Re: [sidr] WGLC draft-sidr-rpki-rtr - take 2?

[Joe Touch <[e-mail]>]

Hi, all,

On 6/4/2011 5:56 PM, Christopher Morrow wrote:
> On Sat, Jun 4, 2011 at 10:02 AM, Joe Touch<[e-mail]>  wrote:
>> So basically the problem is that:
>>
>> - routers don't all support IPsec for the control plane
>>
>> - servers don't yet implement AO
>
> routers don't yet support AO either :( at least not in juniper 10.x
> code nor cisco 12.2(S) or 15 code...
> (or not that I've seen and been able to configure, though at least 1
> of the 2 there say 'coming RSN!')

One other thing to keep in mind is whether this doc (and to some extent, 
the IETF as a whole) should follow or lead.

If we're followers, then the answer is clear - watch what the hackers 
implement.

If we're leaders, we should focus on the goal state, recognizing that 
all issued requirements are - at best - goals anyway.

>> Yes, servers will support AO, if for no other reason than they support BGP and MD5 now.
>
> agreed, some heat is required to make this happen (heat == 'gosh I'd
> love my Oracle/fbsd/linux server(s) to be able to run quagga to my new
> and old IOS boxes...')

Again, follow vs. lead. If we're leading, then we should recognize that 
we're talking about a very small amount of resources need to accomplish 
this task. I'm already working with the funding agencies and a few 
companies with similar 'rfp' processes to access those resources. If 
anyone wants to help with any resources, please let me know.

Joe