Re: [sidr] Updates to rpki-rtr protocol (RFC 6810 bis)

Matthias Waehlisch <waehlisch@ieee.org> Sun, 16 March 2014 23:40 UTC

Return-Path: <waehlisch@ieee.org>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE1E61A023A for <sidr@ietfa.amsl.com>; Sun, 16 Mar 2014 16:40:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.815
X-Spam-Level: *
X-Spam-Status: No, score=1.815 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HELO_EQ_DE=0.35, SPF_SOFTFAIL=0.665] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YEA3gSxZZfNa for <sidr@ietfa.amsl.com>; Sun, 16 Mar 2014 16:40:42 -0700 (PDT)
Received: from mail1.rz.htw-berlin.de (mail1.rz.htw-berlin.de [141.45.10.101]) by ietfa.amsl.com (Postfix) with ESMTP id F3A5C1A01F1 for <sidr@ietf.org>; Sun, 16 Mar 2014 16:40:41 -0700 (PDT)
Envelope-to: sidr@ietf.org
Received: from g231108200.adsl.alicedsl.de ([92.231.108.200] helo=mw-PC.fritz.box) by mail1.rz.htw-berlin.de with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <waehlisch@ieee.org>) id 1WPKfQ-000DjF-L8; Mon, 17 Mar 2014 00:40:32 +0100
Date: Mon, 17 Mar 2014 00:40:30 +0100
From: Matthias Waehlisch <waehlisch@ieee.org>
To: Rob Austein <sra@hactrn.net>
In-Reply-To: <20140309101809.B5A23B02C27@minas-ithil.hactrn.net>
Message-ID: <Pine.WNT.4.64.1403170006540.6300@mw-PC>
References: <5318AD76.6060204@bbn.com> <20140306173133.8F64AAFEE87@minas-ithil.hactrn.net> <Pine.WNT.4.64.1403061923340.11648@mw-PC> <20140307103958.5FA6AAFFE52@minas-ithil.hactrn.net> <Pine.WNT.4.64.1403071209510.11648@mw-PC> <20140309101809.B5A23B02C27@minas-ithil.hactrn.net>
X-X-Sender: mw@mail2.rz.fhtw-berlin.de
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
X-HTW-SPAMINFO: this message was scanned by eXpurgate (http://www.eleven.de)
X-HTW-DELIVERED-TO: sidr@ietf.org
Archived-At: http://mailarchive.ietf.org/arch/msg/sidr/e-oAmrpUGmchiQIwaYQGrpnAaRw
Cc: sidr@ietf.org
Subject: Re: [sidr] Updates to rpki-rtr protocol (RFC 6810 bis)
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 16 Mar 2014 23:40:44 -0000

Sorry for the late reply ...

On Sun, 9 Mar 2014, Rob Austein wrote:

> >   What happens if the ASNs are not in order (for some strange bug 
> > reason)? It wouldn't harm the router?
> 
> Point.  So maybe caches MUST generate the canonical format but routers 
> MAY skip checking to see whether the cache goofed this up?
> 
  Sounds good.

> > > Given that the rpki-rtr protocol requires duplicate elimination, we do 
> > > need to perform such comparisons, so making them as simple as possible 
> > > seems advisable.
> > >
> >   I suppose this requires an update of the duplicate description 
> > (similar text of Section 5.6 in Section 5.10, and update Section 11, no 
> > 11).
> 
> Or consolidate the discussion of duplicate PDUs somewhere else in the
> document, but yes, we need to nail that down.
> 
  I'm more in favor of consolidating.

  Just to double check, because the term "duplicate" is not very clear 
in this context - at least to me. In contrast to RFC 6810, in RFC 
6810-bis a Router Key PDU contains a list of ASNs. The received PDU may 
differ even though parts of the content are duplicates.

  RFC 6810 says "identical to one it already has active", which means 
that we are checking pieces of content. For example, the router receives 
Router Key PDU with ASNs {10,20,30} and later the 'same' PDU but with 
ASNs {10,20}. I would consider this as a duplicate. However, in this 
case the ordering doesn't help to apply binary string comparison.




Thanks
  matthias