Re: [sidr] Injecting idea of "freshness of repository data" into BGP

Jeffrey Haas <jhaas@pfrc.org> Thu, 29 March 2012 07:22 UTC

Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD95B21F85AA for <sidr@ietfa.amsl.com>; Thu, 29 Mar 2012 00:22:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.011
X-Spam-Level:
X-Spam-Status: No, score=-102.011 tagged_above=-999 required=5 tests=[AWL=-0.061, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, SARE_MILLIONSOF=0.315, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hEaNWBndouYB for <sidr@ietfa.amsl.com>; Thu, 29 Mar 2012 00:22:39 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id BFA9A21E80EA for <sidr@ietf.org>; Thu, 29 Mar 2012 00:22:36 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 888E517041E; Thu, 29 Mar 2012 03:22:36 -0400 (EDT)
Date: Thu, 29 Mar 2012 03:22:36 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Danny McPherson <danny@tcb.net>
Message-ID: <20120329072236.GA7311@slice>
References: <20120328081939.GA19843@slice> <CA796250-4EA9-468D-BB4A-4C1187D2148F@tcb.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CA796250-4EA9-468D-BB4A-4C1187D2148F@tcb.net>
User-Agent: Mutt/1.5.20 (2009-06-14)
Cc: sidr wg list <sidr@ietf.org>
Subject: Re: [sidr] Injecting idea of "freshness of repository data" into BGP
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Mar 2012 07:22:44 -0000

On Wed, Mar 28, 2012 at 09:02:24PM -0400, Danny McPherson wrote:
> On Mar 28, 2012, at 4:19 AM, Jeffrey Haas wrote:
> > Per my mic comment at IETF 83:
> > During the San Diego interim session we had discussed potentially signaling
> > in BGP the idea that a given AS may have fresher data available in its
> > repository. 
> 
> Shouldn't this problem be solved in the resource certification infrastructure (i.e., RPKI) - signaling RPKI freshness in BGP and distributing to literally millions of routers seems like a REALLY bad idea to me.

One "route" per AS in the system which is a 20byte value max (per the cert)
hardly seems that scary. :-)

But that said, I don't object to some sort of mechanism used as part of the
RPKI infra would do such a "you may want to refresh" request.  My thought is
that since the certs in question are required for validation, the routing
system already has a strong interest in making sure downstreams can validate
(or invalidate!) routes.


-- Jeff