RE: Why does Sprint have address filters again?

Suggestion:

The initial ASN should be bundled with a /19 to create a "multi-home"
package. Unbundled ASNs whould be unreasonably high to cover the
administration of the initial ASNs of the world, and the cost associated
with a /19.

In reality it seems you need both, a /19 to make it past the route filters,
and an ASN. This also save on the ARIN support side, since the ARIN
employee tasked with making the call to verify the customer does in fact
have 2 T-1s (or has 2 ISPs vouch he will have at least a T1 with each), can
also verify they will accept the routes for the ASN.

Seems like this would cut the administraion on ARIN's behalf a bit, and make
it "more fair" to the smaller networks looking to multi-home (See Karl's
proposal on IP allocation).

-jamie@networked.org

This does make sense - a lot of sense.

This does make sense - a lot of sense.

Karl Denninger (karl@MCS.Net)| MCSNet - Serving Chicagoland and Wisconsin

Suggestion:

The initial ASN should be bundled with a /19 to create a "multi-home"
package. Unbundled ASNs whould be unreasonably high to cover the
administration of the initial ASNs of the world, and the cost associated
with a /19.

In reality it seems you need both, a /19 to make it past the route filters,
and an ASN. This also save on the ARIN support side, since the ARIN
employee tasked with making the call to verify the customer does in fact
have 2 T-1s (or has 2 ISPs vouch he will have at least a T1 with each), can
also verify they will accept the routes for the ASN.

Seems like this would cut the administraion on ARIN's behalf a bit, and

make

it "more fair" to the smaller networks looking to multi-home (See Karl's
proposal on IP allocation).

-jamie@networked.org

No, it does not make a lot of sense. In fact, IMHO, this is a very, *very*
bad idea.

Remember what we are trying to conserve here - not just ASNs, but IP Space
too. Making unbundled ASNs "unreasonably high" would kill all the people
who are being good little businesses and conserving IP space.

For instance, what do you say to the large corporation who wants the
redundancy of two connections, but uses NAT or DHCP so they only need a /23
or /22? And what do you say to the web farm that uses HTTP 1.1 to
conserver IP space but who's customers demand redundancy or low latency to
several networks?

There are many, many more instance of perfectly legitimate uses for an ASN
with less than a /19. As for the "filtering" issue, well, Sean and I have
had words over that before. The large majority of my customers multi-home,
and less than a third of those have (or need) their own /19. They are
aware than they'll only get Sprint & AGIS traffic from my network (because
I announce the whole CIDR), and that if my T1 drops the packet will go from
Sprint to Priori to their other upstream in a round-a-bout fashion. But
they generally feel this is an acceptable penalty to pay for the
conservation of IP space.

Are you suggesting that we penalize these people even more for doing the
"right thing"? The could drop all those conservation tactics and say they
"need" a /19, thereby depleting the v4 space that much sooner - which I'm
sure they'd do if you made the price "unreasonably high".

On the flip side, charging more (a lot more) for 2nd, 3rd, etc. ASNs sounds
fine to me. Admittedly, I have not thought the whole thing through since
neither I nor any of my downstreams use multiple ASNs, so I might be
missing something. Feel free to correct me.

It just seems to me that multiple ASNs *might* be necessary in some
instances - like when multiple countries are covered under one network.
But in the overwhelming majority of cases, it seems that things like BGP
confederations could be used internally for anything that required multiple
ASNs, while letting the rest of the 'Net see just one ASN. Sprint, for
instance, has many, many ASNs. Considering their (Draconian? :wink: policy of
conservation wrt IP space, why do they suddenly need dozens of ASNs?

For the record, I do not think the $500 one-time fee is completely
ridiculous. It might be lowered, but it's not nearly as outrageous as some
people are suggesting - IMHO. And I really don't see how $30/year can be
considered usury by anyone. Unless you would rather bill people on a "per
query" basis or something? Say $0.01 per "whois"? Or something equally
silly and ridiculously difficult to collect, bill, deal with delinquencies,
etc., etc.

