Customer AS

Randy,

What are you saying is brain damaged? The idea of announcing a dual
homed route as part of an aggregate? Or Sprint?

You clearly want to avoid using space in any provider that is not
willing to suppress your more specific when generating their
aggregate, particularly since they can no longer pass the aggregate to
you (with your AS in the as-set). We've seen this effect.

Using your own aggregate and allowing a customer to dual home, leaving
the alternate provider's contribution out of the aggregate is a
certainly not brain damaged.

Curtis

Mornin' Curtis,

Not sure what you mean here concerning 'unroutable' prefixes, but the
issue with obtaining an allocation for one of the upstream provider's
CIDR block when multihomed *does* have its drawbacks, at least from
the end-user perspective. If said prefix (let's say a /24) is announced
in the 'allocating' provider's aggregate, and the more specific is
announced via the 'other' provider, the more specific will always be
preferred.

This is brain damaged. Given

            AS1 ----- Sprint
             >
             >
             >
             >
            AS2 ----- anything else not Sprint

You can not announce a bit of Sprint space AS1->AS2->MCI as a fallback
(note the 'extra' AS hop) because Sprint aggregates your announcement
and the longer prefix is announced to the world via <anything else>.

Use Sprint space, bye bye fallback.

To the best of my knowledge (which ain't that hot), all other providers
have discovered suppress-map.

What are you saying is brain damaged? The idea of announcing a dual
homed route as part of an aggregate? Or Sprint?

Sprint's policy. And they are *proud* of the policy. To quote ...

    Sprint is in the process of aggregating as much of the network as we
    can to reduce the overall number of announcements that need to be made
    and to avoid having to register each IP block with companie such as ANS
    for routing through their network.

    Scott
    SprintLink NOC

Peter's RADB entries are a good giggle, as they can be generally ignored.
This policy can not be ignored.

What Sprint's policy is actually meant to do is to discourage customers
from multi-homing to other providers. What their policy actually does is
convince wise folk not to buy from Sprint.

randy

What Sprint's policy is actually meant to do is to discourage customers

                 ^^^^^^^^^^^^^^^^^^^^^

from multi-homing to other providers. What their policy actually does is

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

This is not a bad thing in itself.

-dorian

randy@psg.com (Randy Bush) writes:

What their policy actually does is
convince wise folk not to buy from Sprint.

Well, I don't want to argue with you as a marketing person
with respect to brand names and the like, but hopefully I
can separate your technical arguments from what might
honestly be mistaken as an attempt at market positioning.

Since March of 1995, Sprint has had contractual language
with respect to our PA address delegations that make them
explicitly non-portable, and not to be used in any other
provider's network.

In order to enforce that contract, we have installed
inbound prefix filters to ignore all subnets of our PA
CIDR blocks that are announced by our peers at exchange
points.

We have made no exceptions or holes in those inbound
filters, except in the few cases where a network with
addresses from Sprint CIDR space was willing to renumber
and cease using the old non-portable numbers within a
fixed number of days after homing itself to another provider.

This is simply because rather than paying lip-service
to non-portable PA addresses, we have worked out a
contractual framework for delegation of these addresses,
technical support for non-portability and also for
aggregation. That is, there should be no subnets
our non-portable PA CIDR blocks seen outside Sprintlink.
This means some 4500 prefixes are hidden from global
routing tables, with nearly zero entropy, because we
do not make it easy for subnets to be migrated out of SL
and remain workable.

You have correctly noted that this effectively means that
dual-homing to a Sprintlink peer (such as MCI) will not
buy you fallback in the case of failure of your Sprintlink
connectivity. This is a side-effect people generally are
aware of, and generally can work around anyway.

The simple solutions are, in order,

  -- make sure you have redundant connectivity to SL
     so that you do not lose connectivity to Sprintlink
     (admittedly we have not done a very good job
           making this option attractive price-wise,
     unlike a pair of our competitors, however we
     are working on that, and hopefully this option
     will be attractive _notwithstanding_ our non-portability
     policy)

  -- work out mutual back-up transit with another
     dual-homed SL customer

     Customers X and Y are using PA space.
     Each announces their subnets to SL and the 2nd backbone.
       Each takes, at minimum, announcements for the
              other customer from _both_ backbones.
        Note that this likely will require the
              equivalent of de-aggregation on the SL side
        in some cases (each sub AS does aggregation,
        and announces only the aggregates).
        This essentially amounts to what Yakov
        Rekhter describes as a "route pull".
        This is important for the next bullet.
     Customer X's connection to SL fails.
     Customer Y no longer hears SL's the
    announcement of X's subnets
          but they continue to hear them
    from the 2nd provider
     Customer Y therefore announces the subnets
          to SL on X's behalf.
    Note that this will require us to adjust
          inbound filters on the customer
    aggregation router in most cases,
    and is also what Yakov Rekhter
    describes as a "route push".
     SL hears announcement for X from Y,
    and hands X's traffic to Y.
     Problem solved.

