Re: [sidr] beacons and bgpsec

Jakob Heitz <jakob.heitz@ericsson.com> Wed, 10 August 2011 19:44 UTC

Return-Path: <jakob.heitz@ericsson.com>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BCE221F8B67 for <sidr@ietfa.amsl.com>; Wed, 10 Aug 2011 12:44:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.033
X-Spam-Level:
X-Spam-Status: No, score=-6.033 tagged_above=-999 required=5 tests=[AWL=0.566, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jYHG76orGgFv for <sidr@ietfa.amsl.com>; Wed, 10 Aug 2011 12:44:42 -0700 (PDT)
Received: from imr4.ericy.com (imr4.ericy.com [198.24.6.9]) by ietfa.amsl.com (Postfix) with ESMTP id A61C021F86D0 for <sidr@ietf.org>; Wed, 10 Aug 2011 12:44:42 -0700 (PDT)
Received: from eusaamw0707.eamcs.ericsson.se ([147.117.20.32]) by imr4.ericy.com (8.14.3/8.14.3/Debian-9.1ubuntu1) with ESMTP id p7AJjAco024495; Wed, 10 Aug 2011 14:45:12 -0500
Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.2.94]) by eusaamw0707.eamcs.ericsson.se ([147.117.20.32]) with mapi; Wed, 10 Aug 2011 15:45:07 -0400
From: Jakob Heitz <jakob.heitz@ericsson.com>
To: Danny McPherson <danny@tcb.net>, sidr wg list <sidr@ietf.org>
Date: Wed, 10 Aug 2011 15:45:06 -0400
Thread-Topic: [sidr] beacons and bgpsec
Thread-Index: AcxXlRmnQwW7h1DgS1SnG58OR0IO1gAAIZlw
Message-ID: <7309FCBCAE981B43ABBE69B31C8D213914A20DE8E5@EUSAACMS0701.eamcs.ericsson.se>
References: <A37CADA4-F16D-4C01-8D9C-D01001C4EFE4@tcb.net> <21C19DA8-7BF3-4832-8C13-C9A45FE026FB@algebras.org> <87D9E106-2A37-4E1E-8C69-7084C199A3FE@tcb.net> <331AEFBD-6AE5-469E-A11E-E672DC61DCDC@pobox.com> <B92913D1-AB82-4D9F-B8A9-F8F4F99713D6@tcb.net> <p06240803ca685bff5443@[128.89.89.43]> <D6D12861-412E-4A65-B626-B627449981B8@tcb.net>
In-Reply-To: <D6D12861-412E-4A65-B626-B627449981B8@tcb.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [sidr] beacons and bgpsec
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Aug 2011 19:44:43 -0000

Beaconing 3,600,000 paths (from RIB size preso) every 8 hours
is 125 updates per second on average. More than a few percent extra load.

--
Jakob Heitz.
 

> -----Original Message-----
> From: sidr-bounces@ietf.org [mailto:sidr-bounces@ietf.org] On 
> Behalf Of Danny McPherson
> Sent: Wednesday, August 10, 2011 12:38 PM
> To: sidr wg list
> Subject: Re: [sidr] beacons and bgpsec
> 
> 
> On Aug 10, 2011, at 12:04 PM, Stephen Kent wrote:
> 
> > My recollection of Randy's presentation was not what you suggest.
> 
> Again, I don't recall putting any words in Randy's mouth, if 
> I did, it was unintentional.  However...
> 
> > I think he said that having each AS along a path associated 
> a lifetime with the sig it applied to an update was a bad 
> idea.  He also said that a beacon rate of about 24 hours, at 
> the origin AS, seemed potentially useful, and would not 
> result in excessive routing churn.
> 
> Periodic updates of the entire routing table *with much 
> larger and more updates* seems undesirable at best to me, 
> particularly to ""reduce the vulnerability window for replay 
> attacks" to "days".
> 
> I suggest we stick with the current triggered updates 
> operation or take this to IDR, it's a fundamental change from 
> where we are today, and one's perspective of "excessive 
> routing churn" seems to be relative.
> 
> -danny
> _______________________________________________
> sidr mailing list
> sidr@ietf.org
> https://www.ietf.org/mailman/listinfo/sidr
>