Re: [Sidrops] WGLC - draft-ietf-sidrops-validating-bgp-speaker - ENDS 09/07/2018 - Sept 7th 2018
"Jakob Heitz (jheitz)" <jheitz@cisco.com> Wed, 30 October 2019 00:51 UTC
Return-Path: <jheitz@cisco.com>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1])
by ietfa.amsl.com (Postfix) with ESMTP id 2AD81120098
for <sidrops@ietfa.amsl.com>; Tue, 29 Oct 2019 17:51:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level:
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5
tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001,
URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5]
autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key)
header.d=cisco.com header.b=UeXYPDJe;
dkim=pass (1024-bit key)
header.d=cisco.onmicrosoft.com header.b=qUfuU0xT
Received: from mail.ietf.org ([4.31.198.44])
by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id iD0K1XStcmQM for <sidrops@ietfa.amsl.com>;
Tue, 29 Oct 2019 17:51:32 -0700 (PDT)
Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88])
(using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits))
(No client certificate requested)
by ietfa.amsl.com (Postfix) with ESMTPS id 1BDCB120052
for <sidrops@ietf.org>; Tue, 29 Oct 2019 17:51:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=cisco.com; i=@cisco.com; l=1311; q=dns/txt; s=iport;
t=1572396692; x=1573606292;
h=from:to:cc:subject:date:message-id:references:
in-reply-to:content-transfer-encoding:mime-version;
bh=BGsc1io+RuoMtf9XSpELDsPGWg/Vab2kYw9FD07teaI=;
b=UeXYPDJe8BD5wi8oQmHjUrnLsNrIimGkI0wf5RIOKsR2wBKCB35r40MD
xQo0QzGYGk2IpXcpXtaWBnqZh2CxwC7TQNm89vdMVxTn25PswHNg80xeH
QA4T7Wb9rK+P+xo/ryoWnBLlC5hxlJRJQRJRWqECz3BqcMi/Wr65wKlRO w=;
IronPort-PHdr: =?us-ascii?q?9a23=3A/bpUbhd0c5RiGYGdISJU/9VBlGMj4e+mNxMJ6p?=
=?us-ascii?q?chl7NFe7ii+JKnJkHE+PFxlwKYD57D5adCjOzb++D7VGoM7IzJkUhKcYcEFn?=
=?us-ascii?q?pnwd4TgxRmBceEDUPhK/u/bSw3HdhQfFRk5Hq8d0NSHZW2ag=3D=3D?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AWAABW3bhd/5ldJa1kGgEBAQEBAQE?=
=?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYFrAwEBAQELAYFKUAVsWCAECyqHbgOKd4JeiVW?=
=?us-ascii?q?OFoEugSQDVAkBAQEMAQEYCwoCAQGDe0UCg1kkNgcOAgMJAQEEAQEBAgEFBG2?=
=?us-ascii?q?FNwyFUQEBAQECAQEBECgGAQEsCwEEBwQCAQgRBAEBHxAhBgsdCAIEAQ0FCBq?=
=?us-ascii?q?DAYJGAw4gAQ6oNgKBOIhggieCfgEBBYUSDQuCFwMGgTYBjBAYgUA/gRFGgkw?=
=?us-ascii?q?+gQSBF0cBAYFjg0CCLI1En2lBCoIkkSKEKJlchDyBFohtij2PDgIEAgQFAg4?=
=?us-ascii?q?BAQWBWQkpgVhwFTuCbFAQFIMGOIM7hRSFP3SBKItSJQaCEgEB?=
X-IronPort-AV: E=Sophos;i="5.68,245,1569283200"; d="scan'208";a="353265624"
Received: from rcdn-core-2.cisco.com ([173.37.93.153])
by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA;
30 Oct 2019 00:51:31 +0000
Received: from XCH-ALN-017.cisco.com (xch-aln-017.cisco.com [173.36.7.27])
by rcdn-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id x9U0pUwp014122
(version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL);
Wed, 30 Oct 2019 00:51:30 GMT
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-017.cisco.com
(173.36.7.27) with Microsoft SMTP Server (TLS) id 15.0.1473.3;
Tue, 29 Oct 2019 19:51:29 -0500
Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rcd-002.cisco.com
(173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3;
Tue, 29 Oct 2019 19:51:29 -0500
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (64.101.32.56) by
xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server
(TLS) id
15.0.1473.3 via Frontend Transport; Tue, 29 Oct 2019 20:51:29 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=lsU7KrIfVPmCJzAvNtqjGdbtTeE754/WeHcswtHmerO7nEaJTUtzmcUIuLP0l+IVWyI79CZ5iuOZa5eG4dNJV6zYdIutDB+lF5/wPkJyGyzBG9Fkj78LzDc5yk7cUg2udVyRcyrsn4ZW9fBGe0E6VbMHcyq3as9wt4hjpNQCr1ddGpN+upwi+QzQwcUv/3R5MUXcXVnIkjSSmrU05txlBqGKB1JYFqBud5BqtZ+B7pAigh8fSW6keMEL4gVcPQocjChQfvTDvameG5O5LfoUf6Enuk9zmv7bqn1ovdUtfQ2EL84tE8863Xo4UCssCM4iAgrtj8lyoyeRMKsbcJJTDg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=p3WxszJfDFRz/6esjyryS8A6YOEolX+NHcxnJXieFr8=;
