Hi Russ,

> Doesn't this also impact 2 octet to 4 octet transition?

I thought about the same but I concluded that it does not. Due to inherent day one design of BGP_SEC_PATH which supports 4 octet AS you may carry it there as opposed to carry it AS4_PATH attribute.

> IMHO, this is a huge problem --much larger than we might imagine at
> this particular moment in time.

I think that the overall assumption is that we will fall back to non-sec where ever and for whatever reason needed. With this in mind I am amazed to see proponents of BGP Sec not caring about it as the end result will be marginal to non BGP Sec deployment result.

For example IBGP speakers will not likely to get upgraded to BGPSec in years to come. In traditional ISP this will immediately result in downgrade. When you use RR you are a bit better as only RR needs to be upgraded, but still this is light years for Internet wide deployment. As example I know global SP networks which use full mesh.

I am therefor proposing SIDR overlay as smooth gradual introduction of BGP SEC on subset of prefixes yet with full benefits of full blown BGP Sec deployment. Maybe just for easy transition ... Of course this requires Internet wide encapsulation so those allergic to it will not like it :).

Best,
R.


- Extensibility to include new segment types. In principle this is a fairly 
serious omission, but one can argue that new segment types can't be introduced 
in practice, since existing implementations will treat them as fatal errors.

Doesn't this also impact 2 octet to 4 octet transition?

IMHO, this is a huge problem --much larger than we might imagine at this
particular moment in time.

Russ


_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to