[Sidrops] Any credence to AS_SET in the *middle* between AS_SEQUENCEs?

"Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov> Tue, 19 July 2022 21:24 UTC

Return-Path: <kotikalapudi.sriram@nist.gov>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD842C14F748; Tue, 19 Jul 2022 14:24:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.689
X-Spam-Level:
X-Spam-Status: No, score=-3.689 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.582, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.999, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C_bDbGMXdnws; Tue, 19 Jul 2022 14:24:19 -0700 (PDT)
Received: from GCC02-DM3-obe.outbound.protection.outlook.com (mail-dm3gcc02on2096.outbound.protection.outlook.com [40.107.91.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28BDAC13C534; Tue, 19 Jul 2022 14:24:17 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=l45GA5ILEQL6jw8KN5muVJaJq0bxpRcn2nKxhxJ4OQAwSt9bkmPnOPR03znXvk/49W7x+dCnowKyWorhK8Jbta+Vscd/W6FtP8vNFgRMmEo91SJ5acpbGbT+9fisquAcSoAZvJFZQfLlwFTkZdq+Gci06mt8/kbkowT/1tjXQ9s+fZFkVANRM3VAZcQv+LkRnvYeczhPRK1p77bzpBqcevMqk15Q61K9zdOEK1JJTN+/zhCUK6mOf4d4HHc2sF2qImvksaUiqKFre0q/DHPMW7eM4nyEauCRhj5GjL9ib32btzy4nC4A9/OPwBpSx3OOIbIvrX6qmtPXnbRR63p6Fg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=/Am778K9PEOJQlolyZvkl/9F5KN+h4aTDTsIaVLwzTs=; b=FVxsY77BBmDMaoJRgQMTbbiy5Wt5W3F5p00U9qkZadmlWyJdFiAOU8rInQudUJ/CARa6bixq/QgO+WzDXS/mGyf4JOfoqjYonDk7YZ3L1utJ5jfXdPXhwJeE/p6/XE+SBcxlJUhIU2zt8Y5rEMaGhV+GkBtN9FPCYaLwMgQJIC3AP9ufz1nRnHU3arF1xXE3VYZ1h3+NRr5qu5yelOjy9i+fQQznXw8LAgS2w3Ye/dXLnhFriCpeNxynTrhqgrRE0wasDIJmVuAUVL92YUcEYmwHPoIbVAeyDgvh/XUV95BZS8+s0HzBsOEDnongWMFZ+J/8y+y569PnbgDUqUOCaA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/Am778K9PEOJQlolyZvkl/9F5KN+h4aTDTsIaVLwzTs=; b=kAdS3W/pjznP+uLtQ4twcL7JlU+s5h9KA15wvCmJFllAehNPhi79/8do3BmGDrg5kf6xjk0MuKX2EigP8U6ZClfx4WA1z6V7xqwHhn0pI5G94/zSYZvBiEQefWxz5qYeC+KagE6CjYFsWgsfVlVSUUfB22323swJH+Z1L32t56E=
Received: from SA1PR09MB8142.namprd09.prod.outlook.com (2603:10b6:806:171::8) by PH8PR09MB9293.namprd09.prod.outlook.com (2603:10b6:510:18c::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5438.13; Tue, 19 Jul 2022 21:24:15 +0000
Received: from SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::e468:3642:30f4:8f64]) by SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::e468:3642:30f4:8f64%4]) with mapi id 15.20.5438.024; Tue, 19 Jul 2022 21:24:15 +0000
From: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>
To: "sidrops@ietf.org" <sidrops@ietf.org>, GROW WG <grow@ietf.org>
CC: "draft-ietf-sidrops-aspa-verification@ietf.org" <draft-ietf-sidrops-aspa-verification@ietf.org>, Jeffrey Haas <jhaas@pfrc.org>
Thread-Topic: Any credence to AS_SET in the *middle* between AS_SEQUENCEs?
Thread-Index: AQHYm6b3nHaOc2w6EUSXBKZiVD7GSg==
Date: Tue, 19 Jul 2022 21:24:15 +0000
Message-ID: <SA1PR09MB8142D357A98BFAAF206C387C848F9@SA1PR09MB8142.namprd09.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
suggested_attachment_session_id: 60c4250c-e7ec-13eb-c82b-c6812dde9ca3
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nist.gov;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a6e2eaa9-cfea-42d9-1761-08da69cd0825
x-ms-traffictypediagnostic: PH8PR09MB9293:EE_
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SA1PR09MB8142.namprd09.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230016)(4636009)(366004)(71200400001)(966005)(38100700002)(498600001)(86362001)(38070700005)(6506007)(7696005)(83380400001)(4743002)(26005)(82960400001)(186003)(91956017)(54906003)(110136005)(9686003)(55016003)(64756008)(5660300002)(76116006)(66476007)(66446008)(8936002)(52536014)(8676002)(66946007)(4326008)(66556008)(4744005)(33656002)(122000001)(2906002); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SA1PR09MB8142.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a6e2eaa9-cfea-42d9-1761-08da69cd0825
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Jul 2022 21:24:15.1582 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR09MB9293
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/XWLfOXoGbZuo7IAzgMM0Va9DTlY>
Subject: [Sidrops] Any credence to AS_SET in the *middle* between AS_SEQUENCEs?
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Jul 2022 21:24:23 -0000

Question: Operationally, is an AS_SET ever used in the *middle* between AS_SEQUENCEs? Or, should one simply give zero credence to it?

[Even as I was composing this post, Jeff has already given a helpful answer/suggestion to this in the other thread :) Please see:
https://mailarchive.ietf.org/arch/msg/sidrops/E-SS_hUgxuS5PmjToUC96UEWluU/ ]

Of course, additional thoughts/comments are welcome.

The ASPA verification algorithm gets slightly more complicated if we should bother to accommodate the case of AS_SET in the middle between AS_SEQUENCEs. (Note: AS_SET at the beginning (rightmost and towards the origin) is OK. We include it in our consideration.) 

As I recall, our (NIST) measurements based on Routeviews/RIPE-RIS data in the past did not show any AS_SETs in the middle. 

WG/operator inputs on the above question would help decide to either keep or avoid the above-mentioned additional complication (AS_SET in the middle) in the ASPA algorithm.

Thank you.

Sriram