IETF Logo Mail Archive

Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements

Jeff Haas <jhaas@juniper.net> Tue, 17 April 2018 19:50 UTC

Return-Path: <jhaas@juniper.net>
X-Original-To: opsec@ietfa.amsl.com
Delivered-To: opsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFBB7126D73; Tue, 17 Apr 2018 12:50:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id twvfKRkVuNwG; Tue, 17 Apr 2018 12:50:12 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D6F9126CF6; Tue, 17 Apr 2018 12:50:12 -0700 (PDT)
Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w3HJj181020197; Tue, 17 Apr 2018 12:50:11 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=XdY154ynpks1PH481GZ+a+VijemkSO0oiugrpsZqzjk=; b=f1cUf6c4NrRwgqa9EDEo3x4jhma01vU2fHruk2/s8Fj46xQ8E0BOsmFNSRF6LTpgOXwT BLBe22cvnUTCEBpJY4WhuY2Ife2gBMm0TDCa8wBQnNUUo1mS1Ks0cdWm2CrT+c2IiHH5 CBNTZbxJrRXhFfE3tFpyibIGdCfv+naUhwvn1EJ/gC2Xm6cncY4WLSHjSg9O3iCQoKd4 +F1Od4Ef3Ksz6hodFO40MMmL/ifIWwPK3gWzmwPYmjP9b+YhN6fZivSLtktwczfVYl3i deMvTuAM2i/iqHXBanMpxcszZ9sQt58ggh5x2e28tDLOHcfuIjAqVCtaCCFvE94HgVPP Uw==
Received: from nam01-by2-obe.outbound.protection.outlook.com (mail-by2nam01lp0183.outbound.protection.outlook.com [216.32.181.183]) by mx0b-00273201.pphosted.com with ESMTP id 2hdn638b15-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 17 Apr 2018 12:50:11 -0700
Received: from MWHPR05MB3183.namprd05.prod.outlook.com (10.173.229.138) by MWHPR05MB3357.namprd05.prod.outlook.com (10.174.175.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.696.8; Tue, 17 Apr 2018 19:50:04 +0000
Received: from MWHPR05MB3183.namprd05.prod.outlook.com ([fe80::99de:815c:1ca6:c43b]) by MWHPR05MB3183.namprd05.prod.outlook.com ([fe80::99de:815c:1ca6:c43b%4]) with mapi id 15.20.0696.013; Tue, 17 Apr 2018 19:50:04 +0000
From: Jeff Haas <jhaas@juniper.net>
To: Barry Raveendran Greene <bgreene@senki.org>
CC: Ron Bonica <rbonica@juniper.net>, "Eric Vyncke (evyncke)" <evyncke@cisco.com>, "opsec@ietf.org" <opsec@ietf.org>, "draft-sriram-opsec-urpf-improvements@ietf.org" <draft-sriram-opsec-urpf-improvements@ietf.org>
Thread-Topic: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements
Thread-Index: AQHT1oU7RYs4tLPULki18qcgJsLIeQ==
Date: Tue, 17 Apr 2018 19:50:04 +0000
Message-ID: <209728A1-B747-4B59-AB0F-F21669B67E6C@juniper.net>
References: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> <SN6PR05MB4240AA845A5245E08E49CACAAEB70@SN6PR05MB4240.namprd05.prod.outlook.com> <A976E7E7-327B-4B30-B975-D92F6B2309B9@senki.org>
In-Reply-To: <A976E7E7-327B-4B30-B975-D92F6B2309B9@senki.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: senki.org; dkim=none (message not signed) header.d=none;senki.org; dmarc=none action=none header.from=juniper.net;
x-originating-ip: [66.129.241.11]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; MWHPR05MB3357; 7:He2oMwCfZwy7gxReYr8tNhqxdcTF3My366A/ZQTNQtchL4J3e0//IvFQqyVuYzZPIq3o3NYHBWO4a2ryDVY0kfgxrbaLAtHFRJPd36OToXGzmk5HYqwLhr0rUqUfZCudp70MPC23KFsR1caMs7j2xb/zWAbNedxNKVTi91kxzg/fp1Szz+4ReeEHIa8oF6P1gQMDvIqQjmRRhh0VDHU/SAvyJyNDgn2XTXmtFaL0vSEwW4vPxnPGf1TE7VtbF9aN
x-ms-exchange-antispam-srfa-diagnostics: SOS;SOR;
