Re: [sidr] 4-byte vs 2 byte ASN (was re: I-D Action: draft-ietf-sidr-pfx-validate-03.txt)

Hannes Gredler <hannes@juniper.net> Wed, 02 November 2011 14:57 UTC

Return-Path: <hannes@juniper.net>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C2CA11E80B6 for <sidr@ietfa.amsl.com>; Wed, 2 Nov 2011 07:57:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level:
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fr7hwHaYeNoI for <sidr@ietfa.amsl.com>; Wed, 2 Nov 2011 07:57:48 -0700 (PDT)
Received: from exprod7og113.obsmtp.com (exprod7og113.obsmtp.com [64.18.2.179]) by ietfa.amsl.com (Postfix) with ESMTP id 04D3E11E8099 for <sidr@ietf.org>; Wed, 2 Nov 2011 07:57:47 -0700 (PDT)
Received: from P-EMHUB03-HQ.jnpr.net ([66.129.224.36]) (using TLSv1) by exprod7ob113.postini.com ([64.18.6.12]) with SMTP; Wed, 02 Nov 2011 07:57:48 PDT
Received: from hannes-755.juniper.net (172.23.7.205) by P-EMHUB03-HQ.jnpr.net (172.24.192.33) with Microsoft SMTP Server id 8.3.213.0; Wed, 2 Nov 2011 07:53:44 -0700
Received: by hannes-755.juniper.net (Postfix, from userid 1000) id 53CDA28CDD; Wed, 2 Nov 2011 15:53:37 +0100 (CET)
Date: Wed, 02 Nov 2011 15:53:37 +0100
From: Hannes Gredler <hannes@juniper.net>
To: Pradosh Mohapatra <pmohapat@cisco.com>
Message-ID: <20111102145335.GA13955@juniper.net>
References: <20111031182058.24592.70473.idtracker@ietfa.amsl.com> <DCC302FAA9FE5F4BBA4DCAD4656937791451740474@PRVPEXVS03.corp.twcable.com> <01D94DBA-0B91-4AA8-9666-A4B22B13FE4A@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <01D94DBA-0B91-4AA8-9666-A4B22B13FE4A@cisco.com>
User-Agent: Mutt/1.5.20 (2009-06-14)
Cc: "sidr@ietf.org" <sidr@ietf.org>
Subject: Re: [sidr] 4-byte vs 2 byte ASN (was re: I-D Action: draft-ietf-sidr-pfx-validate-03.txt)
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2011 14:57:49 -0000

On Tue, Nov 01, 2011 at 11:09:36PM -0700, Pradosh Mohapatra wrote:
| >Posing the question about 4-byte ASNs in my review of the BGPSec
| >design reqs draft yesterday makes me wonder about the same in pfx-
| >validate. The draft makes reference to AS_PATH in several
| >locations. I'm thinking that we need a comment early in the draft
| >stating that for the remainder of the draft no distinction is
| >being made between AS_PATH and AS4_PATH, and that this standard is
| >expected to support origin validation of both. Or alternatively,
| >specify that this validation is performed on AS4_PATH and require
| >support for 4893 as a prerequisite for SIDR.
| >If we don't explicitly require hosts that support SIDR origin
| >validation to support 4-byte ASN, we may also need some direction
| >regarding specific handling for AS23456, such as to always treat
| >as unknown since there is no way to determine validity for the
| >combination of a prefix and a non-unique placeholder ASN (except
| >for local TA), but we don't necessarily want those routes to be
| >treated as invalid.
| 
| 
| I think it's fair to assume that routers supporting origin
| validation also support 4893.

i concur;