Re: [Lsvr] AD Review of draft-ietf-lsvr-bgp-spf-11.txt

Alvaro Retana <aretana.ietf@gmail.com> Fri, 10 February 2023 19:40 UTC

Return-Path: <aretana.ietf@gmail.com>
X-Original-To: lsvr@ietfa.amsl.com
Delivered-To: lsvr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CBA8C152561; Fri, 10 Feb 2023 11:40:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id inSF4ezfo_ZS; Fri, 10 Feb 2023 11:39:57 -0800 (PST)
Received: from mail-pj1-x1031.google.com (mail-pj1-x1031.google.com [IPv6:2607:f8b0:4864:20::1031]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9733C14CF12; Fri, 10 Feb 2023 11:39:57 -0800 (PST)
Received: by mail-pj1-x1031.google.com with SMTP id f16-20020a17090a9b1000b0023058bbd7b2so6550851pjp.0; Fri, 10 Feb 2023 11:39:57 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:cc:to:subject:message-id:date :mime-version:references:in-reply-to:from:from:to:cc:subject:date :message-id:reply-to; bh=SELDni97sFQDeIhyRd+jbEC9dnsEA8GTCNadAdukMtc=; b=Jdo0uHckZJ2i/Wt+c2Utw7LdUPGvlzKJnnPICYSaZfEJKCF7gKMCLOy4u4vELv+I2Z KGrKTsIHqBjRVZ+NngjwJYrWERm3P+48ygZ3xcCuPOokjhRiSQQn1CXe0z/XMPIno/o+ GV/DXnm53t+9a38tscS2lri7lrbjSHtWl4LHnTcoIMNLIDxpN0+00TsqcAUrjK31nRr1 TPYiaqtGxqbE8BJwo8X6AJmTgNlYpETfebSdprHjDDP/PdV3coOJ+CTcQ+ZYSA+pomVv HQtvfdnE9D9eYuymQwQ6F1KzIVg6WmtjqeOUGBQnOMyLirYQZpcEbEaiet4xJv0R3x6e +R8w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:cc:to:subject:message-id:date :mime-version:references:in-reply-to:from:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=SELDni97sFQDeIhyRd+jbEC9dnsEA8GTCNadAdukMtc=; b=W8KVKhiJgDvY3kSluSwlzfkwQQj8gqLQMPlCouxEocHSthk4NNFfaulJyR7UO0nqTn f6edF4VvivGFydKsj1RVYGGhK3U8rRz4H511hzIT8ckzUxNeNhVLNGL3uKJ4CNrNh4Tu 532I/f7PLithsf/Mal4VA54hXnoPUiPNT2ia6zExuTDSzEthGMbUJp/5q9xKAsA3V5ge xVJczw/f9zNQxbeBHLwap2qiMLlok2LoxwHOL9eqiOFenWRm7AL/ane/DRp+DX2B7tzX DrNFWwfXHcaNapxrPa1k0VYUoGng+A2zCXJFvWcGKFPpjCm+/968GwDAdbHweRovqg1J kMOg==
X-Gm-Message-State: AO0yUKUfkp5Kn/oV1Y2e1+4ZCO+lVlHKVasks703KhBdgQOgnd1YNbqu o2eSIwvNcKClXf9rKxKE5Y8aLQksyzNJSC857pB21ePe
X-Google-Smtp-Source: AK7set/TGLGt3Dj1RVG8ZUd/5JUkmflOHW9HtWY2CTqVjMZmc9dglQoWq0DOx6Wbz9NH8CtMDtwwsEI/PoY9Z1Vo9i8=
X-Received: by 2002:a17:90a:1d5:b0:233:b56f:a6c1 with SMTP id 21-20020a17090a01d500b00233b56fa6c1mr513194pjd.62.1676057997063; Fri, 10 Feb 2023 11:39:57 -0800 (PST)
Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Fri, 10 Feb 2023 13:39:56 -0600
From: Alvaro Retana <aretana.ietf@gmail.com>
In-Reply-To: <F1DFEA4B-600C-4989-AA84-F81AAF3BD19B@cisco.com>
References: <F1DFEA4B-600C-4989-AA84-F81AAF3BD19B@cisco.com>
MIME-Version: 1.0
Date: Fri, 10 Feb 2023 13:39:56 -0600
Message-ID: <CAMMESsxryGfFUZ2efvk+3Nt9p8A0Sd7OTQ_uHPvKt_YJD1MGTA@mail.gmail.com>
To: Acee Lindem <acee.ietf@gmail.com>
Cc: "draft-ietf-lsvr-bgp-spf@ietf.org" <draft-ietf-lsvr-bgp-spf@ietf.org>, "lsvr@ietf.org" <lsvr@ietf.org>, lsvr-chairs@ietf.org, Victor Kuarsingh <victor@jvknet.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsvr/kPMory5NbCu6Dgsg5rtzxHyw6Xg>
Subject: Re: [Lsvr] AD Review of draft-ietf-lsvr-bgp-spf-11.txt
X-BeenThere: lsvr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Link State Vector Routing <lsvr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsvr>, <mailto:lsvr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsvr/>
List-Post: <mailto:lsvr@ietf.org>
List-Help: <mailto:lsvr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsvr>, <mailto:lsvr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Feb 2023 19:40:02 -0000

On February 15, 2021 at 10:55:53 AM, Acee Lindem wrote:

Hi!

