Re: [Sidrops] Which 8210-bis error code should be used?

"Hollyman, Michael" <mhollyman@verisign.com> Thu, 01 June 2023 17:53 UTC

IronPort-Data: A9a23:Rhyz+a6WSBQcLnn1W+wgoAxRtDjGchMFZxGqfqrLsTDasY5as4F+v mFNWW+EPPmCY2r1KI13b47ioEJX756AzYVlSVZu+yo9Eysa+MHIO4+Ufxz6V8+wwm8vb2o8t plDNYOQRCwQZiWBzvt4GuG59RGQ7YnRGvymTras1hlZHWdMUD0mhQ9oh9k3i4tphcnRKw6Ws LsemeWGULOe82Ayajp8B56r8ks156ys4GpA5TTSWNgQ1LPgvyhNZH4gDfzpR5fIatE8NvK3Q e/F0Ia48gvxl/v6Ior4+lpTWhRiro/6ZWBiuFIPM0SRqkEqShgJ70oOHKF0hXF/0GzVwo8rm L2hgrTrIeshFvWkdO01DUEEQ3kmVUFM0OevzXOX6aR/w6BaGpdFLjoH4EweZOUlFuhL7W5m0 PAbNisVYTK/i8mc0rS1cOB+3f8hBZy+VG8fkikIITDxJ8wAGK/lbpWSvJlG1zAqnoZHEbDAf dEfLzFoaXwsYTUWYhFOV8l4xbrzwCWvG9FbgAv9Sa4f5mjUyAhg1bHrGMTYYN2RRMpT2E2fo woq+kyjWU1EaI3GmFJp9Fqlj6jTxRLlZ74rBZy518Zuoh7C93IMXUh+uVyT5KPRZlSFc8leJ 1YT4jEGrKUu+gqsVNaVdxGiqXCY+x8RR9QVCOw28gaV0e/d+B6QQ3YJVD9PadcvqM4xQxQr2 0OH2dTzClRSXKa9Q2ibr6iSoCPqYG0OM3VEYC4fCAECpdP5pth1kAjUSJBoF6vdYsDJJAwcC gui9EAW74j/R+ZSv0ln1TgrWw6Rm6U=
IronPort-HdrOrdr: A9a23:G7hhAqMeKDMfncBcThyjsMiBIKoaSvp037BN7TEVdfU1SL37qy nAppQmPHPP5gr5O0tOpTnoAsDpfZq2z+8X3WB+B9afdTijlmeuIJpr8IfuhxbxcheTysdtkY NtabJ3BtG1L1Rr5PyR3CCIV/It2sOO/qztv/rZ1HsFd2xXQrtt9Bh0ETyWFUBKRA1LbKBTKK ah
From: "Hollyman, Michael" <mhollyman@verisign.com>
To: "sidrops@ietf.org" <sidrops@ietf.org>
CC: "draft-ietf-sidrops-aspa-verification@ietf.org" <draft-ietf-sidrops-aspa-verification@ietf.org>
Thread-Topic: [Sidrops] Which 8210-bis error code should be used?
Thread-Index: AQHZlLH7syb/BcM9AE+wusevk3DUTw==
Date: Thu, 01 Jun 2023 17:53:33 +0000
Message-ID: <F338C878-E41A-4DB7-A4C6-1CEE0A6F6502@verisign.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="utf-8"
Content-ID: <CE95010A71FF484795C47B8BBC5B15EA@verisign.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/ApbY90exqBHM2sVlqI1ADnWlBTA>
Subject: Re: [Sidrops] Which 8210-bis error code should be used?
Precedence: list

I tend to agree with Claudio and Martin here. I think the afiLimit should be removed from ASPA, if possible, or it will become just like max-length: "It is here but don't use it."  There shouldn't be any inference of intent in ASPA when one is published with an AFI and another without. 

It appears to me that the spirit of ASPA is to simply list the provider ASes for a CAS. Keeping that simple and by AS, not by AFI, seems to be a logical choice. 

