Re: [Isis-wg] Regarding the use case about ISIS FlowSpec

"Acee Lindem (acee)" <acee@cisco.com> Wed, 11 November 2015 12:38 UTC

Return-Path: <acee@cisco.com>
X-Original-To: isis-wg@ietfa.amsl.com
Delivered-To: isis-wg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBD591B361E for <isis-wg@ietfa.amsl.com>; Wed, 11 Nov 2015 04:38:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.51
X-Spam-Level:
X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OJpMy8QCOkG3 for <isis-wg@ietfa.amsl.com>; Wed, 11 Nov 2015 04:38:27 -0800 (PST)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E10D51B361D for <isis-wg@ietf.org>; Wed, 11 Nov 2015 04:38:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=18785; q=dns/txt; s=iport; t=1447245507; x=1448455107; h=from:to:subject:date:message-id:mime-version; bh=RxvT3K4WXr803ar1h5/sfpDSQPRW6d0dmZ5dfp4Nq70=; b=Y+YdkPUi2GW1DtGhZJLhSJ+M2+9qnf1+NVxgGEFQYAIjLJLNfNCUsE9/ Mffp455ToKQCzKzcjKpZItSXzflCGH191X2duIpuf5XaXr9IT2DrYl4yD n2EJXMxlHkVck4oSDmXGCQ18NRh4lvrM9H2Ads8X/WciBV5A9FvPT9uqn 0=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AaAgBGNkNW/4cNJK1egm5NgUIGrlCNNYIaAQ2BZYYQAhyBLTgUAQEBAQEBAYEKhDQBAgQjSCABCBEDAQIoAwIEMBQJCgQBEogZAxKzTJBjAQEBAQEBBAEBAQEBAQEBG4tSglOCHgoWgmSBRAWWSAGLMYF0gVuTF4Nhg3EBHwEBQoQEcoRPgQcBAQE
X-IronPort-AV: E=Sophos;i="5.20,275,1444694400"; d="scan'208,217";a="207068323"
Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-5.cisco.com with ESMTP; 11 Nov 2015 12:38:26 +0000
Received: from XCH-RTP-020.cisco.com (xch-rtp-020.cisco.com [64.101.220.160]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id tABCcPh4014626 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 11 Nov 2015 12:38:25 GMT
Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-020.cisco.com (64.101.220.160) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 11 Nov 2015 07:38:24 -0500
Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1104.000; Wed, 11 Nov 2015 07:38:24 -0500
From: "Acee Lindem (acee)" <acee@cisco.com>
To: "li_zhenqiang@hotmail.com" <li_zhenqiang@hotmail.com>, isis-wg <isis-wg@ietf.org>, Youjianjie <youjianjie@huawei.com>, Liangqiandeng <liangqiandeng@huawei.com>, "Keyur Patel (keyupate)" <keyupate@cisco.com>
Thread-Topic: [Isis-wg] Regarding the use case about ISIS FlowSpec
Thread-Index: AQHRHH3bk92vp6EWzU2awDXQGFt31w==
Date: Wed, 11 Nov 2015 12:38:24 +0000
Message-ID: <D268A098.3D325%acee@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.116.152.203]
Content-Type: multipart/alternative; boundary="_000_D268A0983D325aceeciscocom_"
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/isis-wg/DALx66b5nMgP-SHksYKTYzlHbCI>
Subject: Re: [Isis-wg] Regarding the use case about ISIS FlowSpec
X-BeenThere: isis-wg@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF IS-IS working group <isis-wg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/isis-wg>, <mailto:isis-wg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/isis-wg/>
List-Post: <mailto:isis-wg@ietf.org>
List-Help: <mailto:isis-wg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/isis-wg>, <mailto:isis-wg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Nov 2015 12:38:29 -0000

