IETF Logo Mail Archive

Re: [Sidrops] [GROW] ASPA and Route Server (was RE: IXP Route Server question)

"Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov> Wed, 23 March 2022 19:45 UTC

Return-Path: <kotikalapudi.sriram@nist.gov>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE8D83A099D; Wed, 23 Mar 2022 12:45:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.112
X-Spam-Level:
X-Spam-Status: No, score=-2.112 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W-XKUiDP5Ive; Wed, 23 Mar 2022 12:45:20 -0700 (PDT)
Received: from GCC02-DM3-obe.outbound.protection.outlook.com (mail-dm3gcc02on2072c.outbound.protection.outlook.com [IPv6:2a01:111:f400:7d04::72c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B9303A0966; Wed, 23 Mar 2022 12:45:20 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NjLMNLvWCr3B50NwgK3eebGCXjY+cZtv5jgKQ3j0bYFS1WF1VJB2nBeDKAfpaGz6K+uVNttZ3Q7eYG5N50Z9UuPfD1yW9jroUxlXXPj11MCoyd3nJEL8LpAfqJ+m8n2Zk/hBxsUX+ESwepF+osZf1j3aE1AhF7VCeRDYdX+CVXd4+ZGtwUC8gFglnen3O7FChqHuB4EuVNO64770YMY/YirVieeltap9/AXAMNDLY4WZR/EoqAv/FLbS+z9gGRqjjwNEUic7BBjPPtdeZZTEUTeFefOSXHMwkB665lRR+kDcMAwRYOpvihzCyjifnDgUwq2fkU8m8NF+dx6eJW9t+Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=M04zrmVqQt4VsqFCIQJwhm+AIN9AGDXkpIQw5eZPUd4=; b=i/y13I6l1b5fCevqJ9nLmgbNADBcmvcUy7HOkxN8udea4qrqTzXnGuqjpB0KvN7/ZzYTit0RBFr+gMLS0RczLjLBkjbIDysUDqPjT/Je/6SJ/MONv1dQ5HzagKIp3t3Jk9tvkc/uJNz9pt/XO5C2pGjNLVFUMem6cNYxc/Tyt49kZ6N6wlOcPzbqALOy+uKDXTaSQFY2oBMquus7uRNqcDgfQIZqimfEKEoQaroG7X3U10jz5sB9RDqkDCUgTD2X0ilJlo+zzRmaZVih4Ikh0FsmXri876vFJC71dHl31W7YJMdCrAN3VHOZxkUMqYzuwrpEvi275hOjqkfA0RC2TA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=M04zrmVqQt4VsqFCIQJwhm+AIN9AGDXkpIQw5eZPUd4=; b=mzda3bDXRVwME5bBhAEEatcyc9UVT2+lXCcljvoiXpge8MuSvBpo2SKzYjbhIAd9x0iCVTyKZI2jcoRfXct/qqo2UgUHSt3tFyI3uMDXika7dFx1fJlT/PLr5nCnK4hDDgGBiLGs7GAoz4meYKh972JHObXJiBW/6XJ/qvFSzF4=
Received: from SA1PR09MB8142.namprd09.prod.outlook.com (2603:10b6:806:171::8) by SJ0PR09MB6798.namprd09.prod.outlook.com (2603:10b6:a03:263::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5102.17; Wed, 23 Mar 2022 19:45:15 +0000
Received: from SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::c99c:1af3:8454:5d6a]) by SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::c99c:1af3:8454:5d6a%6]) with mapi id 15.20.5102.017; Wed, 23 Mar 2022 19:45:15 +0000
From: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>
To: "Jakob Heitz (jheitz)" <jheitz@cisco.com>, Zhuangshunwan <zhuangshunwan@huawei.com>, Jeffrey Haas <jhaas@pfrc.org>
