Deprecation of AS_SET and AS_CONFED_SET in BGP
draft-kumari-deprecate-as-set-confed-set-13
|
| Document |
Type |
|
Active Internet-Draft (individual)
|
|
Last updated |
|
2019-01-17
|
|
Stream |
|
(None)
|
|
Intended RFC status |
|
(None)
|
|
Formats |
|
plain text
pdf
html
bibtex
|
| Stream |
Stream state |
|
(No stream defined) |
|
Consensus Boilerplate |
|
Unknown
|
|
RFC Editor Note |
|
(None)
|
| IESG |
IESG state |
|
I-D Exists
|
|
Telechat date |
|
|
|
Responsible AD |
|
(None)
|
|
Send notices to |
|
(None)
|
Network Working Group W. Kumari
Internet-Draft Google, Inc.
Intended status: Standards Track K. Sriram
Expires: July 21, 2019 USA NIST
January 17, 2019
Deprecation of AS_SET and AS_CONFED_SET in BGP
draft-kumari-deprecate-as-set-confed-set-13
Abstract
RFC 6472 (i.e., BCP 172) recommends not using AS_SET and
AS_CONFED_SET in BGP. This document updates RFC 4271 and proscribes
the use of the AS_SET and AS_CONFED_SET types of the AS_PATH in
BGPv4. This is done to simplify the design and implementation of BGP
and to make the semantics of the originator of a route more clear.
This will also simplify the design, implementation, and deployment of
ongoing work in the Secure Inter-Domain Routing Working Group.
Status of This Memo
This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at https://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
This Internet-Draft will expire on July 21, 2019.
Copyright Notice
Copyright (c) 2019 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(https://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
Kumari & Sriram Expires July 21, 2019 [Page 1]
Internet-Draft AS_SET, AS_CONFED_SET use deprecation January 2019
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2
2. Requirements Notation . . . . . . . . . . . . . . . . . . . . 3
3. Recommendation to Network Operators . . . . . . . . . . . . . 3
4. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 4
5. Security Considerations . . . . . . . . . . . . . . . . . . . 4
6. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 4
7. References . . . . . . . . . . . . . . . . . . . . . . . . . 4
7.1. Normative References . . . . . . . . . . . . . . . . . . 4
7.2. Informative References . . . . . . . . . . . . . . . . . 5
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 5
1. Introduction
RFC 6472 (i.e., BCP 172) [RFC6472] makes a recommendation for not
using AS_SET and AS_CONFED_SET in BGP. This document advances the
recommendation to a standards requirement in BGP. It updates RFC
4271 and proscribes the use of the AS_SET and AS_CONFED_SET types of
the AS_PATH in BGPv4.
The AS_SET path segment type of the AS_PATH attribute (Sections 4.3
and 5.1.2 of [RFC4271]) is created by a router that is performing
route aggregation and contains an unordered set of Autonomous Systems
(ASes) that the update has traversed. The AS_CONFED_SET path type
([RFC5065]) of the AS_PATH attribute is created by a router that is
performing route aggregation and contains an unordered set of Member
AS Numbers in the local confederation that the update has traversed.
It is very similar to AS_SETs but is used within a confederation.
By performing aggregation, a router is, in essence, combining
multiple existing routes into a single new route. This type of
aggregation blurs the semantics of what it means to originate a
route. Said aggregation can therefore cause operational issues, such
as not being able to authenticate a route origin for the aggregate
prefix in new BGP security technologies (such as those that take
advantage of the "X.509 Extensions for IP Addresses and AS
Identifiers" [RFC3779]). This in turn would result in reachability
problems for the aggregated prefix and its components (i.e., more
specifics). Said aggregation also creates traffic engineering
issues, because the precise path information for the component
prefixes is not preserved.
Kumari & Sriram Expires July 21, 2019 [Page 2]
Show full document text