[Sidrops] BAR-SAV: new draft on "Source Address Validation Using BGP Updates, ASPA, and ROA"
"Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov> Wed, 15 June 2022 12:20 UTC
Return-Path: <kotikalapudi.sriram@nist.gov>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1D29C15D869; Wed, 15 Jun 2022 05:20:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.531
X-Spam-Level:
X-Spam-Status: No, score=-3.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.745, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.677, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YzTLSnftjNF9; Wed, 15 Jun 2022 05:20:45 -0700 (PDT)
Received: from GCC02-DM3-obe.outbound.protection.outlook.com (mail-dm3gcc02on2071e.outbound.protection.outlook.com [IPv6:2a01:111:f400:7d04::71e]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B4F96C15D88B; Wed, 15 Jun 2022 05:20:44 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=A5PQd9JKMkLg++tpAAFhWB+v8fJ2L1nq76bqGH0PORaBIn9YRZLPVYPUbDSgrWv2cuCHygixIj/Z5n/8x9Z/A1uva/YUfooocp37K6zCcSZsQ+QOgoaTy5B1d7oCCE/47MNIoyx4vij04ybrd/pqi6qeWUKHnHQnoVNp7/TGLw+oq5QkHLCbOxRwbYZ5K0ilABGsYjHzEDG4+IlzpSG5nQtWcxSldDYXcnv2r4B2Yyco2/9tzVxM1JAVnm5+IPJYibtnypWdzWHuoRxqpUFmHOwNFgp1vEndghte7AsxQ04mtbvZNDCfUPhSlIsbvX7urwz0LKRJj782pSSYiAJ1Yw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=iQbFPIfaA3GgobCi4nf7Rcx57+H8ErQSk1BkKqHsvVs=; b=iseFfbj1KcgemvpCms4SSSHqZXn9pcBJL7ckX54xXTLnUARa5yQJ7KR6LoY+3SYwEpGhC8csZ2unq7Jz8fHeQba7By+NbWU31v6fyXh1D+cjI0H+pLHfDEJm99uA21eLkR1x1DcewUg0uES80Qj+ze9poIpWM8nW0b4t6SONqGF/AbgGdIUiQdbfdB9tafasHYj3RuHcVxmLdCvAqIHeVneox/1aezgG8/22nyVDNo6o1+NlZBIux8P9Xw0vuxZdC21jFF2pkLVIdWva2ufG/UA2auJ5KHdFW8KxDz1kbHNYEUZxDlZE84EgxRo8yR2a4yycXyCzbLOrZgjjgoAXmQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=iQbFPIfaA3GgobCi4nf7Rcx57+H8ErQSk1BkKqHsvVs=; b=awYV6JhfqG0hXtt8XU28pKtOADnnTbdLoyweMOkefB3+IS2NEALy7r53j1caX8tdP3cW2kyB8sPdXXZUCHRQx3nBkDMqz2EdTlqiUIXtedfj4iUlkpwEwaTJORPcNl4xqoVuji7Nul/7bjSJFcMmfkRHxU9RzPoYOy/Vff/zWOE=
Received: from SA1PR09MB8142.namprd09.prod.outlook.com (2603:10b6:806:171::8) by SA1PR09MB7566.namprd09.prod.outlook.com (2603:10b6:806:17e::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5332.13; Wed, 15 Jun 2022 12:20:38 +0000
Received: from SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::83d:b4f9:f4c0:bf86]) by SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::83d:b4f9:f4c0:bf86%6]) with mapi id 15.20.5332.020; Wed, 15 Jun 2022 12:20:38 +0000
From: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>
To: "sidrops@ietf.org" <sidrops@ietf.org>, "savnet@ietf.org" <savnet@ietf.org>
Thread-Topic: BAR-SAV: new draft on "Source Address Validation Using BGP Updates, ASPA, and ROA"
Thread-Index: AdiAsPZViyhsgu18TmOaXQomPY84/A==
Date: Wed, 15 Jun 2022 12:20:38 +0000
Message-ID: <SA1PR09MB81428822A52A72E622408E4484AD9@SA1PR09MB8142.namprd09.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nist.gov;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 83ec830d-ed50-4495-1027-08da4ec9753d
x-ms-traffictypediagnostic: SA1PR09MB7566:EE_
