IETF Logo Mail Archive

Re: [OSPF] New Version Notification for draft-liang-ospf-flowspec-extensions-01.txt

"Acee Lindem (acee)" <acee@cisco.com> Sat, 11 October 2014 19:10 UTC

Return-Path: <acee@cisco.com>
X-Original-To: ospf@ietfa.amsl.com
Delivered-To: ospf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AECA21A872F for <ospf@ietfa.amsl.com>; Sat, 11 Oct 2014 12:10:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -15.287
X-Spam-Level:
X-Spam-Status: No, score=-15.287 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U8KfC3KO8fzK for <ospf@ietfa.amsl.com>; Sat, 11 Oct 2014 12:10:52 -0700 (PDT)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30E3D1A8725 for <ospf@ietf.org>; Sat, 11 Oct 2014 12:10:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2062; q=dns/txt; s=iport; t=1413054652; x=1414264252; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=2NbiPKsR8fJRw5XIvxrPTwNqBZOoxepkBSnc65z5xXY=; b=T37PRQkaDUfSLMr+t1ufko2lN0dPo5CHaDPcVeqYvRRmFFVuskIGW9Bc EQgUcAE18OqkpZVLpZN5DsFVHSSmnlgyfpfHd0hmFgzSHyAZEHRKxLVAy WNfTsrL0YaMBNcPM6Flk0v0A5mC73bkEhqiYgtnj8+/Wo6502clowCzuQ M=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AkgFAI+AOVStJA2I/2dsb2JhbABfgw5TWAEDgwLIUIdNAhlpFgF7hAQBAQMBNEMCEAIBCBwoAgIwJQIEAQ0FCYgtCA2MeZxFBpRpAQEBAQEBAQEBAQEBAQEBAQEBGoEmjkYlGBsHgnGBWgEEkXmLUoEukGWDfoI0gUNsgQZCgQIBAQE
X-IronPort-AV: E=Sophos;i="5.04,700,1406592000"; d="scan'208";a="86128553"
Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-4.cisco.com with ESMTP; 11 Oct 2014 19:10:44 +0000
Received: from xhc-rcd-x14.cisco.com (xhc-rcd-x14.cisco.com [173.37.183.88]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id s9BJAiF3014081 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Sat, 11 Oct 2014 19:10:44 GMT
Received: from xmb-aln-x06.cisco.com ([169.254.1.175]) by xhc-rcd-x14.cisco.com ([173.37.183.88]) with mapi id 14.03.0195.001; Sat, 11 Oct 2014 14:10:44 -0500
From: "Acee Lindem (acee)" <acee@cisco.com>
To: Russ White <russw@riw.us>, "'Osborne, Eric'" <eric.osborne@level3.com>, 'Youjianjie' <youjianjie@huawei.com>, 'Hannes Gredler' <hannes@juniper.net>
Thread-Topic: [OSPF] New Version Notification for draft-liang-ospf-flowspec-extensions-01.txt
Thread-Index: AQHP2sRacNlB1LfkPUCKV4l1MfxdD5wX3ddwgA2jYQCAAOUi0P//fhsAgAGjdgCAADkxoIAAKSoAgANtcgD//8zaAIAASi+A///6mAA=
Date: Sat, 11 Oct 2014 19:10:43 +0000
Message-ID: <D05EF88B.4EC1%acee@cisco.com>
References: <F6C28B32DA084644BB6C8D0BD65B669D11A0A9@nkgeml509-mbs.china.huawei.com> <63CB93BC589C1B4BAFDB41A0A19B7ACDF930C2@USIDCWVEMBX08.corp.global.level3.com> <20141008155350.GB34437@hannes-mba.local> <F6C28B32DA084644BB6C8D0BD65B669D11A486@nkgeml509-mbs.china.huawei.com> <63CB93BC589C1B4BAFDB41A0A19B7ACDF93F22@USIDCWVEMBX08.corp.global.level3.com> <D05C07DB.4A98%acee@cisco.com> <054c01cfe55c$b9075090$2b15f1b0$@riw.us> <D05EBC35.4D9D%acee@cisco.com> <073b01cfe568$3dd93bc0$b98bb340$@riw.us>
In-Reply-To: <073b01cfe568$3dd93bc0$b98bb340$@riw.us>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.21.84.182]
Content-Type: text/plain; charset="euc-kr"
Content-ID: <44C334819A466E47952367A9DEA7F2E5@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/ospf/Q7-bmgXzHiXuQlbquZQ2eEqHYgs
Cc: "ospf@ietf.org" <ospf@ietf.org>
Subject: Re: [OSPF] New Version Notification for draft-liang-ospf-flowspec-extensions-01.txt
X-BeenThere: ospf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: The Official IETF OSPG WG Mailing List <ospf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ospf>, <mailto:ospf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ospf/>
List-Post: <mailto:ospf@ietf.org>
List-Help: <mailto:ospf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ospf>, <mailto:ospf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 11 Oct 2014 19:10:53 -0000


On 10/11/14, 11:30 AM, "Russ White" <russw@riw.us> wrote:

>
>> OSPF is a good choice for quickly disseminating the same piece of
>information
>> to multiple OSPF routers using the same policy and I believe that the
>> transport instance http://www.ietf.org/id/draft-ietf-ospf-transport-
>> instance-11.txt
>> facilitates this. However, I see flow-spec distribution in the general
>controller
>> case as being peer specific or even peer interface specific. Do you
>disagree?
>
>> The use case in question is mitigating attacks closer to the compromised
>> system by pushing the flow-spec to the customer sites using OSPF as a
>PE-CE
>> protocol (RFC 4577). Are there any other instances where we¹d want to
>>push
>> the same flow-spec to the routers in an IGP domain using OSPF or ISIS?
>
>Why isn't this use case extendable to all edge OSPF routers, and not just
>CE's? I would think the same reasoning would apply...
>
>So -- if we are going to do this, we should specifically design it more
>like
>a type 5, perhaps, or something with a very limited flooding scope to
>solve
>the specific use case in hand, rather than in a way that encourages
>general
>use...
>
>Does this make sense?

It depends whether you want to send the flow-spec to every PE under your
administrative domain of only those PE close to the source of the attack.
If it is the latter, the current BGP mechanism Is better suited to the
task. 

Thanks,
Acee 



>
>:-)
>
>Russ
>

v2.23.0 | Report a Bug | By Email