Re: [sidr] wglc for draft-ietf-sidr-adverse-actions-00

Sandra Murphy <sandy@tislabs.com> Tue, 05 July 2016 16:22 UTC

Return-Path: <sandy@tislabs.com>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C739612D134 for <sidr@ietfa.amsl.com>; Tue, 5 Jul 2016 09:22:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.327
X-Spam-Level:
X-Spam-Status: No, score=-3.327 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u51RE-xeXnWo for <sidr@ietfa.amsl.com>; Tue, 5 Jul 2016 09:22:52 -0700 (PDT)
Received: from walnut.tislabs.com (walnut.tislabs.com [192.94.214.200]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04A0F12D0C1 for <sidr@ietf.org>; Tue, 5 Jul 2016 09:22:51 -0700 (PDT)
Received: from nova.tislabs.com (unknown [10.66.1.77]) by walnut.tislabs.com (Postfix) with ESMTP id 63EF728B0040; Tue, 5 Jul 2016 12:22:50 -0400 (EDT)
Received: from [IPv6:::1] (localhost.localdomain [127.0.0.1]) by nova.tislabs.com (Postfix) with ESMTP id 551C51F8055; Tue, 5 Jul 2016 12:22:50 -0400 (EDT)
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
Content-Type: multipart/signed; boundary="Apple-Mail=_371FBEE0-610A-416A-864B-52CCCF79462F"; protocol="application/pgp-signature"; micalg="pgp-sha512"
X-Pgp-Agent: GPGMail 2.5.2
From: Sandra Murphy <sandy@tislabs.com>
In-Reply-To: <m28txldluq.wl%randy@psg.com>
Date: Tue, 05 Jul 2016 12:19:42 -0400
Message-Id: <F3FB0B9E-A069-4381-9D37-305C4C96A1F8@tislabs.com>
References: <8E32FD39-FD20-455C-8BEC-5752DE9C8531@tislabs.com> <m2wpl6ffdp.wl%randy@psg.com> <8196148a-b98d-c680-c714-55498131e7ce@bbn.com> <m28txldluq.wl%randy@psg.com>
To: Randy Bush <randy@psg.com>
X-Mailer: Apple Mail (2.1878.6)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidr/L6HpSt0h3sTucAv136BlBkzEjSw>
Cc: sidr wg list <sidr@ietf.org>, Sandra Murphy <sandy@tislabs.com>
Subject: Re: [sidr] wglc for draft-ietf-sidr-adverse-actions-00
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Jul 2016 16:22:54 -0000

Speaking as regular ol’ member:

On Jul 1, 2016, at 6:39 PM, Randy Bush <randy@psg.com> wrote:

>> I'll revise that text to note the case of a resource transfer appears to
>> be competition
> 
> it is more than transfer.  it is the very frequent operation of changing
> tranist providers.  i own P, but do not use bgp.  my parent T0 announces
> it for me (roa P-T0).  i change upstream providers to T1.  during the
> move there are two roas, the second being P-T1.
> 
> this all was very intentionally designed for make before break.
> multiple roas with different ASs for the same prefix are normal.  i
> found it shocking and disappointing to have the introduction say
> otherwise.

As an aside, one of my favorite BGP sites is bgp.he.net, which includes a list of prefixes that are announced by more than one AS (http://bgp.he.net/report/multi-origin-routes).  Many times it is easy to see why - the similarity in the AS names make it quite likely they “belong” to the same organization.   But there are many times when the multiple origin ASs have no relationship.

I don’t see that there’s a requirement that a router have only one certificate, either.  A router that was configured to speak as two different ASs might have one key certified by both ASs and might have two different keys, one for each AS.

—Ssandy

> 
> randy
> 
> _______________________________________________
> sidr mailing list
> sidr@ietf.org
> https://www.ietf.org/mailman/listinfo/sidr