x-microsoft-antispam-prvs: <SA1PR09MB7566FFAF7A9B6909DF5F0FB184AD9@SA1PR09MB7566.namprd09.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SA1PR09MB8142.namprd09.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230016)(4636009)(366004)(4744005)(2906002)(8936002)(15650500001)(71200400001)(122000001)(82960400001)(966005)(186003)(508600001)(33656002)(83380400001)(8676002)(66476007)(64756008)(5660300002)(66946007)(316002)(52536014)(6506007)(7696005)(55016003)(110136005)(26005)(38070700005)(9686003)(86362001)(76116006)(38100700002)(4743002)(66446008)(66556008); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: EcVzSqfr/KDQd4FH+Nf70+F1LK+PGLTTx0QBAx97wrMl3s0Iqo7m6HDQzhsBIZZnQWtjhW6qJrHuTeQJikauYz+CyrkDSIgGc5lzVtQJ98FmqLzdzZNfXwENu8jCQ36uZDdvvensRK8lLARyldwmuQ8pPQ+yXsssQk6igHrurA3O7STHGpvGXw/qkeYPAgsPRnMWUTRWANvf7VsSYRMNJaIpVO1Ku+k1ccUwqvbufeT+wlYNQX2GYbQHu2dk5THDh9eufU1aPenCsii2U4DIhqRfDgR02IliZmvkGTFbobfzHFhmdJY/C6NpW7vOVybbSkxPD57P+gSNLuFkWli496f7LqV2G9wekvbrXAmovAgwOYnaAa2j22jzMx4ISZsr+gSewdjdB8UwR8wBadyHsrmtYb3EfDmIg5MmPt+SZcnRXMT7hnYbnAJWyXWuCv4t++o8D/qJFk/PgzQEW0yfPZSlmprs/6KaOzXHcdx9Fr+gpZlRuRDodZn+iwglc0lnQx/tOIY+3nuERjCa/NkTyWm/a4Hb9ORoON+PEGVRlIjtq/pI/Fl8xjEiXy8e2bb/jlpKZ22U0HWjqacwtNZlJl6F0CzT96EWczC0WBkasI7YlPbDjentG+8SYv77HZ16MaeoK0GClLLLhlg10RW5FUYQJrvAIqTZbJwhTNKHqjYo/Z5Ogl+9eoT76hYZnrVfaK4AwNbnsXiK4yW/ZPJSA+uftCn2HTdt/eYbzepqBrO8eemZo7wL12TfzLG0wpw4QkALSHYIfsvMhOegjv6E7fEzRlAafeHHIkdpW6sFoorKRZpnNNIMVS4u52v9S5hCBscvXMB7P00moirA/+hEVMVv51nGE4O8QQFoA+KEmdFzk+PDEHk9Y0fVWk1MPXSZEutSM2jzNKr+nCJs+jYxd9kyAy/CkxRGuV8mqZDkteccwPvj07QNNJuCAi4YTGci4vjOTChyXuKihdu/zLyN7kXRyJftJi4JKb9tFw9I46fOedM3FhuNJvWwhWc21XfnUIdQyLl3g+Ouqz4I0XNXgRz8GTR0C2aj7StTilHiols6HUy73/Bo6pC/rD4rTnCAVXO+vGmC4Ge/jLpDDOzfXEtiIcWagJtrX4gfcdC/YzB6I4bIX0JmUugiDW/w8ncGLky8n8FNwmwI/qeQy1RZSQiiBmYl1xhwl3G/g4yWnfuWPVe4Kj5UeIpzTamhKjU35AG5rXYwQqg5AjTkL+mItFr1Q18RCsF6HDp3vW3+D5AmAsYTlvb9sRdk3d6W+hExQL8sUCeuBeqGaEIZu6vkYP3W83It37WtZZrUI/qwqvjQ2YTeRkR93oZHv06FzLY2YjKa0OzA4qbQq+esbRFTXqFbHhtNrSF8QY+5Mly3Qn0A0WPOzVPFEstzc8eZM82adCgnrEPAB1ihoq5CJMiUJoXKvcKoOayZOKxOlKvjpCUnNeq8z5iHcqCGJBd2KhRunbc1WrQpDIo4BsGCIXz/BblrvdY34OF2l8HDYVp8HX9a+dlCc7baTno+vmutifmvw4a5zCTv7I65M7upJEFaXSaMACO6mNMZLg1IP9g81/5b91jcwjrczcSZDoEczFaeXVT/6nuQ+E5Ov0wmdeCU9+pL95r1UXaWcfes0nTvrd6tbv+zPtmoJ+nAYZcKQ1lH5Cbrew+Zweqj9960eNpX56KUmzxvH7pE+WEqlbeku/x0nnC/ajq7i5fuVN6bql27
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SA1PR09MB8142.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 83ec830d-ed50-4495-1027-08da4ec9753d
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jun 2022 12:20:38.8363 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR09MB7566
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/of7siW8G3X6PjkBt8h8_gm291ew>
Subject: [Sidrops] BAR-SAV: new draft on "Source Address Validation Using BGP Updates, ASPA, and ROA"
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Jun 2022 12:20:48 -0000
We (authors) would like to invite comments on the following new draft submitted in the SIDROPS WG. Thank you. Title: Source Address Validation Using BGP UPDATEs, ASPA, and ROA (BAR-SAV) URL: https://www.ietf.org/archive/id/draft-sriram-sidrops-bar-sav-00.txt Htmlized: https://datatracker.ietf.org/doc/html/draft-sriram-sidrops-bar-sav Abstract: Designing an efficient source address validation (SAV) filter requires minimizing false positives (i.e., avoiding dropping legitimate traffic) while maintaining directionality (see RFC8704). This document advances the technology for SAV filter design through a method that makes use of BGP UPDATE messages, Autonomous System Provider Authorization (ASPA), and Route Origin Authorization (ROA). The proposed method's name is abbreviated as BAR-SAV. BAR-SAV can be used by network operators to derive more robust SAV filters and thus improve network resilience. Sriram, Igor, Doug
- [Sidrops] BAR-SAV: new draft on "Source Address V… Sriram, Kotikalapudi (Fed)
- Re: [Sidrops] BAR-SAV: new draft on "Source Addre… Sriram, Kotikalapudi (Fed)