Re: [Sidrops] WGLC = draft-ietf-sidrops-aspa-verification - ENDS 02/17/2023 (Feb 17 2023)

Christopher Morrow <christopher.morrow@gmail.com> Thu, 09 February 2023 18:09 UTC

Return-Path: <christopher.morrow@gmail.com>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 304E7C151540; Thu, 9 Feb 2023 10:09:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fNnBfLbkQozb; Thu, 9 Feb 2023 10:09:19 -0800 (PST)
Received: from mail-vs1-xe31.google.com (mail-vs1-xe31.google.com [IPv6:2607:f8b0:4864:20::e31]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B734C1782D0; Thu, 9 Feb 2023 10:09:14 -0800 (PST)
Received: by mail-vs1-xe31.google.com with SMTP id x8so3039542vso.2; Thu, 09 Feb 2023 10:09:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=nQKlGCf2d+46+8Z5MJcdeZAf2l0x7+JTQd+kwmDja7U=; b=DmaNIwK1DnKAp0md56NF5GbH3GW/Fz5PeCyYiVvRZEYUW9bQuyAbIslMouWFFzt6yC oxG5pHtK8a8cUEQq6CU+ubA7nVRcVsK3bC1FsVVEywE2Q431D5fhrSK6s4om5LtIiSpn kXm9l/FjQlr7qmG1fCHclZkx8x/Er6jMh+dZHx3vpZqAZmmG6zkOWf5xwTwKAyskoOE4 F99jzf470xz66itaPYb8PR0so4OWvjgy/Tr6O5hOuXeYkDPWmN9jULxM9L9b9dmNQHoI 8HYgjGwRr3yYvx88dER0JBlHp+DU4i/3IZEHocZzT/KO0tIt3bEdvgFEn0DhA/Pe3aoa 62zA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=nQKlGCf2d+46+8Z5MJcdeZAf2l0x7+JTQd+kwmDja7U=; b=uybNX5kjzrvoI15vkZO17mOgbZZBNPv2ZU7u1FAUIabXy/g8d+BBwsEvx6cCdqdxrr oknNFPUsunWLksBR87a3IqMea4Zf8vxibOb12ZPyITG0QD+HLtRi7PzljrTjhW4LNmVA eU590uajpGLj1UMM7VtYfIeoGYjbFcn9lLTrqeUpeiI1t7LT8hM1o4Z1SXeYQFSmgzZu ++JHYJk3cvpNOiENufc3k6YIoPPJh6yyZr5bZpQl7XwPqKnjPQoaOIh6a381e9Z2e2FN XnETTWGIg2sji5fh8HHYjDFtKwwxOz+LToXuKcv2el55ee7f6R6U2iK8ASbbpGGjfhby l/xg==
X-Gm-Message-State: AO0yUKX8TvVJWFBV9LYPDZOMmUtuE5wfsILNHuoKWb9rHNzri7uAIlWf l0SqBoQ8/mZg0EWaNm0It+eCIuzG1IsF+KlWB4M=
X-Google-Smtp-Source: AK7set/iPU7utMfnkLoRqRCRIx+ayu3eFf+zJffxgurEe/RFhU/+RaLZ2hNtxXjnAHMF2c0lAXfubYlvx2uSo9GmYQc=
X-Received: by 2002:a67:b002:0:b0:3f9:ce06:90ff with SMTP id z2-20020a67b002000000b003f9ce0690ffmr3115781vse.35.1675966153090; Thu, 09 Feb 2023 10:09:13 -0800 (PST)
MIME-Version: 1.0
References: <SA1PR09MB814241245D01E81BADE3ED0884CF9@SA1PR09MB8142.namprd09.prod.outlook.com> <31FDE1E9-3E87-4011-B65B-C6B3A264303F@vigilsec.com> <SA1PR09MB81427B4A1B126A5D1C1E289C84CF9@SA1PR09MB8142.namprd09.prod.outlook.com> <SA1PR09MB8142E41F2D6B537BCAA758F384CC9@SA1PR09MB8142.namprd09.prod.outlook.com> <CAL9jLaYz3OhcwBBcVMqnUseBR9J1ZyktcJo5YLeefQHMoYJu+A@mail.gmail.com>
In-Reply-To: <CAL9jLaYz3OhcwBBcVMqnUseBR9J1ZyktcJo5YLeefQHMoYJu+A@mail.gmail.com>
From: Christopher Morrow <christopher.morrow@gmail.com>
Date: Thu, 09 Feb 2023 13:09:02 -0500
Message-ID: <CAL9jLaZ7eDc+zbhapS8dTYQKnTfgLd=MOPYw97-qcJ4eP6S6Mg@mail.gmail.com>
To: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram=40nist.gov@dmarc.ietf.org>
Cc: Claudio Jeker <cjeker@diehard.n-r-g.com>, Job Snijders <job@fastly.com>, "sidrops@ietf.org" <sidrops@ietf.org>, "sidrops-chairs@ietf.org" <sidrops-chairs@ietf.org>, "draft-ietf-sidrops-aspa-verification@ietf.org" <draft-ietf-sidrops-aspa-verification@ietf.org>, "draft-ietf-sidrops-aspa-profile@ietf.org" <draft-ietf-sidrops-aspa-profile@ietf.org>, "Compton, Rich A" <Rich.Compton@charter.com>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/nIAdIuMO5G9CevSYwP08kQEK4y8>
Subject: Re: [Sidrops] WGLC = draft-ietf-sidrops-aspa-verification - ENDS 02/17/2023 (Feb 17 2023)
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Feb 2023 18:09:23 -0000