x-forefront-antispam-report: SFV:SKI; SCL:-1; SFV:NSPM; SFS:(10019020)(376002)(39860400002)(366004)(12213003)(486006)(82746002)(86362001)(446003)(54906003)(33656002)(316002)(2906002)(6512007)(54896002)(2616005)(11346002)(25786009)(5250100002)(83716003)(26005)(476003)(3660700001)(36756003)(3280700002)(8676002)(76176011)(5660300001)(81166006)(66066001)(4326008)(3846002)(6486002)(186003)(6436002)(99286004)(6116002)(6916009)(8936002)(102836004)(236005)(478600001)(7736002)(6506007)(14454004)(53546011)(229853002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR05MB3357; H:MWHPR05MB3183.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; MLV:sfv;
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(2017052603328)(7153060)(7193020); SRVR:MWHPR05MB3357;
x-ms-traffictypediagnostic: MWHPR05MB3357:
x-microsoft-antispam-prvs: <MWHPR05MB33572CE9BF6D90FB10454276A5B70@MWHPR05MB3357.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(138986009662008)(100405760836317);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231232)(944501327)(52105095)(3002001)(6055026)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(20161123560045)(20161123562045)(6072148)(201708071742011); SRVR:MWHPR05MB3357; BCL:0; PCL:0; RULEID:; SRVR:MWHPR05MB3357;
x-forefront-prvs: 0645BEB7AA
x-microsoft-antispam-message-info: 0JyLYkatsSUlqBRXM84wuL3Ni+9T8ko6U2GirfqlROPXB6o05/DM1Wi7Y1z7WO4a14BoqQvpkhqEsoR2ozroa60lR5QD0ARZLca+Pg4YmL5guKQ/oS4VIZfwQQ0rtCi5k+7tsnDRRlIvVtedNPQzqLMxIOF01GaqPgnZceW2Aof2+rYzwkPsuUGj6wBvLhbL
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_209728A1B7474B59AB0FF21669B67E6Cjunipernet_"
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: b72e2fb3-256a-489c-d4a9-08d5a49c69e0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: b72e2fb3-256a-489c-d4a9-08d5a49c69e0
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Apr 2018 19:50:04.0128 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3357
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-04-17_10:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1804170172
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/MHu1R234EFxmhwHOReTqB6MvveY>
Subject: Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Apr 2018 19:50:15 -0000

Barry,

On Apr 17, 2018, at 3:21 PM, Barry Raveendran Greene <bgreene@senki.org<mailto:bgreene@senki.org>> wrote:
On Apr 18, 2018, at 01:48, Ron Bonica <rbonica@juniper.net<mailto:rbonica@juniper.net>> wrote:

Any comments, positive, negative or indifferent would be appreciated. It is difficult to judge consensus in the face of silence.

Since you asked. Feasible path was build around the capabilities of Juniper’s FIB structure. Strict Mode, Loose Mode, and VRF Mode all used a more general approach. My question for working group adoption would be if the approach is applicable to vendors outside of Juniper. Is this possible on Cisco, Huawei, Nokia, Arista, and others? If yes, then it is a good for working group adoption.

It should be noted that my contribution isn't intended to say "Juniper can support this out the door".  Rather, the intent is to start discussion of the framework that addresses the problem space in a way that's more complete.  With that done, FIBs that don't have the necessary properties to do the work that eventually comes from this or related documents can eventually be deployed.

Now is better obviously.  But right now, base BCP 38 (as you note) lives off of useful hacks. :-)

-- Jeff

v2.23.0 | Report a Bug | By Email