b=fiPZz4AUcf7xRAUWdaTx9TES2JVtw0yuEQC8D9mCQNEfD3kwmvi14fou4dWj5byJZK2mCXwZq5tVSepCzANkPar4hEZ9qChLRW89Qtaroqz7SnFNgU3K8p4TiG6BETUvjpqCBiGZ6Aapf3DHjpE4e0jy7p1mFy7zcFcSGd7bTf5HGRIE+REQgyawPYs4Fmxl8+XNSgNoqPqJ1cD2QQR1IpDHykhV7fNDQtrj3PUp7AobhrwwUH66iHIzfqssd7KJnCr3D2JFIM7hFe97DWfV+WGSJGV+ur6ffKoJN12L45/rOOeyfV7KMl9t68hKjbVjtvFXiyKAVwPxii5MyI2UPQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com;
dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com;
s=selector2-cisco-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=p3WxszJfDFRz/6esjyryS8A6YOEolX+NHcxnJXieFr8=;
b=qUfuU0xTDeNpwi2GZuZ2YieQrMzK34nrGJTJ4q4SnWDqZ4KUfTWU56Os4Yg0GKveziI6wvzQUM8+IHjIINbYpqmrKmOBgGDOHLQOBBXGnmMvvJn0bflL4G091+V/sCKCUDE7ELxBcbubfAH2Z4LIYerLAgaYfcuDMQ7YOllmkeA=
Received: from MWHPR11MB1807.namprd11.prod.outlook.com (10.175.55.20) by
MWHPR11MB0046.namprd11.prod.outlook.com (10.164.204.30) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.2387.24; Wed, 30 Oct 2019 00:51:28 +0000
Received: from MWHPR11MB1807.namprd11.prod.outlook.com
([fe80::249a:e0f:27bc:10be]) by MWHPR11MB1807.namprd11.prod.outlook.com
([fe80::249a:e0f:27bc:10be%9]) with mapi id 15.20.2387.028; Wed, 30 Oct 2019
00:51:28 +0000
From: "Jakob Heitz (jheitz)" <jheitz@cisco.com>
To: Randy Bush <randy@psg.com>, Christopher Morrow
<christopher.morrow@gmail.com>
CC: SIDR Operations WG <sidrops@ietf.org>
Thread-Topic: [Sidrops] WGLC - draft-ietf-sidrops-validating-bgp-speaker -
ENDS 09/07/2018 - Sept 7th 2018
Thread-Index: AQHUOie+CAJrcZMMbkWyPIZdMywVIKTMRkmAgAMH8gCAEWE9gIAA7X2AgpNm5VA=
Date: Wed, 30 Oct 2019 00:51:27 +0000
Message-ID: <MWHPR11MB180760AA6B5190D5C4BA3E74C0600@MWHPR11MB1807.namprd11.prod.outlook.com>
References: <CAL9jLaYqGt1+f3GaccNwjPOHxM34ifWDu5bhRx24PMYHpqV4XQ@mail.gmail.com>
<20180822161549.GA1021@hanna.meerval.net>
<42CA116C-4F74-4D31-A58E-3D7528FC529F@de-cix.net>
<CAL9jLaaYzZmGVgEPfuDze5D_yN5x_CMKFEnY7XwM2F7EycwEOQ@mail.gmail.com>
<m2y3cgo4ta.wl-randy@psg.com>
In-Reply-To: <m2y3cgo4ta.wl-randy@psg.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is )
smtp.mailfrom=jheitz@cisco.com;
x-originating-ip: [2001:420:30d:1254:68ee:ac2e:9d42:aa6f]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 211ff1d8-d51f-485b-6e00-08d75cd34c33
x-ms-traffictypediagnostic: MWHPR11MB0046:
x-ms-exchange-purlcount: 1
x-microsoft-antispam-prvs: <MWHPR11MB0046B2EDE81F28382F24C615C0600@MWHPR11MB0046.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:962;
x-forefront-prvs: 02065A9E77
x-forefront-antispam-report: SFV:NSPM;
SFS:(10009020)(4636009)(136003)(39860400002)(376002)(346002)(366004)(396003)(189003)(13464003)(199004)(66446008)(5660300002)(316002)(71190400001)(110136005)(99286004)(7696005)(256004)(74316002)(305945005)(7736002)(76116006)(76176011)(64756008)(66556008)(66946007)(71200400001)(33656002)(14454004)(966005)(186003)(6116002)(102836004)(46003)(11346002)(86362001)(2906002)(478600001)(81156014)(6436002)(229853002)(8936002)(6306002)(9686003)(6506007)(81166006)(66476007)(53546011)(446003)(8676002)(476003)(6246003)(52536014)(55016002)(486006)(4326008)(25786009);
DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR11MB0046;
H:MWHPR11MB1807.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en;
PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate
permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: gLMon8HOse/aasTpPbVGdlk+k4RNPpYLsAktYwQEruzQKPm/1fi9GggH0FeVhb4RiWQ3bFnM5gcP0Vu4Tfn/akOaihZZ3hL7UoOW7cEWtCFzaSrAlyzwxG77By4TflEd8LcLGDm7JAvh1sbqJ/1dPIxc1iKDOKFjbmcT1i5WUDNT61iRyAXxQCMts4QYH9G7hMJuBKL2k8NyPDPSTPn0mekA6yvNwQnh8QMycEgQXifOLgX3KXTeFuq0Q2VQKaqzssZcY/M0KubddQjt3pMHv9Wg9yp0mDLQnDRHKtzHpqUKFyNK4mM8Fct5+sAuvhfDIayaav2CmZHtLSrxxbPj8FK6UJ6IW2IyQMb9s06jnMZzUe670NpP5yxUBxQsk1lVS6mgnZHWf/gx5ESj0jB0ZXpcAI5Nv00jC25p9DRm0o+3FSKaRe0jd3qig4wLHKwxqtzSZDOeoKMTABFU6Dhh1oYExt7xWqb6htziEbKaljs=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 211ff1d8-d51f-485b-6e00-08d75cd34c33
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2019 00:51:28.0459 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: fLaRuMwIhwMnVahHZnanSGnCbiODbZzmSiIqj8AQMYR3HrSI1SLcrEteylecJP2pcQ68m34QVnA9BP6/mm9WIA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB0046
