Re: [Sidrops] New Version Notification for draft-sriram-sidrops-drop-invalid-policy-00.txt

Stephen Kent <stkent@verizon.net> Wed, 14 March 2018 00:13 UTC

Return-Path: <stkent@verizon.net>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1ABEC12702E for <sidrops@ietfa.amsl.com>; Tue, 13 Mar 2018 17:13:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uzbtR24u5hKo for <sidrops@ietfa.amsl.com>; Tue, 13 Mar 2018 17:13:30 -0700 (PDT)
Received: from omr-a011e.mx.aol.com (omr-a011e.mx.aol.com [204.29.186.59]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 15D08127010 for <sidrops@ietf.org>; Tue, 13 Mar 2018 17:13:30 -0700 (PDT)
Received: from mtaout-aaj01.mx.aol.com (mtaout-aaj01.mx.aol.com [172.27.3.205]) by omr-a011e.mx.aol.com (Outbound Mail Relay) with ESMTP id 4CD3038000B3; Tue, 13 Mar 2018 20:13:29 -0400 (EDT)
Received: from iMac-Study.fios-router.home (pool-108-49-30-217.bstnma.fios.verizon.net [108.49.30.217]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mtaout-aaj01.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id CA26138000084; Tue, 13 Mar 2018 20:13:28 -0400 (EDT)
To: "Montgomery, Douglas (Fed)" <dougm@nist.gov>, "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>, Tim Bruijnzeels <tim@ripe.net>
Cc: "sidrops-chairs@ietf.org" <sidrops-chairs@ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>
References: <152029076512.12908.14537578849320525718.idtracker@ietfa.amsl.com> <BYAPR09MB2773819AB3961189CDA9B4D784D90@BYAPR09MB2773.namprd09.prod.outlook.com> <074D75CB-7D34-4838-BEAA-88AE5E044F6C@ripe.net> <BYAPR09MB27738385E28497E1EC5B32AD84DE0@BYAPR09MB2773.namprd09.prod.outlook.com> <70613650-C8D6-43D9-8643-5694B77BADA9@nist.gov> <5d2afc8e-7f9a-e2bc-fa84-88b943639bd6@verizon.net> <C92B14E7-6F48-4627-8887-776C1321E603@nist.gov>
From: Stephen Kent <stkent@verizon.net>
Message-ID: <eb8ed78d-e42f-1ed1-e94f-6821929df9c6@verizon.net>
Date: Tue, 13 Mar 2018 20:13:28 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.6.0
MIME-Version: 1.0
In-Reply-To: <C92B14E7-6F48-4627-8887-776C1321E603@nist.gov>
Content-Type: multipart/alternative; boundary="------------F501423371BB2B1D31AC10F4"
Content-Language: en-US
x-aol-global-disposition: G
x-aol-sid: 3039ac1b03cd5aa869283650
X-AOL-IP: 108.49.30.217
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/4UjTVoQuLpha96k9ae2KOpeBC2o>
Subject: Re: [Sidrops] New Version Notification for draft-sriram-sidrops-drop-invalid-policy-00.txt
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Mar 2018 00:13:32 -0000

Doug,

I'm puzzled by your interpretation of RFC 7607. Specifically, Section 2 
of 7607 says:


    2. Behavior



    A BGP speaker MUST NOT originate or propagate a route with an AS
    number of zero in the AS_PATH, AS4_PATH, AGGREGATOR, or
    AS4_AGGREGATOR attributes.

    An UPDATE message that contains the AS number of zero in the AS_PATH
    or AGGREGATOR attribute MUST be considered as malformed and be
    handled by the procedures specified in [RFC7606].

    An UPDATE message that contains the AS number of zero in the AS4_PATH
    or AS4_AGGREGATOR attribute MUST be considered as malformed and be
    handled by the procedures specified in [RFC6793].

    If a BGP speaker receives zero as the peer AS in an OPEN message, it
    MUST abort the connection and send a NOTIFICATION with Error Code
    "OPEN Message Error" and subcode "Bad Peer AS" (seeSection 6 of [RFC4271]).  A router MUST NOT initiate a connection claiming to be
    AS 0.

This seems pretty definitive, and normative, not just a "usage convention" for AS 0,
as you suggest.

Steve

> Thanks Steve,
>
> You are right that the RFCs below should be referenced also.  Having reviewed them again, nothing I said previously seems to have changed.   AS 0 is at best a suggested usage convention.
>
> The thing I like about the 6483 text is that it makes explicit that ROAs can and will be created beneath an AS 0 ROA (one usage scenario is forcing your customers to issue ROAs before announcing their routes) and that all of this is "by convention".   So while not normative, I though 6483 painted the best picture of the issues we were discussing.
>
> dougm