CC: "sidrops@ietf.org" <sidrops@ietf.org>, "grow@ietf.org" <grow@ietf.org>, Nick Hilliard <nick@foobar.org>
Thread-Topic: [GROW] [Sidrops] ASPA and Route Server (was RE: IXP Route Server question)
Thread-Index: AQHYPULXMMKnMnklKEmxZqImduurxazKE6GAgAA0FfCAAJnqAIACbjJQgAAH9wCAAAaqcA==
Date: Wed, 23 Mar 2022 19:45:14 +0000
Message-ID: <SA1PR09MB8142CC0B9C149EB2E82C3B8384189@SA1PR09MB8142.namprd09.prod.outlook.com>
References: <BY3PR09MB81315D53064951F865F2A23884109@BY3PR09MB8131.namprd09.prod.outlook.com> <SA1PR09MB814268C7DB52D8758817217984159@SA1PR09MB8142.namprd09.prod.outlook.com> <CABNhwV30Guy28qBR_eA==CUy2Xj24OfPwxV0n2gFF7wVrgBMpg@mail.gmail.com> <BYAPR11MB3207DE083AD888F3C963E347C0169@BYAPR11MB3207.namprd11.prod.outlook.com> <a07986fb2d7147c0abb36229237d8982@huawei.com> <B1660213-CEB8-48C1-B44E-DC3D43510031@pfrc.org> <BYAPR11MB32077BA1382FC96F88A26248C0169@BYAPR11MB3207.namprd11.prod.outlook.com> <SA1PR09MB81422068759D8D1A4258F5FD84169@SA1PR09MB8142.namprd09.prod.outlook.com> <473f0482508e4b2e86e76986c74828f9@huawei.com> <SA1PR09MB8142AB44A641DB48140F991884189@SA1PR09MB8142.namprd09.prod.outlook.com> <BYAPR11MB3207D3EA9F52C2236B7AFBC3C0189@BYAPR11MB3207.namprd11.prod.outlook.com>
In-Reply-To: <BYAPR11MB3207D3EA9F52C2236B7AFBC3C0189@BYAPR11MB3207.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nist.gov;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: ccc14f9b-93a5-437b-f744-08da0d05a6ce
x-ms-traffictypediagnostic: SJ0PR09MB6798:EE_
x-microsoft-antispam-prvs: <SJ0PR09MB67987EF3A59A87BDEF91D86184189@SJ0PR09MB6798.namprd09.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SA1PR09MB8142.namprd09.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(4636009)(366004)(33656002)(38070700005)(186003)(26005)(83380400001)(2906002)(316002)(8676002)(66556008)(64756008)(66476007)(66446008)(9686003)(82960400001)(4326008)(76116006)(66946007)(52536014)(71200400001)(5660300002)(8936002)(4744005)(86362001)(122000001)(6506007)(7696005)(966005)(55016003)(38100700002)(508600001)(54906003)(110136005); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?dWfZq7/kzGXsP68LJoHqwlCP38I3yVe1VIxYm+RLmNxpPq3YIa1byxmS3GbD?= =?us-ascii?Q?f4nO63NoTa85eV66gWRwFZUL47T7jjyvaB/xp1ttITmXX1yrhutP+0FNSyKk?= =?us-ascii?Q?ezlhTzm+uK/jEwYCQl/tfjGojlwEQkl/f/cVIIEfw4uAxmJ33Ve+77LseUe2?= =?us-ascii?Q?W3ZrPJaxdoVZLwtFlpxDqcJ4Zz3MqDI8J7FMDP8OoNv3IeA4ChJdvtHtu/jx?= =?us-ascii?Q?njv7mA7ZCYqGiy9RAUr2tqkfNaZwhg/8ANC6zcPRhmoHcGtL8TG6um4DLKt0?= =?us-ascii?Q?pHmt4pMa9Pou55fDxNM6j02FSBW5IpSdyiCRRTeVisUoLVJJxNoS7W2aLXPc?