Subject: Re: [Sidrops] [WGLC] draft-ietf-sidrops-rpkimaxlen-08 - ends 25/October/2021

From: "Sriram, Kotikalapudi (Fed)" <[email-masked]>
Date: Thu, 9 Dec 2021 19:27:36 +0000

Hi Alexander:

I have just a little more to add to what Ben and Job have already articulated quite well. Just wanted to assure you that we (authors) understand your scenario. Hopefully, you agree that the illustration in slide 1 (attached pdf) correctly captures it? However, one should not lose sight of the advantage of minimal ROA for route-optimizer-type leaks (Ben mentioned this) -- see illustration in slide 2. These are *accidental* forged-origin subprefix hijacks and are of major concern. The minimal ROA approach (per Draft) stops them close to the source in customer cones of ASes that do ROV. In your scenario (slide 1), AS-X has the option to peer (ahead of time) with AS-B and the problem is solved even if AS-X employs minimal ROA. This is mentioned in Section 5.2.

Thanks.
Sriram