Re: [Sidrops] Format of ASPA RTR PDU

Claudio Jeker <cjeker@diehard.n-r-g.com> Tue, 07 November 2023 15:24 UTC

Return-Path: <cjeker@diehard.n-r-g.com>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2825C15108F for <sidrops@ietfa.amsl.com>; Tue, 7 Nov 2023 07:24:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.205
X-Spam-Level:
X-Spam-Status: No, score=-4.205 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uzJ5ehelwv2m for <sidrops@ietfa.amsl.com>; Tue, 7 Nov 2023 07:24:39 -0800 (PST)
Received: from diehard.n-r-g.com (diehard.n-r-g.com [62.48.3.9]) (using TLSv1.3 with cipher TLS_CHACHA20_POLY1305_SHA256 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA512) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36691C16F401 for <sidrops@ietf.org>; Tue, 7 Nov 2023 07:24:38 -0800 (PST)
Received: (qmail 76802 invoked by uid 1000); 7 Nov 2023 15:24:34 -0000
Date: Tue, 07 Nov 2023 16:24:34 +0100
From: Claudio Jeker <cjeker@diehard.n-r-g.com>
To: Maria Matejka <maria.matejka=40nic.cz@dmarc.ietf.org>
Cc: sidrops <sidrops@ietf.org>, Kateřina Kubecová <katerina.kubecova@nic.cz>, Ondrej Zajicek <santiago@crfreenet.org>
Message-ID: <ZUpWsu5xtPSJwUN2@diehard.n-r-g.com>
References: <0d8fcb69-54e1-4ba3-b5c9-29f93b3271eb@nic.cz>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <0d8fcb69-54e1-4ba3-b5c9-29f93b3271eb@nic.cz>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/4VaMmOI-6IIv_udixxc_bBOBo_A>
Subject: Re: [Sidrops] Format of ASPA RTR PDU
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Nov 2023 15:24:40 -0000

On Tue, Nov 07, 2023 at 04:00:49PM +0100, Maria Matejka wrote:
> Hello!
> 
> While trying to implement ASPA in RTR, we got confused by § 5.12, ASPA PDU,
> as of draft-ietf-sidrops-8210bis-11. Bytes 2 and 3 are set to zero and bytes
> 10 and 11 are encoding Provider AS Count which can be inferred from the
> overall PDU length easily. Is there any good reason to have this redundant
> information inside the PDU? We are suggesting to move the Flags and AFI
> Flags to bytes 2 and 3 and to drop Provider AS Count completely. The
> Customer ASN would then start at byte 8 and Provider ASNs would start at
> byte 12.

To be honest, the RTR bits are nowhere close to be ready. Especially these
questions have been raised numerous times by various developers
implementing this draft but the authors seem to not listen.
Right now draft-ietf-sidrops-8210bis is holding up all of ASPA.
 
> Also, while writing this, there arose another question. Is there any
> significant difference between ASPA with only Provider AS Zero and ASPA with
> no Provider AS at all?

While theoretically true draft-ietf-sidrops-aspa-profile-16 states
in section 3:
    ProviderASSet ::= SEQUENCE (SIZE(1..MAX)) OF ASID

So there must be at least one ASID in the ProviderASSet to be a valid ASPA
profile. Because of this I would not depend on a ASPA record with empty
ProviderASSet.

In OpenBGPD the parser of static ASPA tables does not allow empty
ProviderASSet but in the RTR code it currently does not treat an empty AS
count as an error. Now I would prefer if draft-ietf-sidrops-8210bis
properly states that there MUST be at least one Provider ASNs in the
payload. Since then there is no confusion possible.

-- 
:wq Claudio