Deprecation of AS_SET and AS_CONFED_SET in BGP
draft-kumari-deprecate-as-set-confed-set-10

Document Type Active Internet-Draft (individual)
Last updated 2017-07-03
Stream (None)
Intended RFC status (None)
Formats plain text pdf html bibtex
Stream Stream state (No stream defined)
Consensus Boilerplate Unknown
RFC Editor Note (None)
IESG IESG state I-D Exists
Telechat date
Responsible AD (None)
Send notices to (None)
Network Working Group                                          W. Kumari
Internet-Draft                                              Google, Inc.
Intended status: Standards Track                               K. Sriram
Expires: January 4, 2018                                         US NIST
                                                            July 3, 2017

             Deprecation of AS_SET and AS_CONFED_SET in BGP
              draft-kumari-deprecate-as-set-confed-set-10

Abstract

   RFC 6472 (i.e., BCP 172) recommends not using AS_SET and
   AS_CONFED_SET in BGP.  This document updates RFC 4271 and proscribes
   the use of the AS_SET and AS_CONFED_SET types of the AS_PATH in
   BGPv4.  This is done to simplify the design and implementation of BGP
   and to make the semantics of the originator of a route more clear.
   This will also simplify the design, implementation, and deployment of
   ongoing work in the Secure Inter-Domain Routing Working Group.

Status of This Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at http://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on January 4, 2018.

Copyright Notice

   Copyright (c) 2017 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must

Kumari & Sriram          Expires January 4, 2018                [Page 1]
Internet-Draft    AS_SET, AS_CONFED_SET use deprecation        July 2017

   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   2
   2.  Requirements Notation . . . . . . . . . . . . . . . . . . . .   3
   3.  Recommendation to Network Operators . . . . . . . . . . . . .   3
   4.  IANA Considerations . . . . . . . . . . . . . . . . . . . . .   4
   5.  Security Considerations . . . . . . . . . . . . . . . . . . .   4
   6.  Acknowledgements  . . . . . . . . . . . . . . . . . . . . . .   4
   7.  References  . . . . . . . . . . . . . . . . . . . . . . . . .   4
     7.1.  Normative References  . . . . . . . . . . . . . . . . . .   4
     7.2.  Informative References  . . . . . . . . . . . . . . . . .   5
   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .   5

1.  Introduction

   RFC 6472 (i.e., BCP 172) [RFC6472]  makes a recommendation for not
   using AS_SET and AS_CONFED_SET in BGP.  This document advances the
   recommendation to a standards requirement in BGP.  It updates RFC
   4271 and proscribes the use of the AS_SET and AS_CONFED_SET types of
   the AS_PATH in BGPv4.

   The AS_SET path segment type of the AS_PATH attribute (Sections 4.3
   and 5.1.2 of [RFC4271]) is created by a router that is performing
   route aggregation and contains an unordered set of Autonomous Systems
   (ASes) that the update has traversed.  The AS_CONFED_SET path type
   ([RFC5065]) of the AS_PATH attribute is created by a router that is
   performing route aggregation and contains an unordered set of Member
   AS Numbers in the local confederation that the update has traversed.
   It is very similar to AS_SETs but is used within a confederation.

   By performing aggregation, a router is, in essence, combining
   multiple existing routes into a single new route.  This type of
   aggregation blurs the semantics of what it means to originate a
   route.  Said aggregation can therefore cause operational issues, such
   as not being able to authenticate a route origin for the aggregate
   prefix in new BGP security technologies (such as those that take
   advantage of the "X.509 Extensions for IP Addresses and AS
   Identifiers" [RFC3779]).  This in turn would result in reachability
   problems for the aggregated prefix and its components (i.e., more
Show full document text