Re: [Sidrops] [WGLC] draft-ietf-sidrops-roa-considerations-01 - Ends 10/March/2022

Randy Bush <randy@psg.com> Sat, 05 March 2022 16:59 UTC

Return-Path: <randy@psg.com>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D4AB3A080B for <sidrops@ietfa.amsl.com>; Sat, 5 Mar 2022 08:59:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zs18QIPO4smb for <sidrops@ietfa.amsl.com>; Sat, 5 Mar 2022 08:59:23 -0800 (PST)
Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C7663A0029 for <sidrops@ietf.org>; Sat, 5 Mar 2022 08:59:23 -0800 (PST)
Received: from localhost ([127.0.0.1] helo=ryuu.rg.net) by ran.psg.com with esmtp (Exim 4.93) (envelope-from <randy@psg.com>) id 1nQXkV-000E5b-NP; Sat, 05 Mar 2022 16:59:19 +0000
Date: Sat, 05 Mar 2022 08:59:19 -0800
Message-ID: <m2lexocp3s.wl-randy@psg.com>
From: Randy Bush <randy@psg.com>
To: Keyur Patel <keyur@arrcus.com>
Cc: SIDR Operations WG <sidrops@ietf.org>
In-Reply-To: <BYAPR18MB26961DE9F15501CCA12ECCF1C13D9@BYAPR18MB2696.namprd18.prod.outlook.com>
References: <BYAPR18MB26961DE9F15501CCA12ECCF1C13D9@BYAPR18MB2696.namprd18.prod.outlook.com>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/26.3 Mule/6.0 (HANACHIRUSATO)
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset="US-ASCII"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/V4N9uZL1KHlWaJ5Nje-nVEeZFsQ>
Subject: Re: [Sidrops] [WGLC] draft-ietf-sidrops-roa-considerations-01 - Ends 10/March/2022
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 05 Mar 2022 16:59:27 -0000

why i signed on to co-author this document:

fasten seat belts, and take the little yellow pill to think at internet
scale.  the numbers below are fictitious; no prefixes or ASs were harmed
...

i have 420 /24s registered in the repo for my AS 666, folk do seem to
deaggrgate, and we are being taught not to use max-len, eh?

i move one of those /24s to my other pop/continent/whatever, AS 777

we have seen that the CA withdraws the ROA for 420 prefixes on AS 666
and then issues a new ROA for 419 prefixes on AS 666 (and one on AS777)

these two *separate* actions are published in the CA's PP

234 RPs across the internet pick them up

234 RPs across the internet chop the withdrawn ROA into 420 withdraw
VRPs and send the VRPs to their routers

ghod knows what those routers then do to BGP

the 234 RPs chop the new announcement into 419 VRPs and send to their
routers

ghod knows what those routers then do to BGP

and the poor routers are processing all that dren.  and we know the
quality of their implementations has a bit of variance

and i just wanted to move one little /24

and this whole protocol set was designed to minimize impact on routers
so it could run lightly on existing hardware

yes, i am suggesting you publish 420 separate ROAs; they're cheap.  and
then we can act on them individually.

my mommy taught me that it was not polite to 'support' a draft on which
one is a co-author.  but i do suggest others read, comment, and, if they
agree, support.

randy