Guns were Jumped, Things were Slowed.. Did the new v12 appear? or is
it appearing soon?
(what's the timeline I mean to ask)

On Fri, Jan 27, 2023 at 11:27 AM Christopher Morrow
<christopher.morrow@gmail.com> wrote:
>
> On Fri, Jan 27, 2023 at 10:51 AM Sriram, Kotikalapudi (Fed)
> <kotikalapudi.sriram=40nist.gov@dmarc.ietf.org> wrote:
> >
> > Hi, Claudio and all,
> >
> > Yes, please wait a few weeks and then read the upcoming version 12 (ASPA verification) draft for commenting.
> >
>
> yup! I jumped the gun, no worries. We can defer until -12 arrives.
>
> > I was puzzled as did some of my co-authors seeing the WGLC posted yesterday.
> >
> > I have closely interacted with Claudio who has a nearly complete implementation of ASPA verification. Much of the proposed revisions for v-12 are motivated by his feedback.
> >
> > Claudio wrote:
> > >I sent a mail on Nov 2nd with a large amount of feedback to this draft.
> > >None of it has been incorporated so a last-call for this draft is very
> > >premature.
> >
> > Your Nov 2nd post: https://mailarchive.ietf.org/arch/msg/sidrops/KlILGgdItF-0O-xUsJde1DqGCoE/
> > My Nov 4th response: https://mailarchive.ietf.org/arch/msg/sidrops/cWcF2Y0msvko73zY912Y3cQj7SM/
> >
> > Yes, your excellent and detailed feedback will be incorporated in v-12.
> >
> > Claudio wrote:
> > >There are additional concerns I have with this draft after working on the
> > >only BGP implementation over the last weeks. I will send a follow up
> > >regarding my findings.
> >
> > Yes, please send. In part, you may be referring to the IXP RS AS (transp./non-transp.) and RS-client discussion we had (via video chat). I posted about our discussion and conclusions here:
> > Jan 13, 2023 post: https://mailarchive.ietf.org/arch/msg/sidrops/JgxHTtynu-mihYnPxw1xgVGopPg/
> >
> > So, yes those proposed changes about the part of the verification algorithm that deals with IXP RS & RS-client will also be included in v-12.
> >
> > Claudio wrote:
> > >1. Introduction
> > >
> > >    When the CAS has multiple Providers, all Provider ASes are listed in the
> > >    ASPA including any internet exchange point (IXP) route server (RS) AS that
> > >    serves the CAS.
> >
> > >This requirement is wrong and I will not approve any version of this draft
> > >which requires inclusion of "any internet exchange point (IXP) route server
> > >(RS) AS" in the SPAS.
> >
> > Yes, as you and I discussed, that requirement will only apply to non-transparent IXP RS AS. We'll make that clear in both ASPA drafts.
> > This was also stated in my post of Jan 13: https://mailarchive.ietf.org/arch/msg/sidrops/JgxHTtynu-mihYnPxw1xgVGopPg/
> >
> > Also, I plan to incorporate comments from Rich Compton:
> >    https://mailarchive.ietf.org/arch/msg/sidrops/zPXDR5iL52REtpIDoL6qdvJ2IsI/
> >
> > Job asked:
> > >What is the status of ASPA in NIST BGP-SRx?
> >
> > I had posted about implementation of ASPA path verification in BGP-SRx in Dec. 2021:
> > https://mailarchive.ietf.org/arch/msg/sidrops/C6Ethp2aC9sJsxDtBrLQDjmCqk4/
> > BGP-SRx ASPA unit test cases/examples:
> > https://github.com/usnistgov/NIST-BGP-SRx/blob/master/examples/example-demo-aspa-new/README
> > BGP-SRx project Github page: https://github.com/usnistgov/NIST-BGP-SRx
> >
> > We have not yet included the IXP RS portion of the ASPA verification algorithm in BGP-SRx implementation.
> >
> > Thank you.
> >
> > Sriram
> >
> > _______________________________________________
> > Sidrops mailing list
> > Sidrops@ietf.org
> > https://www.ietf.org/mailman/listinfo/sidrops