This message covers the remaining set of up-front comments/questions.

Thanks!

Alvaro.


...
> > (2) Use of the BGP-LS encodings.
> >
> > - This document is effectively defining a new AFI/SAFI combination -- yes,
> > related to BGP-LS, but not the same. IOW, you can define which parts of
> > rfc7752 apply (if any), beyond the encodings.
>
> We have added section 3 to address the relationship to BGP-LS.


307	3.  BGP Link-State (BGP-LS) Relationship

309	   [RFC7752] describes a mechanism by which link-state and TE
310	   information can be collected from networks and shared with external
311	   entities using BGP.  This is achieved by defining NLRI advertised
312	   using the BGP-LS AFI.  The BGP-LS extensions defined in [RFC7752]
313	   make use of the decision process defined in [RFC4271].  This document
314	   reuses NLRI and TLVs defined in [RFC7752].  Rather than reusing the
315	   BGP-LS SAFI, the BGP-LS-SPF SAFI Section 5.1 is introduced to insure
316	   backward compatibility for the BGP-LS SAFI usage.

[nit] s/NLRI/the NLRI/g

[nit] s/SAFI Section 5.1/SAFI (Section 5.1)


318	   The BGP SPF extensions reuse the Node, Link, and Prefix NLRI defined
319	   in [RFC7752].  The usage of the BGP-LS NLRI, attributes, and
320	   attribute extensions is described in Section 5.2.  The usage of
321	   others BGP-LS attributes is not precluded and is, in fact, expected.
322	   However, the details are beyond the scope of this document and will
323	   be specified in future documents.

[nit] s/will be specified/may be specified

[] "others BGP-LS attributes"

There is only one BGP-LS Attribute.  This got me thinking about
clarifying, simplifying and avoiding some redundancy.

Suggestion>

   [Eliminate this sentence from the previous paragraph: "This document
   reuses NLRI and TLVs defined in [RFC7752]."]

   The BGP SPF extensions reuse the format of the Link-State NLRI, the
   BGP-LS Attribute, and the TLVs defined in [RFC7752bis]. The usage of
   is described in Section 5.2. The usage of others BGP-LS TLVs or
   extensions is not precluded and is, in fact, expected. However, the
   details are beyond the scope of this document and may be specified
   in future documents.

   [Eliminate the next paragraph.]


325	   Support for Multiple Topology Routing (MTR) similar to the OSPF MTR
326	   computation described in [RFC4915] is beyond the scope of this
327	   document.  Consequently, the usage of the Multi-Topology TLV as
328	   described in section 3.2.1.5 of [RFC7752] is not specified.

[] See the suggestion above.


[major] Also, unless used as part of the specification, please avoid
references to other protocols -- specially comparing them.



330	   The rules for setting the NLRI next-hop path attribute for the BGP-
331	   LS-SPF SAFI will follow the BGP-LS SAFI as specified in section 3.4
332	   of [RFC7752].

[major] Now that we have rfc7752bis -- it is not just about the NH
attribute, but the contents of the MP_REACH_NLRI attribute as well.

Suggestion>
   The BGP-LS-SPF SAFI uses the specification in Section 5.5 of
   [RFC7752bis] related to the BGP Next-Hop Information.



...
> > - Which Protocol-ID should be used for the NLRI? ??4 suggests 7 (BGP), but
> > I think that is not correct (see more there). What should the receiver do
> > with a different value?
>
> We have clarified this in section 5.2.

>From §5.2:

490	   The protocol identifier specified in the Protocol-ID field [RFC7752]
491	   will represent the origin of the advertised NLRI.  For Node NLRI and
492	   Link NLRI, this MUST be the direct protocol (4).  Node or Link NLRI
493	   with a Protocol-ID other than direct will be considered malformed.
494	   For Prefix NLRI, the specified Protocol-ID MUST be the origin of the
495	   prefix.

[major] "For Prefix NLRI, the specified Protocol-ID MUST be the origin
of the prefix."

What value is that?  Do you expect anything other than Direct?


[minor] The text in rfc7752bis talks about "sourcing" not "origin".

Suggestion>
   The Protocol-ID "Direct" MUST be used in all NLRI.  Any other
   Protocol-ID value results in the NLRI considered malformed.


[] BTW, rfc7752bis opens the door to use other Protocol-IDs even for
local information:  "The 'Direct' and 'Static configuration' protocol
types SHOULD be used when BGP-LS is sourcing local information."
Given that BGP SPF is using the formats from BGP-LS, but not following
all the rules, it could use it's own Protocol-ID.

Regardless of the above, it would be a good idea for this document to
request a new Protocol-ID so that BGP-LS can use it to collect/export
link-state information from BGP SPF.  I haven't thought much about
this: would anything else be needed to enable BGP-LS to carry BGP SPF
or could it just export as-is?



...
> > (3) Link-State
> >
> > - How does BGP SPF guarantee that the nodes are synchronized? Other
> > protocols have DBDs/CSNP/etc. It seems easier in BGP SPF to not exchange
> > all the information with a peer than it is in traditional link-state
> > protocols. Being able to easily break synchronization is a vulnerability
> > that should be mentioned in the Security Considerations section.
>
> Hmmm... Of your high-level meta-comments, this one is a good point.

Thanks! ;-)


> We will discuss how to document this difference and whether an optional
> extension is needed.

So?  I didn't see anything about synchronization in the current version.