Nicolas Williams writes:
> > If it's a matter of saying "turn off RIP, turn off BGP, turn off OSPF,
> > turn off IS-IS, turn off DVMRP, turn off ..." and iterating through a
> > huge list, then I think we've lost part of the control that's desired
> > here.
> 
> I'd expect them to have to turn ON the routing protocols they want, not
> OFF; I'd expect them to know what protocols they want on, how to
> configure them, etc...

I think that misses the point that some people are _really_ afraid of
routing protocols.  They like the fact that /etc/defaultrouter is a
big hammer: it disables dynamic routing protocols.

If you get rid of the big hammer, the first question will be: "so, how
do I get this back, because I want to be really sure?"

Perhaps the answer is that we need to supply a service profile that
disables all known routing protocols.

> > [1] No, I don't completely understand this point of view, so it's hard
> >     for me to describe it adequately.  Perhaps one of the adherents
> >     will chime in.  ;-}
> 
> Does noone mix dynamic and static routing?

Here's where implementation details and high-level descriptions
collide.

If you're doing both at the same time, then you generally configure
your static routes in a completely different way.  You want them to
interact properly with the routing protocols (and policies) you're
using, so you configure them as part of the routing protocol daemon
configuration.

When you are doing static routing _only_, you typically just arrange
for a series of "route add" commands to get run at boot time, and then
forget about it.  That's what the new "route -p" option is about.

The two aren't really the same.  When you use the routing daemon
configuration interfaces, you can add attributes to your routes that
are meaningless to the kernel (such as metrics) but that affect how
the routes are advertised and used in the rest of the network (if at
all).  But to do that, you have to run a routing daemon, which is
something that some users seem to want to avoid.

When you configure "traditional" static routes, you don't get any of
that goodness.  It's just a next hop and an interface.  That's it.

No, you very likely would _not_ want to use traditional static routes
with a routing daemon.  Or, at least, doing so would be somewhat
unwise.

> > Sure; I think having a static route control daemon is actually an
> > interesting idea, as it can (just like any other routing service)
> > interact properly with policy rules.  Traditional static routes can't
> > do that.
> > 
> > But I think that's a much longer-term direction.
> 
> But won't these service names be Committed?

I hope not.  What could possibly depend on them?

> My point is that if we weren't forced to specify transient-ness in the
> service configuration then we could avoid splitting these services if we
> lack a routing daemon that can be configured to just install some static
> routes and sit there.

Possibly ... but I think that works only if we can sell users on the
idea of running a routing daemon for static routes.

There are clear benefits to doing so, but there's a large mountain of
FUD to climb first.  In the past, we've avoided fighting that battle.

> > The issue, I think, is still how one can enable and disable desired
> > services.  In this case, I see no clear way to disable the "dynamic
> > routing protocol" service, unless it exists as an SMF entity.
> 
> Huh?  If you want forwarding to be enabled then you'd configure routing
> (static and/or dynamic) and enable the service, and if you wanted no
> forwarding then you'd leave the service disabled (or disable it if it
> had been enabled).

I'm not asking about forwarding at all.  I'm asking about dynamic
routing protocols.

As I mentioned earlier, they're not the same thing, and actually not
related.  You can do either one, both, or neither, as you choose.

-- 
James Carlson, KISS Network                    <james.d.carlson at sun.com>
Sun Microsystems / 1 Network Drive         71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677

Reply via email to