Re: [Sidrops] Which 8210-bis error code should be used?

"Borchert, Oliver (Fed)" <oliver.borchert@nist.gov> Thu, 18 May 2023 17:39 UTC

Return-Path: <oliver.borchert@nist.gov>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 454E4C1516E1 for <sidrops@ietfa.amsl.com>; Thu, 18 May 2023 10:39:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level:
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=nist.gov
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HHHD2EnmlDbx for <sidrops@ietfa.amsl.com>; Thu, 18 May 2023 10:39:41 -0700 (PDT)
Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl0gcc02on20727.outbound.protection.outlook.com [IPv6:2a01:111:f400:7d05::727]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16EDDC14F73E for <sidrops@ietf.org>; Thu, 18 May 2023 10:39:40 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UXC1PUAkHFs8//mD2QmOfduPzi4HgR3D63RP88TFZZCOTR8IqtSuLAMW/0O72zbULZWSd8/eO6AuTmyrCvwheEMZb/9FzvsbGhRerPtwoF3grfsiVqvfH2oMmMai4zwzxXXP7aOuca6c4zeesmBAGPgv/5Hk0ZWQ2n3C3Xq1ZaUI8u8Wj/sjhIBZnhs9M1rlca/BPCtLT7p4A1sKDAaH35cR4/03S/PI1na8oJoYeYo6yTN7VvegPMm0eImLCM5/qcEBSXrqWOG8wrzbRKtZKSXAxJ5Zy4HUwI0BVpAqsmAS2K292RaMYy9F4tbf+UP4ewPPw3rIZcj8D8GSh507/w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=pbbyOfAidczFvXfAQj4RI0hbUbuOGJRdQHRj5r52Vm0=; b=YL1hcMEIZwtp7oXe+DcU1XxdT0f7iV3Mfgif6sRO9MNbLz9mg8z8Us52SkmvfcMrTuscZgvukpF+M5i/FzXhiswpbkVjwDE09747gPsbcX8xnp1pPs3hbmbZ5vmBEnuH/+wv+7pf2Ke7TJwIh+1uMl/Z6Sm5iEbsAr0IL3yjSfe+NLjH5UygbOPrp1YDdE5drAtHKuQIyx0MPwltTM0Nu2cT71NkN/M5opSIlUSs3YMgmku3lVSqGQHZyv7ymJwIjII8BZTbXNQLHytEB5sX/BaxRCcWgOIUle2DR6lj4TwwKRw5//Rn8xM+/JR/OL4lryaElgzl9qS8hpwOUqwqug==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pbbyOfAidczFvXfAQj4RI0hbUbuOGJRdQHRj5r52Vm0=; b=mkh1AtfJ7qRUzoBgnvP8NKhSjiUuYhKITds+q6ckFzqGF3ZhERrkVlso5qFeEtDL1thFI1oRmPWCQgA7W70/roqilRd5UU+gFZDvlmeMOOq8CdFpvjulPJeGcSOwQfqueQSNMoi2t+HUV2T2mUWIroeS9rX7+w+LDIEXbP4V6sknk9pguCQfFzJrCHLAN4pp56tKzw3rv9Ar37qtI6SDMmgZmO1Jm4AbPygYblWnowF+NY0AhHhXKqc53g7LYYVgPGF//ysLKF2wrWS11FXUaKmcaJ+5U0RPGDtHWqRuyFu0IBhmrPIkq8cYouXCm3BY4WUC1O2wU7Y11li9vIMi0g==
Received: from BLAPR09MB6322.namprd09.prod.outlook.com (2603:10b6:208:2af::22) by PH8PR09MB9264.namprd09.prod.outlook.com (2603:10b6:510:18c::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6411.19; Thu, 18 May 2023 17:39:37 +0000
Received: from BLAPR09MB6322.namprd09.prod.outlook.com ([fe80::4cfd:5a22:71b0:3149]) by BLAPR09MB6322.namprd09.prod.outlook.com ([fe80::4cfd:5a22:71b0:3149%7]) with mapi id 15.20.6411.019; Thu, 18 May 2023 17:39:37 +0000
From: "Borchert, Oliver (Fed)" <oliver.borchert@nist.gov>
To: Randy Bush <randy@psg.com>, "Borchert, Oliver (Fed)" <oliver.borchert=40nist.gov@dmarc.ietf.org>
CC: "sidrops@ietf.org" <sidrops@ietf.org>, "Borchert, Oliver (Fed)" <oliver.borchert@nist.gov>
Thread-Topic: [Sidrops] Which 8210-bis error code should be used?
Thread-Index: AQHZh2KgZ9Wt6dWEK0mqYTQIdTmM2a9ffN0AgADMurE=
Date: Thu, 18 May 2023 17:39:16 +0000
Message-ID: <BLAPR09MB632224CB11EE517815DA439F987F9@BLAPR09MB6322.namprd09.prod.outlook.com>
References: <BLAPR09MB632225B977B3138A7E05793E98789@BLAPR09MB6322.namprd09.prod.outlook.com> <m28rdms05t.wl-randy@psg.com>
In-Reply-To: <m28rdms05t.wl-randy@psg.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nist.gov;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BLAPR09MB6322:EE_|PH8PR09MB9264:EE_
x-ms-office365-filtering-correlation-id: 49078803-2150-4a46-ee31-08db57c6d9b7
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BLAPR09MB6322.namprd09.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230028)(4636009)(366004)(451199021)(966005)(71200400001)(6666004)(166002)(7696005)(55016003)(26005)(107886003)(66574015)(186003)(9686003)(6506007)(53546011)(38070700005)(122000001)(82960400001)(33656002)(38100700002)(110136005)(54906003)(86362001)(5660300002)(52536014)(66946007)(8676002)(4326008)(8936002)(66476007)(66556008)(66446008)(64756008)(76116006)(66899021)(498600001)(2906002)(45080400002); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_BLAPR09MB632224CB11EE517815DA439F987F9BLAPR09MB6322namp_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BLAPR09MB6322.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 49078803-2150-4a46-ee31-08db57c6d9b7
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 May 2023 17:39:37.0609 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR09MB9264
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/FAS75gn1TM1_33bKOkitwOD7Iq0>
Subject: Re: [Sidrops] Which 8210-bis error code should be used?
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 May 2023 17:39:45 -0000

