Re: [Sidrops] [GROW] Deprecation of AS_SET and AS_CONFED_SET -- feedback requested

"Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov> Fri, 27 September 2019 13:58 UTC

Return-Path: <kotikalapudi.sriram@nist.gov>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB30E120043; Fri, 27 Sep 2019 06:58:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MOJMmiD9y62t; Fri, 27 Sep 2019 06:58:16 -0700 (PDT)
Received: from GCC01-DM2-obe.outbound.protection.outlook.com (mail-eopbgr840133.outbound.protection.outlook.com [40.107.84.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F4098120025; Fri, 27 Sep 2019 06:58:15 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Up2hId87Uuf7GgUxHQKmc+pVHY33e8/lDDkyPVWzmdkxpRmUaam6O/6t+c1wS5nKJR2mwJQoNrodAiq9xvSvYeDFUywRfoHSYbO9FTuq898N51HGgxb8pgvMZ15NGXVtNeFeBIc6HqzwH0V/NPbpy7q1Soz3YFvQs4YvKw6i5s7mams0MeWHFNTB9kF/xfK224piT+GN2YGMFwrRdAWPETHCXDcMaF6NP+A7JQDU9lZEkHceBayNdyf3iu6jL4hX7WO3PGraV/Oqbk9vbcbLA1qEOvOBMgVAl3PbE2/jwkDc+VcQgSK1HLwFMPMXgwgyz23VaSnVQPOZtSAtYIK7Rw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=J1xh3uJzXNhUHxehB8UUi1hu1zf5xJkMznBnPp99kxs=; b=XU/KAt8cazH0kfVehDVF2ISaAkAiWxELDssG0ueX5HzkX6alcD/wEbzq7EVkY9B17nH4nSuKwfLsSlyWgUKLrh1ceeM93qY/lS9gni5U5auATS3amaoEc8QEbpmagXCo8sJCVs03afoWJj9T48jQgRoVCGsFY1BCpubEdE3SX3umNhXv4AYOHs7sCUOGpi4WVr6+KbvT4GZDfEqsBP2UhC1PnVtxmWmQDk75PWBk4EI1qd3SM3Su+tOv6OUQLqO0MnB9kelAE/OgfRJs+8g6kWBDqK52VKcahXPXS1EVDpf38MD/xrzKNZRNI2hRPpTcqL3l5GTQeD55hybjqV3a8g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=J1xh3uJzXNhUHxehB8UUi1hu1zf5xJkMznBnPp99kxs=; b=wP0IR8awEhaiAOD5g6YVqsBWHvPd3bOWyA+fDHeNhsSieueTFDipunvLDiV/uAt8JKLq4nye7DTwup5AcvFBoIkbrCloNs2yL8svIfyDhk5asJeHd30jdoGlPDoQDOaOyjV+jvNc+8pMey/BJh/yl43aKVvkgxdFijBFBz30T7c=
Received: from BL0PR0901MB4563.namprd09.prod.outlook.com (52.135.47.206) by BL0PR0901MB3250.namprd09.prod.outlook.com (20.177.243.209) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2284.26; Fri, 27 Sep 2019 13:58:14 +0000
Received: from BL0PR0901MB4563.namprd09.prod.outlook.com ([fe80::f9c4:c14:6a6b:1252]) by BL0PR0901MB4563.namprd09.prod.outlook.com ([fe80::f9c4:c14:6a6b:1252%3]) with mapi id 15.20.2305.017; Fri, 27 Sep 2019 13:58:13 +0000
From: "Sriram, Kotikalapudi (Fed)" <kotikalapudi.sriram@nist.gov>
To: Warren Kumari <warren@kumari.net>
CC: Jared Mauch <jared@puck.nether.net>, IDR <idr@ietf.org>, GROW WG <grow@ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, Job Snijders <job@ntt.net>, john heasley <heas@shrubbery.net>, Jeffrey Haas <jhaas@pfrc.org>
Thread-Topic: [GROW] Deprecation of AS_SET and AS_CONFED_SET -- feedback requested
Thread-Index: AQHVTTL4B77hNRR7Ck2ALhCdtVXslKbv3oAAgE2Fk4CAAADjgIAALBq3gAFMN4CAAPJUcw==
Date: Fri, 27 Sep 2019 13:58:12 +0000
Message-ID: <BL0PR0901MB4563CAC8A4A53FF2D21EB81A84810@BL0PR0901MB4563.namprd09.prod.outlook.com>
References: <DM6PR09MB3019D019788E916525EDC3DC84D40@DM6PR09MB3019.namprd09.prod.outlook.com> <01c201d54d3c$74375ee0$5ca61ca0$@ndzh.com> <D49ED265-0C25-4FE0-BB02-4F176DA4BE5E@puck.nether.net> <69F03192-CE2E-4126-910D-A7E3B3AA8848@puck.nether.net> <BL0PR0901MB45639533E8F999FD6553191184860@BL0PR0901MB4563.namprd09.prod.outlook.com>, <CAHw9_iJr=NaEWjMqmZjeWEwGmKfSNoAM58spsY+BSEa9ze3qYQ@mail.gmail.com>
In-Reply-To: <CAHw9_iJr=NaEWjMqmZjeWEwGmKfSNoAM58spsY+BSEa9ze3qYQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=kotikalapudi.sriram@nist.gov;
x-originating-ip: [129.6.219.113]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 21e01040-1db6-449a-89cc-08d74352bcee
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600167)(711020)(4605104)(1401327)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:BL0PR0901MB3250;
x-ms-traffictypediagnostic: BL0PR0901MB3250:
x-ms-exchange-purlcount: 1
x-microsoft-antispam-prvs: <BL0PR0901MB3250B0972CF0F539AA7E1C3C84810@BL0PR0901MB3250.namprd09.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0173C6D4D5
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(376002)(346002)(366004)(39860400002)(136003)(199004)(189003)(51914003)(66946007)(52536014)(6506007)(76176011)(6436002)(64756008)(66556008)(14454004)(76116006)(186003)(446003)(966005)(8676002)(81166006)(54906003)(9686003)(6306002)(81156014)(486006)(478600001)(55016002)(316002)(2906002)(74316002)(229853002)(305945005)(7736002)(25786009)(99286004)(33656002)(86362001)(26005)(3846002)(66446008)(5660300002)(6116002)(66066001)(4326008)(8936002)(6246003)(256004)(476003)(11346002)(102836004)(6916009)(7696005)(66476007)(71190400001)(71200400001)(91956017); DIR:OUT; SFP:1102; SCL:1; SRVR:BL0PR0901MB3250; H:BL0PR0901MB4563.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: TI1hWJl3iGdOm2/HfY2wGhUQphBE8LMbrOXXMPOqnoSjl4aKp7pq16jNkEc9yS5XZd4xyEEhgDToWGGbcbRQcUbAkJX/g352R2/VQLuJANqTVWB95M74UneLjtUielruuy/1O7ruaA+nzLBYXehvIPERx7CEUXqlZ9zCyJ3yDGEw0n2FldJW6H3dDxpHsCM0sKWkABSpCxs4IUmU/7KtsU4PY0YmxPYDH0w6v2qw1dkOLEv6o3jB/NDlv3wSBp66Ruu8X5j+qtWAbtxi4NCZbi/KZ9XDhdVjEwVrgGxH7r/rCvnd9tjmtH13MR4TS3Au+wuGrMF0hsQtk6EaN18JxGX414z8KesrDS3dWwb+bimj83yZQ0tjp51b31zWuUQRbmt5UkGISgpPm3JJ8ujTUx4HlXXb6uoudNyc+Efv3qzqusq5X3vVmvHObqV8E/pcevfrZ+KnDMvBLQKt5iQ/MQ==
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-Network-Message-Id: 21e01040-1db6-449a-89cc-08d74352bcee
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Sep 2019 13:58:13.1502 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: NmjcBPzLtPDKzaS4r3xNMxzutNO2wZhAOPfhkYHM/eCbXoMzNObB+Iit35Gx48jVbYu9Qpp+5gJeYcmlDlJs5Q==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR0901MB3250
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/yIphuerrhIZv1Kcwks3zGv3EGn0>
Subject: Re: [Sidrops] [GROW] Deprecation of AS_SET and AS_CONFED_SET -- feedback requested
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Sep 2019 13:58:19 -0000