     I would note that at least one SL customer,
     namely CAIS, actively sells this solution as
     a product. Moreover, they do a good job,
     and this is clearly a win for Sprint,
           Sprintlink's and CAIS's joint customers,
     and the manageability of our efforts to
     avoid increasing the size of global routing
     tables.

  -- offer yourself up as a PIARA-style volunteer
     
     I imagine that if there was a specific fee
     for a/ converting PA space into effectively PI
     space, b/ adjusting inbound filters at our
     edges, and c/ adjusting outbound filters at
     our edges, and this were negotiated initially
     as a special customer arrangement, Sprintlink's
     engineering and operations folks would have
     little problem with this, other than scaling
     it upwards to handling lots of this type of
     arrangement.

     I would imagine that since there are real
     amounts of effort across multiple groups
     internally, not to mention concerns wrt
     scalability of implementing this, the price
           should be fairly steep.
     However, if there is really a strong perceived value
     for this, I would be very keen on seeing a
     market develop.

     Finally, I would note that a trend towards
     large amounts of PA->PI conversion would
     certainly bloat our competitor's routing
     tables and those of some downstream customers,
     which has real costs. I would expect (and even
     hope) that this would lead either to the sort
     of filtering we do now, or to some route-charging scheme, in
     reasonably short order.
    
     Sprint is in a relatively good position here,
     since we already do protective filtering, and
     would be receiving a revenue stream directly
     associated with the increase in the amount of
     routing information we'd be carrying.
           Therefore, priced right, and assuming that
     we don't run into impassable technical
     limitations, any upgrading to new technology
     that would be required would have been paid
     for by the people forcing that requirement.

I would suggest that, far from indicating brain-damage
at Sprint, our addressing and aggregating policies are
rather clever.

You would have suggested that too, but you seem to be
far more keen on using terms like "brain damaged" and
"...other providers have discovered..." (a piece of
technology that was done for me) and "wise folk [should
not] buy from Sprint".

Perhaps some folk will buy from people who sell out their
engineering and operations background for quick bucks, but
I think that many others will realize that Sprint is not
out to make it hard for Sprint's customers to remain in
business (and spending more money on Sprint services
as their revenues increase), and in fact is working very
hard on preventing our customers from seeing a huge
explosion in routing table size that would be very costly
to them.

You might even consider being somewhat more charitable
towards a competitor which has, unilaterally, undertaken a
sometimes heavily criticized path leading to an economy
wherein topology-based addressing is considered the best
approach, not only from a technical perspective, but from
a business perspective too. This approach, even though
it has not been perfect, has, I suspect, made it possible
for you to go into business with only a few million
dollars of capital expenses rather than a few million
dollars per router. Heck, you've even said as much
yourself, in a previous incarnation.

  Sean.

Sean Doran writes:

Since March of 1995, Sprint has had contractual language
with respect to our PA address delegations that make them
explicitly non-portable, and not to be used in any other
provider's network.

In order to enforce that contract, we have installed
inbound prefix filters to ignore all subnets of our PA
CIDR blocks that are announced by our peers at exchange
points.

This can be accomplished in many ways without preventing fallback
through another provider if one of Sprint's paying customers goes
down.

The simple solutions are, in order,

-- make sure you have redundant connectivity to SL
   so that you do not lose connectivity to Sprintlink
   (admittedly we have not done a very good job
          making this option attractive price-wise,
   unlike a pair of our competitors, however we
   are working on that, and hopefully this option
   will be attractive _notwithstanding_ our non-portability
   policy)

So they should buy two SL connections just so if one goes down they
still have connectivity? If most multihomed customers were to the
same network, I would think that this idea was ok. From my
experience, however, most multihomed customers have their second
connection to a different network. Hopefully this will change but it
is reality for now.

-- work out mutual back-up transit with another
   dual-homed SL customer

This is difficult for some to do - particularly when they might be competing
with the other customers that might offer this type of backup transit.

-- offer yourself up as a PIARA-style volunteer

Most folks want better reliability when multihoming and would not go
for this idea at this time. Most do not want to volunteer for anything
but rather have things just work.

I would suggest that, far from indicating brain-damage
at Sprint, our addressing and aggregating policies are
rather clever.

One good thing they do is that once people become aware of them, they
make people think about multihoming. Multihoming is more difficult
that it appears on the surface and most people enter into it rather
lightly.

-Hank