The MPLS WG Archive

[Peter Willis <pjw@ip-engineering.bt.com>]

> Both of these would only occur (as far as I can tell) if the router
> software is buggy.  As I have stated before I don't really see the
> benefit of adding code to fix buggy code.

If the LSR software was sufficiently simple that it could be proved to be correct,
I guess we're all aware of formal software validation and testing methods, then the
value of adding more software to monitor for "bugs" could be questioned. I guess,
and the vendors will no doubt shout if I'm wrong, that they have NOT formally validated their software.

Safety Critical Systems use the practice of "watchdog" code to check for abnormal conditions and limit the damage caused by the abnormal conditions. Safety
Critical Systems should also handle "rare" conditions.

I guess that no one is planing to use MPLS networks to support safety critical systems so we have no need to worry about having "watchdog" code to detect abnormal conditions and limit the hazard they may cause. 

By the way the car I drive has a low brake fluid detector but no bulb on the dashboard
to display when its detected low brake fluid. At least I don't have to worry about
checking the low brake fluid bulb is working (its a British sports car!) and I don't get stopped by false alerts from the low brake fluid detector, besides I know when the brake fluid is low when the brakes stop working.

Peter.