Please see attached review.
I am the assigned Gen-ART reviewer for this draft. For background on
Gen-ART, please see the FAQ at
<http://wiki.tools.ietf.org/area/gen/trac/wiki/GenArtfaq>.
Please wait for direction from your document shepherd
or AD before posting a new version of the draft.
Document: draft-ietf-sidr-roa-validation-10.txt
Reviewer: Brian Carpenter
Review Date: 2011-04-23
IETF LC End Date: 2011-04-18
IESG Telechat date: 2011-04-28
Summary: Almost ready
--------
Comment:
--------
> 3. Applying Validation Outcomes to Route Selection
...
> "valid" is to be preferred over
> "unknown", which is to be preferred over
> "invalid".
...
> It is a matter of local routing policy as to the actions to be
> undertaken by a routing entity in processing those routes with
> "unknown" validity states.
That leaves open the possibility that an AS_SET aggregated route (which
is by definition "unknown") would be rejected as part of a general policy
choice. At the least, it seems that this should be mentioned to ensure that
operators are aware of it. This is orthogonal to the fact that AS_SET
is intrinsically a security problem.
Suggested sentence to add:
Operators should be aware that a policy that rejects all "unknown" routes
will thereby reject any aggregated (AS_SET) route.
_______________________________________________
Gen-art mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/gen-art
