[Sidrops] Re: draft-ietf-sidrops-8210bis-23 is ambiguous session mismatch handling

Ralph Covelli <rcovelli@he.net> Sun, 21 December 2025 02:28 UTC

Return-Path: <rcovelli@he.net>
X-Original-To: sidrops@mail2.ietf.org
Delivered-To: sidrops@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id DA2149D6846A for <sidrops@mail2.ietf.org>; Sat, 20 Dec 2025 18:28:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=he.net
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id odtUU8MdW1dT for <sidrops@mail2.ietf.org>; Sat, 20 Dec 2025 18:28:34 -0800 (PST)
Received: from mailhost.lightning.net (mailhost.lightning.net [209.51.160.9]) by mail2.ietf.org (Postfix) with SMTP id 67F299D68463 for <sidrops@ietf.org>; Sat, 20 Dec 2025 18:28:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=he.net; s=lightning; x=1766888908; i=rcovelli@he.net; h=Received: Received:Content-Type:Message-ID:Date:MIME-Version:User-Agent: Subject:To:References:Content-Language:From:In-Reply-To; bh=jIlx QqeXnm2ApeK8GlVSNk/TilDBWBT85/XOQ920aik=; b=VElwfUMkqkgTaSAuLuhe EfaKRzrz+YeF/JD7vafanwKyvPbSNDLpeZnkt3OOjPCFxRCWWp6tg9EUHCzE2E+G NFQ7n8Sf9kJyVYiCbsVCDnbYHACBgwqsHNBGJ4Alt/g9MPDkvEbi7yjsc30xqYGB kmeJx8W/NRSCVbawnjShgEk=
Received: (qmail 7431 invoked from network); 21 Dec 2025 02:28:28 -0000
Received: from traffic.lightning.net (HELO ?172.16.2.4?) (ralph@lightning.net@209.51.160.8) by mailhost.lightning.net with ESMTPA; 21 Dec 2025 02:28:28 -0000
Content-Type: multipart/alternative; boundary="------------V0HWE6ieNk48JFOtRrquMviv"
Message-ID: <4df00da3-0ffd-4b58-8671-9aa28ac14fb7@he.net>
Date: Sat, 20 Dec 2025 21:29:50 -0500
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: sidrops@ietf.org
References: <CAO367rWV4rsnSM9jYG3N1hfPjq8mhqn36m0SLzO9eF6QZAgQ9g@mail.gmail.com> <ab35bfd7-4ac8-4a0f-990c-f4f66bbb9627@he.net> <c2c4ef74-8c26-4a42-b667-555acbbf3532@he.net> <228ff33f-ddb0-46c5-aadf-7b742554165e@he.net>
Content-Language: en-US
From: Ralph Covelli <rcovelli@he.net>
In-Reply-To: <228ff33f-ddb0-46c5-aadf-7b742554165e@he.net>
Message-ID-Hash: VLPTZR3BHUMUCDMNWVHTBWZSUFPMHJOI
X-Message-ID-Hash: VLPTZR3BHUMUCDMNWVHTBWZSUFPMHJOI
X-MailFrom: rcovelli@he.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-sidrops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Sidrops] Re: draft-ietf-sidrops-8210bis-23 is ambiguous session mismatch handling
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/EubMv4GvUDFxyZsl5dU5sjqyFHw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Owner: <mailto:sidrops-owner@ietf.org>
List-Post: <mailto:sidrops@ietf.org>
List-Subscribe: <mailto:sidrops-join@ietf.org>
List-Unsubscribe: <mailto:sidrops-leave@ietf.org>

Hi,

It should also be pointed out that this means when a router receives a 
Cache Reset from an RTR cache they must be willing to update their 
session ID (from the subsequent Cache Response/EOD).

When a router receives a Cache Reset because the sequence number has 
fallen out of the cache window this is not the case.

If a router continues to use the old session ID after the Cache Reset, 
the RTR cache should send an error and terminate the session.

Thanks!

On 12/20/2025 9:05 PM, Ralph Covelli wrote:
>
> Or maybe "during the protocol version negotiation" sounds a little 
> more human. :-)
>
> On 12/20/2025 8:54 PM, Ralph Covelli wrote:
>>
>> Hello SIDROps!
>>
>> Perhaps the following will clear up any possible future confusion:
>>
>> 5.3. Serial Query:
>>     The Session ID tells the cache what instance the router expects to
>>     ensure that the Serial Numbers are commensurate, i.e., the cache
>>     session has not been changed.  If the Session ID does not match
>>     during protocol version negotiation, the cache MUST respond with a
>>     Cache Reset.
>>
>> Thanks!
>>
>> On 12/17/2025 1:46 PM, Ralph Covelli wrote:
>>>
>>> Hi,
>>>
>>> The 5.3 wording was added because of me.  Perhaps it can use a 
>>> little more tweaking.
>>>
>>> Both Reset Queries and Serial Queries can be the first command issued.
>>>
>>> When the Serial Query is the *first command issued* and the session 
>>> ID numbers do not match the RTR cache, then the RTR cache should 
>>> send a Cache Reset.
>>>
>>> If a later Serial Query is issued and the session ID number somehow 
>>> changes the RTR cache must terminate the session.
>>>
>>> Thanks!
>>>
>>> Ralph Covelli
>>> Network Engineer
>>> Hurricane Electric / AS6939
>>> On 12/17/2025 8:38 AM, Marco Marzetti wrote:
>>>> Dear members of the SIDROPS WG,
>>>>
>>>> I am working on a Python implementation of a RTR Cache, and I 
>>>> noticed some ambiguity around how session mismatch should be handled.
>>>>
>>>> At 5.1. (Fields of a PDU) the draft states that:
>>>>       If, at any time after the
>>>>       protocol version has been negotiated (Section 7), either the
>>>>       router or the cache finds that the value of the Session ID is not
>>>>       the same as the other's, the party which detects the mismatch 
>>>> MUST
>>>>       immediately terminate the session with an Error Report PDU with
>>>>       code 0 ("Corrupt Data"), and the router MUST flush all data
>>>>       learned from that cache.
>>>>
>>>> While at 5.3. (Serial Query), the it states:
>>>>    The Session ID tells the cache what instance the router expects to
>>>>    ensure that the Serial Numbers are commensurate, i.e., the cache
>>>>    session has not been changed.  If the Session ID does not match, the
>>>>    cache MUST respond with a Cache Reset.
>>>>
>>>>
>>>> Does that mean that the Cache should send the Error Report PDU in 
>>>> all cases but not in response to a Serial Query?
>>>>
>>>> Thanks
>>>>
>>>> -- 
>>>> Marco
>>>>
>>>> _______________________________________________
>>>> Sidrops mailing list --sidrops@ietf.org
>>>> To unsubscribe send an email tosidrops-leave@ietf.org
>>>
>>> _______________________________________________
>>> Sidrops mailing list --sidrops@ietf.org
>>> To unsubscribe send an email tosidrops-leave@ietf.org
>>
>> _______________________________________________
>> Sidrops mailing list --sidrops@ietf.org
>> To unsubscribe send an email tosidrops-leave@ietf.org
>
> _______________________________________________
> Sidrops mailing list --sidrops@ietf.org
> To unsubscribe send an email tosidrops-leave@ietf.org