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.27, xch-aln-017.cisco.com
X-Outbound-Node: rcdn-core-2.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/WJ63U5UZ2BsiOq-UehFT8dwz9H0>
Subject: Re: [Sidrops] WGLC - draft-ietf-sidrops-validating-bgp-speaker -
ENDS 09/07/2018 - Sept 7th 2018
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>,
<mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>,
<mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Oct 2019 00:51:34 -0000
IOS-XR revalidates. Has done since the beginning. Regards, Jakob. -----Original Message----- From: Sidrops <sidrops-bounces@ietf.org> On Behalf Of Randy Bush Sent: Tuesday, September 4, 2018 11:07 PM To: Christopher Morrow <christopher.morrow@gmail.com> Cc: SIDR Operations WG <sidrops@ietf.org> Subject: Re: [Sidrops] WGLC - draft-ietf-sidrops-validating-bgp-speaker - ENDS 09/07/2018 - Sept 7th 2018 > 1) "route origin validation is not as hard to see deploying today" see draft-ietf-sidrops-ov-clarify-05.txt. essentially vendors' implementations are funky and so it is hard for me to do it myself. and it is not only ov-clarify. test whether your fave implementation re-evaluates a bgp prefix when a roa change comes in over rpki-rtr. the messy story goes on. > 2) "just introducing an IXP lan/RS that simply implements the validation > and takes action(s) is the right course of action" s/the right course/one right course/ what is nice is that the ixp-provided filter does not have the same problems as above. so it is a leapfrog while hardware vendors catch up. it is driving origin validation deployment. randy _______________________________________________ Sidrops mailing list Sidrops@ietf.org https://www.ietf.org/mailman/listinfo/sidrops
- [Sidrops] WGLC - draft-ietf-sidrops-validating-bg… Christopher Morrow
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Nick Hilliard
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Job Snijders
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Randy Bush
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Daniel Kopp
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Daniel Kopp
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Nick Hilliard
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Randy Bush
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Christopher Morrow
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Nick Hilliard
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Randy Bush
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Job Snijders
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Nick Hilliard
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Randy Bush
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Job Snijders
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Christopher Morrow
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Daniel Kopp
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Job Snijders
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Nick Hilliard
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Nick Hilliard
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Daniel Kopp
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Ruediger Volk
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Christopher Morrow
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Randy Bush
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Nick Hilliard
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Daniel Kopp
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Jakob Heitz (jheitz)
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Randy Bush
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Nick Hilliard
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Borchert, Oliver (Fed)
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Randy Bush
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Borchert, Oliver (Fed)
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Christopher Morrow
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Randy Bush
- Re: [Sidrops] WGLC - draft-ietf-sidrops-validatin… Borchert, Oliver (Fed)