Now the schedule of $5,000 per year just to have a block of space which is
capable of passing those filters we talked about.... Well, let's just say
that I'm not completely satisfied this is as reasonable. Especially
considering it is an annually recurring charge, unlike the $500 ASN fee.

TTFN,
patrick

Uh, hold on a second....

I didn't say to make the first ASN "unreasonably" expensive (and I do
believe $500 is unreasonable).

However, with a REASONABLE first ASN fee (ie: $50 or thereabouts) bundling
THAT with a /19 when you get your first PI allocation is even more
reasonable.

After all, the justification for the IP space encompasses that for the ASN,
so the work has already been done, and the additional effort at that point
should be literally a few keystrokes.

My proposals to fix the issue with regards to getting a /19 if you're
multihomed are also out there; has NANOG seen them?

Guys,
I hate to bring business issues up in a technical forum, but y'all started it.

There is a definite business case for portable /21's. First off, I
understand the technical need to limit ASN's to /19's so I don't need
lecture #101. However, those limits were set quite some time ago. When can
we reduce them? Has technology stood still?

The need is for service ISP's, as opposed to Internet Access Providers. We
need portability too.

Guys,
I hate to bring business issues up in a technical forum, but y'all started it.

There is a definite business case for portable /21's. First off, I
understand the technical need to limit ASN's to /19's so I don't need
lecture #101. However, those limits were set quite some time ago. When can
we reduce them? Has technology stood still?

No, it has not.

The need is for service ISP's, as opposed to Internet Access Providers. We
need portability too.

Tell me about it.

The whole /19 thing started as a bad idea, and has propagated because other
people picked up on it and said "yeah, ok" and then formulated policy around
it - instead of whacking the first person with a wet noodle.

There are some providers out there who think that there's no reason they
should have to spend money on RAM and CPU in their core routers. There's
a curious correlation between those folks, and the ones with the largest
number of route announcements too. :slight_smile:

Uh, hold on a second....

I didn't say to make the first ASN "unreasonably" expensive (and I do
believe $500 is unreasonable).

No, you just said "This does make sense - a lot of sense." when Jamie
Scheinblum suggested that "unbundled" ASNs be made unreasonably high.

However, with a REASONABLE first ASN fee (ie: $50 or thereabouts) bundling
THAT with a /19 when you get your first PI allocation is even more
reasonable.

While I agree that $500 *might* be too high, I honestly do not think
something on the order of $200 or $250 would be too high, especially as a
"one time" fee with the $30 recurring charge.

After all, the justification for the IP space encompasses that for the ASN,
so the work has already been done, and the additional effort at that point
should be literally a few keystrokes.

Good point.

My proposals to fix the issue with regards to getting a /19 if you're
multihomed are also out there; has NANOG seen them?

I have not. But I haven't been following this as closely as I probably
should have.

Karl Denninger (karl@MCS.Net)| MCSNet - Serving Chicagoland and Wisconsin

TTFN,
patrick

There is a definite business case for portable /21's. First off, I
understand the technical need to limit ASN's to /19's so I don't need
lecture #101. However, those limits were set quite some time ago. When can
we reduce them? Has technology stood still?

You understand "the technical need to limit ASN's to /19's"? I don't,
perhaps you could explain it to me. I have a whole bunch of multi-homed
downstreams who have /21s or /20s - with their own ASNs. Should we just
give them more space? Or are they "not allowed" to multi-home? What am I
missing?

Roeland M.J. Meyer, ISOC (InterNIC RM993)

TTFN,
patrick

There is a definite business case for portable /21's. First off, I
understand the technical need to limit ASN's to /19's so I don't need
lecture #101. However, those limits were set quite some time ago. When can
we reduce them? Has technology stood still?

You understand "the technical need to limit ASN's to /19's"? I don't,
perhaps you could explain it to me.