I see it the following way. If ASPA Profile requires the generation of an AS0 and 8210bis supports ASPA profile, then 8210bis must provide a way to solve to issue.


  *   One more modification of the PDU by removing the AFI Flag and all following fields with [Customer_ASN, Provider-AS-Count-IPV4, list-of-PAS, Provider-AS-Count-IPv6, list-of-PAS]. With a Provider-AS-Count of 0 representing an AS0, same as Provider-AS-Count of 1 with an AS0 element in the list. (or Provider-AS-Count = 1..n which forces an ASN to be specified.)
  *   Or adding an error code “9: ASPA pair missing” to indicate to the provider that an expected AFI for an ASPA PDU is missing.

If ASPA Profile does not require (SHOULD or less) the generation of an AS0 ASPA then don’t even mention it. Mention it only in the draft that deals with the algorithm itself and both drafts Profile and 8210bis just ignore it.

But leaving it in an undefined form is bad design.

From: Randy Bush <randy@psg.com>
Date: Thursday, May 18, 2023 at 1:01 AM
To: Borchert, Oliver (Fed) <oliver.borchert=40nist.gov@dmarc.ietf.org>
Cc: sidrops@ietf.org <sidrops@ietf.org>, Borchert, Oliver (Fed) <oliver.borchert@nist.gov>
Subject: Re: [Sidrops] Which 8210-bis error code should be used?
> When processing the ASPA PDU of
> https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Fdraft-ietf-sidrops-8210bis-10&data=05%7C01%7Coliver.borchert%40nist.gov%7Cc2eac99781014785d75808db575cf882%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C0%7C638199829078928793%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=lH%2Fo0mMmk%2FR5LVjtu34dlqgdubxdvxcS5q6Cr%2BmF6Pk%3D&reserved=0<https://datatracker.ietf.org/doc/html/draft-ietf-sidrops-8210bis-10>,
> the profile draft
> https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Farchive%2Fid%2Fdraft-ietf-sidrops-aspa-profile-13.txt&data=05%7C01%7Coliver.borchert%40nist.gov%7Cc2eac99781014785d75808db575cf882%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C0%7C638199829078928793%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=m8DuVJ%2B5n8S3BhzghLxBXLObgu%2BXdkl647LWn6OGAVE%3D&reserved=0<https://www.ietf.org/archive/id/draft-ietf-sidrops-aspa-profile-13.txt>
> and in particular Appendix A mentions that: “Note that two PDUs are
> always generated per Customer ASID: one with AFI Flags = IPv4 and one
> with AFI Flags = IPv6.”. This requires when using 8210bis to propagate
> the data to the router (client) that 2 separate PDU’s need to be
> generated because a single ASPA PDU only contains provider information
> for a single AFI.
>
> Question:
> =========
> What error code should I use when the router only receives in total
> one of them?

42 - bad internet-draft