Re: [Sidrops] New Version Notification for draft-ymbk-8210bis-00.txt

[Randy Bush <[e-mail]>]

> One more race condition is more-specifics vs. less specifics.
> A less-specific ROA will invalidate a more specific prefix that would
> be not-found if the ROA were to not exist. 
> Invalids are increasingly being dropped, whereas not-founds are not
> dropped and will not be dropped in the foreseeable future. 
> So this matters.
> More-specific ROAs should be updated before less-specific.

rtfd

11.  ROA PDU Race Minimization

   When a cache is sending ROA PDUs to the router, especially during an
   initial full load, two undesirable race conditions are possible:

   Break Before Make:  For some prefix P, an AS may announce two (or
      more) ROAs because they are in the process of changing what
      provider AS is announcing P.  This is is a case of "make before
      break."  If a cache is feeding a router and sends the one not yet
      in service a significant time before sending the one currently in
      service, then BGP data could be marked invalid during the
      interval.  To minimize that interval, the cache SHOULD announce
      all ROAs for the same prefix as close to sequentially as possible.

   Shorter Prefix First:  If an AS has issued a ROA for P0, and another
      AS (likely their customer) has issued a ROA for P1 which is a sub-
      prefix of P0, a router which receives the ROA for P0 before that
      for P1 is likely to mark a BGP prefix P1 invalid.  Therefore, the
      cache SHOULD announce the sub-prefix P1 before the covering prefix
      P0.