I agreed to the stipulation, in advance so I wouldn't get lecture #101, yet
again. The issue here is that ASN's get around prefix filtering, to my
understanding. If everyone had an ASN then we'd be right back to they
problem that started prefix filtering in the first place, ever growing, and
humongous, router tables. Legacy routers have problems with this.

Damn! Now you gotten *me* to send lecture #101, sheesh! |;-)

I have a whole bunch of multi-homed
downstreams who have /21s or /20s - with their own ASNs. Should we just
give them more space? Or are they "not allowed" to multi-home? What am I
missing?

Read the current ARIN pages. Unless I read them wrong, an ASN now requires
a /19 to go with it. Anything less will not be approved. Existing /20's and
/21's are under legacy grand-fathering.

I agreed to the stipulation, in advance so I wouldn't get lecture #101, yet
again. The issue here is that ASN's get around prefix filtering, to my
understanding. If everyone had an ASN then we'd be right back to they
problem that started prefix filtering in the first place, ever growing, and
humongous, router tables. Legacy routers have problems with this.

*sigh* I will never understand this. I have ... 'conversed' with Sean and
others at length about this. Unfortunately, I wasn't running a router with
a full table at the time, so I just don't get it. Sprint claims to have
this policy for the "good of the Internet". I find this part particularly
interesting:

<Quote from Sprint Portal;

In support of slowing the growth rate of route advertisement within the
Internet, SprintLink filters prefixes from non-customer BGP neighbors
longer than 19 bits in the 206.0.0.0/8 and 207.0.0.0/8 block to the end of
the current range of class C addresses.

</Quote>

I am really puzzled about this. Based upon the evidence Sean Doran
presented on another list, I did not see any effect on the table from 112.
Specifically, looking at http://www.telstra.net/ops/bgptable.html (part of
said evidence), I see faster growth post-112 than pre-112. This increase
is immediately apparent after 112's inception, so it's not a "long term"
problem. I am pretty sure this is not a direct result of 112, but I think
it shows that 112 did not have its intended effect. So, I guess things
were going on of which I am completely unaware, and which do not show up on
the graph.

As I said, my problem is I just do not see the problems everyone is
complaining about in the data. Perhaps others who presumably know more
about this than I please comment?

There are a couple things I am sure of. I am sure Sprint has fewer routes
in their table than other backbones because of 112. One could argue that
this gives Sprint less, or at least less optimal, connectivity than other
large backbones. Add the fact that Sprint has not been significantly more
stable than other backbones (there have been accounts on this list of the
opposite in fact, but I am not a Sprint customer, so I have no first hand
knowledge). One is left wondering why one should use Sprint for transit at
all?

One could also argue that 112 has helped shape the allocation policies of
ARIN and other registries, and one would probably be correct. I personally
feel using one company, even one as large as Sprint, to define global
allocations policies is a Bad Thing. Of course, there's nothing I can do
about it anymore. That is a completely separate topic anyway.

It has been proposed that Sprint's peers filter Sprint with a 112-link
filter, but use their default filters on all other peer/transit
connections. I would like to see what Sprint's peers have to say about the
possibility of filtering Sprint announcements - and Sprint alone - the same
way Sprint filters their peers. Sean Donelan at DRA claims he does this,
does anyone else? Customers and non-peers are also invited to comment.

I personally think this would be an outstanding idea, but I have not looked
at all the things it would break. Of course, if one is to believe Sprint,
it should break nothing. Or at least nothing that shouldn't be fixed. :wink:

This is especially relevant considering Sean's comments in September of
1995 (while working for Sprint) on this list. Specifically: "...at some
point we certainly will begin stopping the announcement of this type of
long prefix [longer than /19] to our external peers...". It's been almost
3 years, one is left to believe that Sprint will never actually do this.
To his credit, Sean also publicly encouraged all Sprint's peers to filter
Sprint. So at least we know Sean believes in filtering 100%. But does
Sprint? Or will the hypocrisy continue?

Roeland M.J. Meyer, ISOC (InterNIC RM993)

TTFN,
patrick