Re: [Sidrops] RIPE NCC RPKI pilot for ASPA objects

Ben Maddison <benm@workonline.africa> Wed, 14 December 2022 18:30 UTC

Return-Path: <benm@workonline.africa>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3A77C14CE47; Wed, 14 Dec 2022 10:30:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.098
X-Spam-Level:
X-Spam-Status: No, score=-7.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=workonline.africa
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nOZjcZlKGKmw; Wed, 14 Dec 2022 10:30:38 -0800 (PST)
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04on2049.outbound.protection.outlook.com [40.107.8.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF640C14F6E7; Wed, 14 Dec 2022 10:30:34 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=JMe2R8vtvzrEQibjhiTvxV+g2StGhmPLY7wfBPsmbWTWhb6CjoDqy9NcDIEmN0TKegZb3pHKYeUmy053v2ROdLbMJ8F3njZ8IZ291qwR64XemByA3DPBF4EouOIUMpGuWAlHPdwg0/fEJ3lqfxmDdDvsxZxidfYiOpjQQ8utgvqY4ErxDE/vs87gO5dcLWSUpzsgLSf/T3QijoZ+wn11oH2lRzdnPwdPUq2hrHxtFgiwtJYyU3SXfeKVObujU9TKZonwAbi3i+bF3PgA792f7qSn9QtlKtv5RhxMqT6FWzrbQDR5NhMR5H/7RCcq3fOkdKxcskYyw3kWsOz3I197Cw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=70pM4T/YlbPPtLqDY7kTl7+H7oA2nuE3TEF5pgSJvPE=; b=AGUOBhzyMNcjlVR1D++v+bSxwZt4qaum1Sk0kOcn2W8tovPDm6O1i5HllpylwoJtnMGyGD5ncgrGSHGkMvi4bL8YEluHmWJjToTjXcNz6G00HLUmpXCbM2ts1ua/XOzQ+BEMx4XYAlTvwHJgJas6tqOYdbvgL5vR4J+dHJ7flMx9steX7mHPJGODzu3ZSjE1wrxviD3LRTy+9ji017LgyDIS1I1qDFmGEV8AdoaM9r/3Z7F6MWMXObcbZllQ1j9sT4VhurysTolsHetHGopSstqlVRM0BbDSgNyLUAsTxaP+gfAB71+xfkllsnFmER5PoQmCm//POcPeaBoVXvi4Ug==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=workonline.africa; dmarc=pass action=none header.from=workonline.africa; dkim=pass header.d=workonline.africa; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=workonline.africa; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=70pM4T/YlbPPtLqDY7kTl7+H7oA2nuE3TEF5pgSJvPE=; b=kI3LQsRusNSSwd+EXRte6s5Fw/HLKyivTnIlQc1uoD6K2V50w/4oB69EcUSLVxnSRYXu93qIyobRO08AWf82IjC2DQQ2x9EaDWkjhA9Q4SiYM8epLlxXRywGAtMS1eYkUnlbIxG+iRPjKKZi4YVuirFxTFDC1q3ht00oVDzeyTE=
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=workonline.africa;
Received: from AS8P190MB1078.EURP190.PROD.OUTLOOK.COM (2603:10a6:20b:2e7::13) by DBAP190MB0823.EURP190.PROD.OUTLOOK.COM (2603:10a6:10:1a5::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5924.11; Wed, 14 Dec 2022 18:30:31 +0000
Received: from AS8P190MB1078.EURP190.PROD.OUTLOOK.COM ([fe80::3b1a:1862:8cba:ffa1]) by AS8P190MB1078.EURP190.PROD.OUTLOOK.COM ([fe80::3b1a:1862:8cba:ffa1%8]) with mapi id 15.20.5880.019; Wed, 14 Dec 2022 18:30:30 +0000
Date: Wed, 14 Dec 2022 20:30:25 +0200
From: Ben Maddison <benm@workonline.africa>
To: Erik Rozendaal <erozendaal@ripe.net>
Cc: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram=40nist.gov@dmarc.ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, "draft-ietf-sidrops-aspa-profile@ietf.org" <draft-ietf-sidrops-aspa-profile@ietf.org>
Message-ID: <20221214183025.ozl6vt5cr5ikxzyu@iolcus>
References: <SA1PR09MB8142F7C99E553E6610A925DF841B9@SA1PR09MB8142.namprd09.prod.outlook.com> <BAD4B943-2332-4274-B571-A756D495EAA1@ripe.net>
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="2tenfgmtzcr3tgme"
Content-Disposition: inline
In-Reply-To: <BAD4B943-2332-4274-B571-A756D495EAA1@ripe.net>
X-ClientProxiedBy: LO4P123CA0299.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:196::16) To AS8P190MB1078.EURP190.PROD.OUTLOOK.COM (2603:10a6:20b:2e7::13)
MIME-Version: 1.0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AS8P190MB1078:EE_|DBAP190MB0823:EE_
X-MS-Office365-Filtering-Correlation-Id: 99f2061a-fd3d-4a08-ef98-08dade0147ca
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AS8P190MB1078.EURP190.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230022)(7916004)(366004)(396003)(39840400004)(346002)(376002)(136003)(451199015)(1076003)(83380400001)(86362001)(316002)(478600001)(54906003)(6916009)(38350700002)(38100700002)(44144004)(6506007)(6512007)(186003)(9686003)(21480400003)(26005)(6666004)(2906002)(6486002)(33716001)(52116002)(8936002)(66946007)(41300700001)(5660300002)(8676002)(4326008)(66476007)(66556008)(46492015)(2700100001); DIR:OUT; SFP:1101;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: workonline.africa
X-MS-Exchange-CrossTenant-Network-Message-Id: 99f2061a-fd3d-4a08-ef98-08dade0147ca
X-MS-Exchange-CrossTenant-AuthSource: AS8P190MB1078.EURP190.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Dec 2022 18:30:30.9192 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: b4e811d5-95e8-453a-b640-0fba8d3b9ef7
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: jCLWiL1rY8BDjY0eRnvlwCB7sjAfBOpatFZi7m7c2Ih98sEFmLfW1TQZSjzT3TSMC7ND2tjqELGJQmzj0f3RSA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBAP190MB0823
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/Vskh7NLnw5C3HFntfEkj4plq9w4>
Subject: Re: [Sidrops] RIPE NCC RPKI pilot for ASPA objects
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Dec 2022 18:30:44 -0000

Hi Erik,

On 12/09, Erik Rozendaal wrote:
> Hi Sriram,
> 
> Thanks for your feedback. We've decided to use the terminology already
> present in the RIPE NCC RPKI API for consistency. Since we already
> used "ASN" for ROAs we also used this for ASPA in preference over the
> RFC use of "AS ID".
> 
> With respect to the _afiLimit_ field we felt it was better to be
> explicit instead of depending on the absence (or null value). For the
> CMS objects it makes sense to use a default value to reduce the size
> of the objects, but this consideration doesn't really apply to our
> API.
> 
> The use of _providers_ vs _ProviderASSet_ is more personal preference
> and easier typing.

That all seems reasonable enough to me. I don't find the naming
differences particularly confusing.

I have some other observations though:

- I would call the no-afiLimit variant "NONE" rather than "ANY" as that
  is a closer match to the semantics of the actual ASPA field;
- I would make `aspaConfigurations` a map/object keyed by `customerAsn`,
  so that you get the guarantee of a unique ASPA per customer AS for
  free.
- I would make the ASN fields uint32s rather than strings beginning with
  "AS". The later are really inconvenient to write types or schema
  definitions for, with no benefit that I can see.

Let me know you thoughts?

Cheers,

Ben