10. You cannot match real data plane path in SAV rules unless you encode actual data path info into the packet. Sometimes the same prefix can be used as legitimate SA at two different ASes that are in different paths within the CC. From Sriram [after ietf 114] #10
Response: Existing SAV mechanisms sometimes have improper block and improper permit problems due to the mismatch of real data plane path and the control plane path. The draft points out the inaccuracy SAV gap and takes accurate SAV as one of the requirements for future technical improvements. It is indeed a challenging task to completely learn the real data plane path all the time. But, it is still meaningful if new mechanisms take some actions for discovering more real data paths and result in less improper block and improper permit problems. The solution to the problem needs full discussions, which is the next step of the WG.
Response: Existing SAV mechanisms sometimes have improper block and improper permit problems due to the mismatch of real data plane path and the control plane path. The draft points out the inaccuracy SAV gap and takes accurate SAV as one of the requirements for future technical improvements. It is indeed a challenging task to completely learn the real data plane path all the time. But, it is still meaningful if new mechanisms take some actions for discovering more real data paths and result in less improper block and improper permit problems. The solution to the problem needs full discussions, which is the next step of the WG.