to home the document in IDR, or explicitly made an exception to have GROW do the work. Given that we didn't, though, the plan is to continue progressing the draft as a GROW document. However:
>>>
>>> - As I understand it, the authors will add the Updates: 4271 header in addition to potentially taking in other comments from AD review.
>>> - If anyone has a strong objection to the unusual procedure, please say so (either on-list, or to the chairs + AD).
>>> - Please send any last call comments to the IETF LC (see below) although it's also OK to discuss here on the IDR list of course.
>>>
>>> Many IDR participants are also active in GROW and have had their say, but if you haven't, now's your chance.
>>>
>>> Thanks,
>>>
>>> --John
>>>
>>>> Begin forwarded message:
>>>>
>>>> From: The IESG <iesg-secretary@ietf.org>
>>>> Subject: Last Call: <draft-ietf-grow-bgp-reject-05.txt> (Default EBGP Route Propagation Behavior Without Policies) to Proposed Standard
>>>> Date: April 18, 2017 at 5:16:05 PM EDT
>>>> To: "IETF-Announce" <ietf-announce@ietf.org>
>>>> Cc: grow-chairs@ietf.org, grow@ietf.org, draft-ietf-grow-bgp-reject@ietf.org, christopher.morrow@gmail.com
>>>> Reply-To: ietf@ietf.org
>>>>
>>>>
>>>> The IESG has received a request from the Global Routing Operations WG
>>>> (grow) to consider the following document:
>>>> - 'Default EBGP Route Propagation Behavior Without Policies'
>>>> <draft-ietf-grow-bgp-reject-05.txt> as Proposed Standard
>>>>
>>>> The IESG plans to make a decision in the next few weeks, and solicits
>>>> final comments on this action. Please send substantive comments to the
>>>> ietf@ietf.org mailing lists by 2017-05-02. Exceptionally, comments may be
>>>> sent to iesg@ietf.org instead. In either case, please retain the
>>>> beginning of the Subject line to allow automated sorting.
>>>>
>>>> Abstract
>>>>
>>>> This document defines the default behavior of a BGP speaker when
>>>> there is no import or export policy associated with an External BGP
>>>> session.
>>>>
>>>>
>>>> The file can be obtained via
>>>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/
>>>>
>>>> IESG discussion can be tracked via
>>>> https://datatracker.ietf.org/doc/draft-ietf-grow-bgp-reject/ballot/
>>>>
>>>> This IETF LC, which originally concluded on 2017-04-18, is being 
>>>> extended to allow for additional input to be provided. Ops AD (for GROW) 
>>>> and Routing AD (for IDR) wish to ensure that cross WG discussions have 
>>>> had a chance to occur.
>>>>
>>>> No IPR declarations have been submitted directly on this I-D.
>>>
>>> _______________________________________________
>>> Idr mailing list
>>> Idr@ietf.org
>>> https://www.ietf.org/mailman/listinfo/idr
>>>
>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>