Warren,

Thanks for the additional data/suggestions. Comments below.

.....
>> Some recent measurements we have at NIST about this are as follow:
>> (thanks to Lilia Hannachi - my colleague)
>>
>
>This is nice, but what would make it more useful would be if it also
>reported if there are *useful* AS_SETS / if the AS_SET means anything.
>
>For example, from Jared's email below:
>AS path:  14061 3356 6762 23487 27738 27738 27738 27738 27738 27738
>{27738} -- the 27738 AS already shows up as a non-AS_SET in the path.
>
>I've also seen a number of instances where the AS_SET contains many
>repeated instances, e.g:
>AS path: 6939 3356 42020 39010 {39275 39275 39275 39275 39275 39275
>39275 39275 39275 39275} -- this doesn't seem to actually mean
>anything...
>
>Looking at the top few AS paths with AS_SETs I see:
>  28 12127
>  27 27738
>  24 11139
>  17 23383
>  13 12849
>
>AS12127 - Telefonica Moviles El Salvador S.A. de C.V., SV (these are
>all behind AS263783 - Telefonica Moviles El Salvador S.A. de C.V., SV
>)
>AS27738 - Ecuadortelecom S.A., EC
>AS11139 - CWC-ROC-11139 - Cable & Wireless Dominica, DM
>AS23383 - METRORED S.A. DE C.V., HN   (this also seems to provide
>transit to AS267737? (advertising 45.168.172.0/24))
>AS12849 HOTNET-IL AMS-IX Admin LAN, IL
....

Interesting! We can extend our analysis at NIST to examine these things as needed.
In the data that I shared earlier, another thing you might have noticed
is that there are ~ 350 instances where special purpose ASNs occur in AS_SETs.
An earlier study we did and presented at IETF is here:
https://www.nist.gov/sites/default/files/documents/itl/antd/AS_SET_Aggregator_Stats-2.pdf  
There we noticed other strange things:
In some cases, AS in the AGGREGATOR doesn't match the right most AS in the AS_PATH
that follows the AS_SET. So AGGREGATOR is different from the AS that created the AS_SET! Hmm..! 
In the slides, we also reported numbers on private ASNs seen in AS_SETs.

Sriram