run policies which change attributes after saving dropped paths

This commit is contained in:
Randy Bush 2021-11-16 11:56:47 -08:00
parent e1efd367c8
commit c7e5e95cb7

View file

@ -11,7 +11,7 @@
<?rfc subcompact="no"?> <?rfc subcompact="no"?>
<rfc category="std" consensus="true" <rfc category="std" consensus="true"
docName="draft-ymbk-sidrops-rov-no-rr-02" docName="draft-ymbk-sidrops-rov-no-rr-03"
ipr="trust200902" updates="8481"> ipr="trust200902" updates="8481">
<front> <front>
@ -142,7 +142,7 @@
<section anchor="experience" title="ROV Experience"> <section anchor="experience" title="ROV Experience">
<t> <t>
As Route Origin Validation dropping Invalids has depoyed, some As Route Origin Validation dropping Invalids has deployed, some
router implementations have been found which, when receiving new router implementations have been found which, when receiving new
RPKI data (VRPs, see <xref target="I-D.ietf-sidrops-8210bis"/>) RPKI data (VRPs, see <xref target="I-D.ietf-sidrops-8210bis"/>)
issue a BGP Route Refresh <xref target="RFC7313"/> to all sending issue a BGP Route Refresh <xref target="RFC7313"/> to all sending
@ -182,6 +182,13 @@
VRPs can reevaluate them against then current policy. VRPs can reevaluate them against then current policy.
</t> </t>
<t>
Policy which may drop paths due to RPKI-based checks such as ROV,
ASPA, BGPsec, etc. MUST be run, and the dropped paths saved per
the above paragraph, before non-RPKI policies are run, as the
latter may change path attributes.
</t>
<t> <t>
As storing these paths could cause problems in resource As storing these paths could cause problems in resource
constrained devices, there MUST be a knob allowing operator constrained devices, there MUST be a knob allowing operator
@ -256,7 +263,8 @@
<section anchor="acks" title="Acknowledgements"> <section anchor="acks" title="Acknowledgements">
<t> <t>
The authors wish to thank Ben Maddison and Nick Hilliard. The authors wish to thank Ben Maddison, John Heasley, and Nick
Hilliard.
</t> </t>
</section> </section>