Full path control is BGPSec. ASPA is an incremental step forward in preventing leaks and some hijacks.  Simplicity of ASPA should be the key in order to gain the most acceptance and usage. 

Mike

On 5/24/23, 03:39, "Sidrops on behalf of Claudio Jeker" <sidrops-bounces@ietf.org <mailto:sidrops-bounces@ietf.org> on behalf of cjeker@diehard.n-r-g.com > <mailto:cjeker@diehard.n-r-g.com>> wrote:

> I would love to remove the optional afiLimit from ASPA.
> I brought this up a few times (well before there was any implementation of
> any ASPA draft) and every time the answer of some of the authors was no
> (without any particular reason).

> As one of the developers of the first RP and only BGP implementation
> handling ASPA I would enjoy to remove all the code required to handle the
> afiLimit. We probably control most test deployments (RP and BGP side) and
> are willing to make this change.

> -- 
> :wq Claudio

[Sidrops] Which 8210-bis error code should be use… Borchert, Oliver (Fed)
Re: [Sidrops] Which 8210-bis error code should be… Randy Bush
Re: [Sidrops] Which 8210-bis error code should be… Claudio Jeker
Re: [Sidrops] Which 8210-bis error code should be… Claudio Jeker
Re: [Sidrops] Which 8210-bis error code should be… Borchert, Oliver (Fed)
Re: [Sidrops] Which 8210-bis error code should be… Borchert, Oliver (Fed)
Re: [Sidrops] Which 8210-bis error code should be… Sriram, Kotikalapudi (Fed)
Re: [Sidrops] Which 8210-bis error code should be… Borchert, Oliver (Fed)
Re: [Sidrops] Which 8210-bis error code should be… Sriram, Kotikalapudi (Fed)
Re: [Sidrops] Which 8210-bis error code should be… Claudio Jeker
Re: [Sidrops] Which 8210-bis error code should be… Claudio Jeker
Re: [Sidrops] Which 8210-bis error code should be… Claudio Jeker
[Sidrops] some wording improvements in draft-ietf… Sriram, Kotikalapudi (Fed)
Re: [Sidrops] some wording improvements in draft-… Borchert, Oliver (Fed)
Re: [Sidrops] Which 8210-bis error code should be… Jay Borkenhagen
Re: [Sidrops] Which 8210-bis error code should be… Claudio Jeker
Re: [Sidrops] Which 8210-bis error code should be… Martin Hoffmann
Re: [Sidrops] Which 8210-bis error code should be… Claudio Jeker
Re: [Sidrops] Which 8210-bis error code should be… Job Snijders
Re: [Sidrops] Which 8210-bis error code should be… Randy Bush
Re: [Sidrops] Which 8210-bis error code should be… Martin Hoffmann
Re: [Sidrops] Which 8210-bis error code should be… Tim Bruijnzeels
Re: [Sidrops] Which 8210-bis error code should be… Tim Bruijnzeels
Re: [Sidrops] Which 8210-bis error code should be… Borchert, Oliver (Fed)
Re: [Sidrops] Which 8210-bis error code should be… Jay Borkenhagen
Re: [Sidrops] Which 8210-bis error code should be… Hollyman, Michael
Re: [Sidrops] Which 8210-bis error code should be… Mikael Abrahamsson
Re: [Sidrops] Which 8210-bis error code should be… Tony Tauber
Re: [Sidrops] Which 8210-bis error code should be… Yangyang Wang
Re: [Sidrops] Which 8210-bis error code should be… Tim Bruijnzeels
Re: [Sidrops] Which 8210-bis error code should be… Claudio Jeker
Re: [Sidrops] Which 8210-bis error code should be… Tim Bruijnzeels
Re: [Sidrops] Which 8210-bis error code should be… gengnan
Re: [Sidrops] Which 8210-bis error code should be… Claudio Jeker
Re: [Sidrops] Which 8210-bis error code should be… Borchert, Oliver (Fed)