Re: [Sidrops] Call for adoption of draft-spaghetti-sidrops-rpki-prefixlist

"Dale W. Carder" <dwcarder@es.net> Fri, 06 October 2023 14:11 UTC

Return-Path: <dwcarder@es.net>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 987EDC17EB6F for <sidrops@ietfa.amsl.com>; Fri, 6 Oct 2023 07:11:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=es.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DJ9pP-fKbTY9 for <sidrops@ietfa.amsl.com>; Fri, 6 Oct 2023 07:10:59 -0700 (PDT)
Received: from mail-io1-xd2d.google.com (mail-io1-xd2d.google.com [IPv6:2607:f8b0:4864:20::d2d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC35EC16B5A5 for <sidrops@ietf.org>; Fri, 6 Oct 2023 07:10:59 -0700 (PDT)
Received: by mail-io1-xd2d.google.com with SMTP id ca18e2360f4ac-7a27254cd12so85587439f.3 for <sidrops@ietf.org>; Fri, 06 Oct 2023 07:10:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=es.net; s=esnet-google; t=1696601459; x=1697206259; darn=ietf.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=rJirdrFhn+/I8vizGKpGMyLakiJ2FtmvfyQOFYNIGHc=; b=kzAJuADKyTAkiFEsqTzurVeL1wnRvyrD/BRhMLMEPzfU9SEp+UXfIj+GmGAlvUxetB iGxIE6rapfd4/F7eMHeJWm4391IXrmWzGl77YnPUcIgFFQCVJ+FfzJgqpVfLR4Xh6qzF NquZ5qZ/Rw7FFk1qiVHNQD2uTLlCIUn15bKfna9yer99eVBId/3cGLEqfd1kut8ybStO +Dt+VQBOBCK1wbtVrIsSSZ4QmobkpNvsX7gd4NCf44Aip26sYudzzBE+FCMT0Yi0eofa vb3B2vimbOIx/ezdLRX2rmDsntNheE4HPeLwh9XUdZ4RQlxip1Fw3khi5WB6fdRVErdj KPFQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1696601459; x=1697206259; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=rJirdrFhn+/I8vizGKpGMyLakiJ2FtmvfyQOFYNIGHc=; b=fEfwQ9bydQkroADLnkSAaM0HuREFGhOw0p1WV7xW+Upi9Jg8LrgRdKXgb3mA2zMsBA vRjpqL4/QOxjfU7CCh1WBETSfCVVOrOC2VuCgtGjuLhQ6v7FsfRarHvapCHkbtDHZYpA TfrNjZO+UX+nntykMjNZERWNiM6sr21lU8qXp1D+dLsukuNVDysOrhy1+eqSNMoMJG49 +AL2AydIHKlAOiWnqYpRUzVbkRW3zGSRg16ORg8OKxd/BtVLG975eris7+thN9BA2kDU aAO0cKzfEf+05SXQviDB0r6SSJtcqUom+DBlcewzJIVC9ytmFA3ck4/egFtZgnytNdID Ekog==
X-Gm-Message-State: AOJu0YwMEjOGjDptTNifK9fjFIYNhUVFgGHLRBuEOTwW8tYTmBQHl0uz 6g5Sb6DZkzrN/zcIMC0cMBo/ZILw3dsed+YEpeLm6VBDnsrzLIdGkjz0MlPyFZkGI6K2wLXoCLt KcV/PxizWeaqhXv4KBCNIKbI4pLMqWC7sQEQPvtWDbDWN/SKCfWZTiY1lvG2gMP6JTeVQbM40nm NBIYUVug==
X-Google-Smtp-Source: AGHT+IEoZ2eRYCKVj2VDIC3tObRjK9MFv/3yX+Udy3MWP6635MCfgMgU+nCE4jMx4vikwz56OiwmXg==
X-Received: by 2002:a6b:d804:0:b0:798:3cb5:ad30 with SMTP id y4-20020a6bd804000000b007983cb5ad30mr8619079iob.7.1696601458881; Fri, 06 Oct 2023 07:10:58 -0700 (PDT)
Received: from localhost ([2600:6c44:5f7f:b901:bd24:cb92:b9b8:563b]) by smtp.gmail.com with ESMTPSA id t4-20020a02cca4000000b0042b3e2e5ca1sm421528jap.122.2023.10.06.07.10.58 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Oct 2023 07:10:58 -0700 (PDT)
Date: Fri, 06 Oct 2023 09:10:57 -0500
From: "Dale W. Carder" <dwcarder@es.net>
To: Randy Bush <randy@psg.com>
Cc: George Michaelson <ggm@algebras.org>, SIDR Operations WG <sidrops@ietf.org>
Message-ID: <ZSAVcZun6hmoH4lw@dwc-desktop.local>
References: <SA1PR09MB8142D5B0AFE288F6494E27E68403A@SA1PR09MB8142.namprd09.prod.outlook.com> <4FBF5BF5-3D0F-4FF2-82E9-C2F542C90E5D@vigilsec.com> <ZMBkDwMIN3Fg8HSO@snel> <0AC6301E-9C37-4DF6-9F22-D86D085724B6@vigilsec.com> <CAKr6gn1d_6==PE_V3kYRC_wOBTCNUrQ7p7qskTss6gvRvKnb2w@mail.gmail.com> <m2r0mac6py.wl-randy@psg.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <m2r0mac6py.wl-randy@psg.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/wLX7jpichp36k9WWdELMjIZCiFw>
Subject: Re: [Sidrops] Call for adoption of draft-spaghetti-sidrops-rpki-prefixlist
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Oct 2023 14:11:04 -0000

Thus spake Randy Bush (randy@psg.com) on Wed, Oct 04, 2023 at 04:23:37PM -0700:
> > I support adoption of this draft. I think this is a useful facility to
> > aide routing configuration. ROAs denote what address holders intend,
> > this would denote what AS holders agree is possible.
> 
> i forget who said it at 117, but this was the decision back in the
> design before all this entered the sausage machine.
> 
> the AS holder asserts their agreement in BGP.

This was exactly the position I started from when I first read the
draft... like isn't there an implicit agreement in BGP typically backed 
up by currency changing hands?  

Then I consider why have I invested so much in automation / RPSL tooling
and have routers with 300-500k lines of config?  Because that "agreement"
isn't strong enough to stop misconfigurations that are easily preventable
if we can describe the intended state out of band.  Today that's largely
the IRR + peeringDB ecosystem, but we can do better. 

I support adoption of this draft.

Dale