Re: [sidr] sidr-arch-09 refresh cycle time

[Randy Bush <randy at psg.com>]

Robert Kisteleki wrote:
> Randy Bush wrote:
>>> That is only true if the thing you're propagating has to travel hop by
>>> hop to the bottom of the hierarchy. So the question still stands: what
>>> is this "thing" that you think propagates slowly, and why does it have
>>> to propagate hop by hop?
>>
>> incorrect or missing cert high in chain which needs delegation fix down
>> the chain so end site can get a fixed roa out there.  remember, my
>> routing depends on that roa.  and arin has extreme cases of depth,
>> though i think we will find itu-rir-<three or four> to be the more
>> common cases.
>>
>> it's max time to repair which worries me.
>>
>> randy
> 
> I understand this concern, but how likely is it that there is an
> "incorrect or missing cert high in chain" which needs fixing within one
> cycle?
> 
> In the case of missing resources, it's very unlikely that someone deep
> down in the chain suddenly realises "oh, I need more resource from my
> grand-grand-grandparent NOW!". In the case of overclaiming, it's enough
> if any one in the chain shrinks their resources, the effect is visible
> in one cycle.

think someone high in chain issues cert no longer covering youtube.

randy