[Sidrops] Re: rfc8210bis further review - question 3

Job Snijders <job@fastly.com> Mon, 12 August 2024 09:27 UTC

Return-Path: <job@fastly.com>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B83D9C14F61E for <sidrops@ietfa.amsl.com>; Mon, 12 Aug 2024 02:27:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastly.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o_9ES3p8IzEY for <sidrops@ietfa.amsl.com>; Mon, 12 Aug 2024 02:27:27 -0700 (PDT)
Received: from mail-ed1-x533.google.com (mail-ed1-x533.google.com [IPv6:2a00:1450:4864:20::533]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A894C15152D for <sidrops@ietf.org>; Mon, 12 Aug 2024 02:27:27 -0700 (PDT)
Received: by mail-ed1-x533.google.com with SMTP id 4fb4d7f45d1cf-5b9d48d1456so12719a12.1 for <sidrops@ietf.org>; Mon, 12 Aug 2024 02:27:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastly.com; s=google; t=1723454846; x=1724059646; darn=ietf.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=CSeEmEYPK7FD/HEFnhgyGMYMSsrygcYBR4dyzx/n5qA=; b=MD3tsT5klAWtWCsAeTTVFaAvl0TVHqhgKnEhhjwzUlAdWflJNiyC+EEqddgrQng+vo k2PT2EcTTmqZx48ATsXzz0Ma+I2yyHjvFZMqLUlUn0kjuAce6Ta3dg4D5DU8/lMk+gOK 5fXxya0/z5OvXoUHENNjNQI+XPbtKAVavdM8M=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723454846; x=1724059646; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=CSeEmEYPK7FD/HEFnhgyGMYMSsrygcYBR4dyzx/n5qA=; b=jIRMtWyfXckrs9VSN3gV4kUmhVq26Ej4ZDQPP99iGrhsKAHO9bndv9u5mgQogBEF1Y DzOI2VTNPnZ2l87ab9ckChzhjbkAI/mFz3S2JIwCFSExtVMHSCLAxOb4cywoubqY9tHe Qjuqz3tZ+ZFDt4bFPvVDiFeTPej029o/Wx0+ozw4RfcwybWmAR8zdjPjsMOXdehyrl4Z DHeNQZF6QgJ0MF63p34qQ/9FLkRgEdIExdBXFMkG+XZWHvElfAvacyFduEauphKdUQjU UBtK/jCvGwQnrGxOX2IlQ8CapDz6U/ywwZmvfDt2jeY4EjtU5mxghhBD6FJdC+N9BBAZ B3YA==
X-Gm-Message-State: AOJu0YwauF9LBgG4ZtME/nwsWFh3uSrDkWm9LPmYQcI8IhEDIQMblAha sgcaHqjOxrxTZCXhVIOSbdcyoWtTdtUJbXufbhwI72ouCocQBMlH2RfzHMKEOcw=
X-Google-Smtp-Source: AGHT+IHi052rINfJGyWrtMdg7ORezVQSBUsmcU9Y/u45oJcT04z4ABbVdNHliFsmwFrBfqNz4GZPaw==
X-Received: by 2002:a05:6402:2809:b0:5bb:8fc3:eb7d with SMTP id 4fb4d7f45d1cf-5bbb3d3ef3emr11652380a12.16.1723454845475; Mon, 12 Aug 2024 02:27:25 -0700 (PDT)
Received: from snel (mieli.sobornost.net. [45.138.228.4]) by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-5bd190acec1sm1989597a12.31.2024.08.12.02.27.24 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 Aug 2024 02:27:24 -0700 (PDT)
Date: Mon, 12 Aug 2024 11:27:23 +0200
From: Job Snijders <job@fastly.com>
To: Randy Bush <randy@psg.com>
Message-ID: <ZrnVexAPjKPImLYG@snel>
References: <ZexJxZYsgNGth_Q7@snel> <ZexN0VtykWRlmGvq@snel> <ZexXrjeni3FRaZ3-@snel> <m2ttfxpnds.wl-randy@psg.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <m2ttfxpnds.wl-randy@psg.com>
X-Clacks-Overhead: GNU Terry Pratchett
Message-ID-Hash: 2MPU3WGHYGX3AVEGZCAZPD3NZ4CPUXY6
X-Message-ID-Hash: 2MPU3WGHYGX3AVEGZCAZPD3NZ4CPUXY6
X-MailFrom: job@fastly.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-sidrops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: SIDR Protocol WG <sidrops@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [Sidrops] Re: rfc8210bis further review - question 3
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/chPmfNLTQUJgSHkDCtXN487d6gg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Owner: <mailto:sidrops-owner@ietf.org>
List-Post: <mailto:sidrops@ietf.org>
List-Subscribe: <mailto:sidrops-join@ietf.org>
List-Unsubscribe: <mailto:sidrops-leave@ietf.org>

On Tue, Aug 06, 2024 at 10:33:19AM -0700, Randy Bush wrote:
> > Issues in 'time delay' can be avoided by framing RTR as a
> > delta-delimited (not time-dependent) protocol, which it of course is.
> > Reading RTR PDUs off the wire straight into the route decision engine
> > without waiting for the End-of-Data marker is what may cause issues.
> > I expect that the router can do various pre-processing while reading &
> > waiting for the end-of-data marker, so I suspect promoting the
> > end-of-marker to be the pivot point, doesn't need to cause additional
> > delays.
> 
> it is a time delimited protocol because we do not know in what order
> the user enters data at the CA and we have no assurance that the CA/PP
> will push/publish two associated PDUs in the same link()/delta.  "uh,
> let's wait 37 seconds to see if the user hits the web page again."

No, it is not a time-delimited protocol. Because of RPKI Manifests, RPs
can calculate exactly when a publication point is complete and what the
CA intended to share with the world, and thus when what PDUs are to be
transmitted to RTR clients; even if information is smeared across
multiple RRDP deltas.