Re: [Sidrops] I-D Action: draft-ietf-sidrops-route-server-rpki-light-00.txt

Job Snijders <job@ntt.net> Fri, 13 January 2017 18:40 UTC

Return-Path: <job@ntt.net>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA6B41294BF for <sidrops@ietfa.amsl.com>; Fri, 13 Jan 2017 10:40:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.134
X-Spam-Level:
X-Spam-Status: No, score=-5.134 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-3.199, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vtODwpNMO_9H for <sidrops@ietfa.amsl.com>; Fri, 13 Jan 2017 10:40:14 -0800 (PST)
Received: from mail3.mlpsca01.us.to.gin.ntt.net (mail3.mlpsca01.us.to.gin.ntt.net [IPv6:2001:418:3ff:3::22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF9C9129C73 for <sidrops@ietf.org>; Fri, 13 Jan 2017 10:40:13 -0800 (PST)
Received: by mail3.mlpsca01.us.to.gin.ntt.net with esmtpsa (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.84_2) (envelope-from <job@ntt.net>) id 1cS6lo-000AJ9-GY (job@us.ntt.net); Fri, 13 Jan 2017 18:40:13 +0000
Date: Fri, 13 Jan 2017 19:40:09 +0100
From: Job Snijders <job@ntt.net>
To: sidrops@ietf.org
Message-ID: <20170113184009.GC1055@Vurt.local>
References: <148433210469.9788.12815016683609966013.idtracker@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <148433210469.9788.12815016683609966013.idtracker@ietfa.amsl.com>
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: Mutt/1.7.2 (2016-11-26)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/x48xMFqtgU4-Cdq7-iHdrVjvhz0>
Subject: Re: [Sidrops] I-D Action: draft-ietf-sidrops-route-server-rpki-light-00.txt
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jan 2017 18:40:16 -0000

Hi all,

I have trouble with the idea proposed in this draft. It reads to me
"When the route server receives a hijacked prefix, it will decorate it
with an extended community and propagate it to all its peers".

This is not a responsible thing to do. Route Server operators should
configure there route servers to reject/drop/ignore 'RPKI invalid'
announcements, and thats should be the end of it.

Kind regards,

Job

On Fri, Jan 13, 2017 at 10:28:24AM -0800, internet-drafts@ietf.org wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the SIDR Operations of the IETF.
> 
>         Title           : Signaling Prefix Origin Validation Results from a Route-Server to Peers
>         Authors         : Thomas King
>                           Daniel Kopp
>                           Aristidis Lambrianidis
>                           Arnaud Fenioux
> 	Filename        : draft-ietf-sidrops-route-server-rpki-light-00.txt
> 	Pages           : 6
> 	Date            : 2017-01-13
> 
> Abstract:
>    This document defines the usage of the BGP Prefix Origin Validation
>    State Extended Community [I-D.ietf-sidr-origin-validation-signaling]
>    to signal prefix origin validation results from a route-server to its
>    peers.  Upon reception of prefix origin validation results peers can
>    use this information in their local routing decision process.
> 
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-sidrops-route-server-rpki-light/
> 
> There's also a htmlized version available at:
> https://tools.ietf.org/html/draft-ietf-sidrops-route-server-rpki-light-00
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________
> Sidrops mailing list
> Sidrops@ietf.org
> https://www.ietf.org/mailman/listinfo/sidrops