= =?us-ascii?Q?ZW+HXQRVp9SGYq3yceIs1qzO1Qqzd+0ohJ3WTntXmaChcNgZ/+KkioYZOSfm?= =?us-ascii?Q?xlD0UtaMSCDoDxMZjOXn630n5HeS43RrY+8eqluEiQwg1PBdro5mg90a4G/+?= =?us-ascii?Q?ZMoAXT5IvKD3rEvqqUP5MCo9Ji/icuK0+fdged2nRLOJppLfU+vdTHFcd0Tj?= =?us-ascii?Q?KSVLAsJeV8bXRNa7A3kFuptOYy4dFEfMJIXNFUpig0XsA72n8uTpBsODzE7H?= =?us-ascii?Q?zkaMY4kEzmI5XaT3DKGp3qPg7eYpNl+yg1gNS2JIO210w946VtidgkLa53SO?= =?us-ascii?Q?6dpIwouOHLTlxiTWiTSSF1PnbHxtiIdNHcWLQ+yM06Xy/gaVdNNff/rZSjJP?= =?us-ascii?Q?6mxRFeURanN5zofWEcbKVJQxyImSAIH279Qu9Issm4b88qR6anh8q9QNiB9/?= =?us-ascii?Q?DKIa0OUgV05fvd2/y3pHq2OcySl/IBBRqVf0LoxaTP7znQQIzVBz23uO9oyy?= =?us-ascii?Q?XwBZLgYTmgBLmBRYnKWr6gRXpi3HEhDq/pX9p2oU6tujGjBnyOs0AZ77VIxU?= =?us-ascii?Q?7fxKiqSqVqRrS7Ag6U7yNrdqZlrBmWzZIQvkrq/dxLU5fS4uThiKfSYE5vxv?= =?us-ascii?Q?FEnNyfX1NQ9xM9Fon6zFtokc5SLt+3Wa0uQptBvUTWgteGbYtaEfpA+kjYh4?= =?us-ascii?Q?tX/U4uWR4xdSy2yzFc7v+yG4kWJ3M6y62D0/JPODHkNnh5zdXiHDy8DUCv6P?= =?us-ascii?Q?cNx4irhtb8yqkqsB/Wd8zA7aa3KAdKc1QsC6ySDedk4iCaGv8Kpg2YUSj4cH?= =?us-ascii?Q?KgT2YlCzZS7s0zDT4zvmTHbJK+OEc8tb09I5iJEaQMm+qXEgCkd44zds69UR?= =?us-ascii?Q?qpqjNfqsXrfPLBta9jIX5GbeYqiWeiGOCjDWGEscw+5MJOfsiDbo3bVZtRMx?= =?us-ascii?Q?yZjUADZSW0t4FErI9CxbMLlSogv4TU0ssi66UeH9s3UMfLHGrTCdcOf7gx0U?= =?us-ascii?Q?1NUsAyPYbQgbJhMRE9P7vQnt3Egy2hJ/gcxQEWRlx3bs64877Aq8Un3V0MKd?= =?us-ascii?Q?EBSAZl4EY9dWhXZEVMcF9YY1y60pi3TykO89LxmpNieKSGuB+9HneSGUFECz?= =?us-ascii?Q?GjdX9v89uQ4=3D?=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SA1PR09MB8142.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ccc14f9b-93a5-437b-f744-08da0d05a6ce
X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Mar 2022 19:45:15.0144 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR09MB6798
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/qelxf_KtMkW0ur9GlHUrW85jie0>
Subject: Re: [Sidrops] [GROW] ASPA and Route Server (was RE: IXP Route Server question)
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Mar 2022 19:45:26 -0000

>If AS1 attests that AS3 is its provider, then there is no leak.
>That would be weird, but is it illegal?

No that wouldn't work. If you propose that then for an Update that is propagating in the opposite direction, you would also want the reverse: 'AS3 attests that AS1 is its provider'. That would make AS1 and AS3 siblings. Then the leak in question will not be detected (the ASPA verification outcome will be Valid)!

We considered and dismissed it before:
https://mailarchive.ietf.org/arch/msg/grow/bfchBrjqMqvMRoP7WrPR-OKOXT8/

Sriram

v2.8.7 | Report a Bug | By Email