Vadim,
Yakov, that was not nice.
If you look at the "opposition" side you'll see quite a lot of people who had to run real backbones; and who have a feeling of impact featurism has on reliability of code. For what it worth, nothing makes you appreciate simplicity and quality as getting dragged out of bed in the middle of the night to fix backbone falling down in flames because of yet anothing interesting glitch caused by the flaky but feature-rich software.
My position was always consistent - if you can do something (like VPN) at the edge boxes w/o inroducing complexity into core transport, this is the way to do that.
Then to be consistent with your own position, you certainly should agree that 2547 is "the way to do" VPNs, as with 2547 all the VPN-related information is confined to the PEs (where "PE" stands for provider *edge*), and none of the P (core) routers maintain any VPN-related information. Yakov.