Thanks Zhenqiang  - I understand now, your requirement is to use IS-IS Flow-Spec for DDoS mitigation in these MANs.
Acee
From: "li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>" <li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>>
Date: Wednesday, November 11, 2015 at 11:21 AM
To: Acee Lindem <acee@cisco.com<mailto:acee@cisco.com>>, isis-wg <isis-wg@ietf.org<mailto:isis-wg@ietf.org>>, Jianjie You <youjianjie@huawei.com<mailto:youjianjie@huawei.com>>, Liangqiandeng <liangqiandeng@huawei.com<mailto:liangqiandeng@huawei.com>>, "Keyur Patel (keyupate)" <keyupate@cisco.com<mailto:keyupate@cisco.com>>
Subject: Re: Re: [Isis-wg] Regarding the use case about ISIS FlowSpec

ISIS is already deployed in our samll scale MANs. And only ISIS is deployed, no BGP. ISIS routes are redistributed into the BGP at the backbone. So I think ISIS flow spec is useful for those MANs.

________________________________
li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>

From: Acee Lindem (acee)<mailto:acee@cisco.com>
Date: 2015-11-11 10:02
To: li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>; isis-wg<mailto:isis-wg@ietf.org>; Youjianjie<mailto:youjianjie@huawei.com>; Liangqiandeng<mailto:liangqiandeng@huawei.com>; Keyur Patel (keyupate)<mailto:keyupate@cisco.com>
Subject: Re: [Isis-wg] Regarding the use case about ISIS FlowSpec
Hi Zhenqiang,
So I guess what you have deployed in your metropolitan area network (MAN) uses BGP Flow Spec and you want to include IS-IS Flow Spec as well?
Thanks,
Acee

From: "li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>" <li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>>
Date: Wednesday, November 11, 2015 at 10:50 AM
To: Acee Lindem <acee@cisco.com<mailto:acee@cisco.com>>, isis-wg <isis-wg@ietf.org<mailto:isis-wg@ietf.org>>, Jianjie You <youjianjie@huawei.com<mailto:youjianjie@huawei.com>>, Liangqiandeng <liangqiandeng@huawei.com<mailto:liangqiandeng@huawei.com>>, "Keyur Patel (keyupate)" <keyupate@cisco.com<mailto:keyupate@cisco.com>>
Subject: Re: Re: [Isis-wg] Regarding the use case about ISIS FlowSpec

not yet

________________________________
li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>

From: Acee Lindem (acee)<mailto:acee@cisco.com>
Date: 2015-11-10 11:25
To: li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>; isis-wg<mailto:isis-wg@ietf.org>; youjianjie<mailto:youjianjie@huawei.com>; liangqiandeng<mailto:liangqiandeng@huawei.com>; Keyur Patel (keyupate)<mailto:keyupate@cisco.com>
Subject: Re: [Isis-wg] Regarding the use case about ISIS FlowSpec
Hi Zhenqiang,
Have you deployed Flow Spec advertised in IS-IS for the purpose of DDoS mitigation?
Thanks,
Acee


From: Isis-wg <isis-wg-bounces@ietf.org<mailto:isis-wg-bounces@ietf.org>> on behalf of "li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>" <li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>>
Date: Tuesday, November 10, 2015 at 10:36 AM
To: isis-wg <isis-wg@ietf.org<mailto:isis-wg@ietf.org>>, Jianjie You <youjianjie@huawei.com<mailto:youjianjie@huawei.com>>, liangqiandeng <liangqiandeng@huawei.com<mailto:liangqiandeng@huawei.com>>, "Keyur Patel (keyupate)" <keyupate@cisco.com<mailto:keyupate@cisco.com>>
Subject: [Isis-wg] Regarding the use case about ISIS FlowSpec

Hello ISIS experts and draft authors,

I am Zhenqiang Li from China Mobile.
At the IETF meeting in Japan last week, during ISIS WG, the question was raised about  a customer interest. Actually, China Mobile deployed this in small scale MAN.

Regards,
________________________________
li_zhenqiang@hotmail.com<mailto:li_zhenqiang@hotmail.com>