Re: [Sidrops] New Version Notification for draft-ymbk-sidrops-ov-egress-00.txt
Ruediger Volk <rv@NIC.DTAG.DE> Fri, 04 January 2019 15:34 UTC
Return-Path: <rv@NIC.DTAG.DE>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DCA4131012 for <sidrops@ietfa.amsl.com>; Fri, 4 Jan 2019 07:34:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P4NUjEVY2IXv for <sidrops@ietfa.amsl.com>; Fri, 4 Jan 2019 07:34:52 -0800 (PST)
Received: from limes.NIC.DTAG.DE (limes.nic.dtag.de [194.25.1.113]) by ietfa.amsl.com (Postfix) with ESMTP id A82DA1310E2 for <sidrops@ietf.org>; Fri, 4 Jan 2019 07:32:04 -0800 (PST)
Received: from x59.NIC.DTAG.DE (x59.nic.dtag.de [194.25.1.154]) by limes.NIC.DTAG.DE (8.8.5/8.8.3) with ESMTP id QAA01323; Fri, 4 Jan 2019 16:31:54 +0100 (MET)
To: Nick Hilliard <nick@foobar.org>
cc: "sidrops@ietf.org" <sidrops@ietf.org>, Randy Bush <randy@psg.com>
From: Ruediger Volk <rv@NIC.DTAG.DE>
In-Reply-To: Your message of "Fri, 04 Jan 2019 13:53:38 GMT." <a2b8db87-cf36-f122-bcf8-fb8b2c69de8e@foobar.org>
Date: Fri, 04 Jan 2019 16:31:54 +0100
Message-ID: <7284.1546615914@x59.NIC.DTAG.DE>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/Q35byBADY0xRVlIJDEMZteFIvW0>
Subject: Re: [Sidrops] New Version Notification for draft-ymbk-sidrops-ov-egress-00.txt
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Jan 2019 15:34:55 -0000
Nick Hilliard wrote: > internet-drafts@ietf.org wrote on 03/01/2019 21:55: > > It is useful fpr RPKI-based Origin Validation to classify and mark > > prefixes for all ingress, redistribution, and egress policies. For > > egress policy, it is important that the classification uses the > > effective origin AS of the processed route, which may specifically be > > altered by the commonly available knobs such as removing private ASs, > > confederation handling, and other modifications of the origin AS. > > good point. Are there any bgp stacks which currently implement this? all implementations relevant for my network (NOT an empty set) do NOT conform. I guess the better question is: which implementation actually do the right thing? (congrats to the implementor!) (and the next: what are the planned fixes?) The draft does not change ROV, it just asks that application in certain circumstance MUST be correct - that seem to be very easy to neglect. Most thinking about ROV application (and controlling correctnes of route announcements) tends to focus on ingress policy. I started late to seriously look at the egress - but I take the robustnes principle serious - and in security matters essentially the "be conservative" part applies. When I started to consider requirements for my egress filtering I hit the interesting cases, and immediately thought "implementors most likely are missing these [corner?] cases" Ruediger
- [Sidrops] New Version Notification for draft-ymbk… internet-drafts
- Re: [Sidrops] New Version Notification for draft-… Nick Hilliard
- Re: [Sidrops] New Version Notification for draft-… Ruediger Volk
- Re: [Sidrops] New Version Notification for draft-… Randy Bush
- Re: [Sidrops] New Version Notification for draft-… Job Snijders
- Re: [Sidrops] New Version Notification for draft-… Randy Bush