Re: [Anima] ACP [was I-D Action: draft-ietf-anima-grasp-13.txt - SONN]

Michael Richardson <mcr+ietf@sandelman.ca> Sun, 11 June 2017 18:16 UTC

Return-Path: <mcr@sandelman.ca>
X-Original-To: anima@ietfa.amsl.com
Delivered-To: anima@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6E03129A97 for <anima@ietfa.amsl.com>; Sun, 11 Jun 2017 11:16:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.56
X-Spam-Level:
X-Spam-Status: No, score=-0.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_24_48=1.34, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BSFAIslXgZCd for <anima@ietfa.amsl.com>; Sun, 11 Jun 2017 11:16:15 -0700 (PDT)
Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E94C129A96 for <anima@ietf.org>; Sun, 11 Jun 2017 11:16:14 -0700 (PDT)
Received: from dooku.sandelman.ca (unknown [209.87.249.16]) by relay.sandelman.ca (Postfix) with ESMTPS id EAD1A1F922 for <anima@ietf.org>; Sun, 11 Jun 2017 18:16:12 +0000 (UTC)
Received: by dooku.sandelman.ca (Postfix, from userid 179) id ADC3A227F; Sat, 10 Jun 2017 11:20:07 -0400 (EDT)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: Anima WG <anima@ietf.org>
In-reply-to: <b66b380f-6847-ec43-3d93-c11df85e3da6@gmail.com>
References: <149669625424.3230.10151704455578829166@ietfa.amsl.com> <f829bda3-d4f5-014d-8ffd-e63537171ba6@gmail.com> <20170606232417.GJ12427@faui40p.informatik.uni-erlangen.de> <41e0a6fc-9410-4d84-cae6-74dbd3fdfa74@gmail.com> <20170607205533.GD20021@faui40p.informatik.uni-erlangen.de> <7dd77b25-2319-3999-bf4a-2274eb0728a1@gmail.com> <3434.1496937571@obiwan.sandelman.ca> <cb901c29-cdf9-fdff-8e9b-1e2cc5079359@gmail.com> <21716.1497019696@obiwan.sandelman.ca> <588e1953-4db1-086b-d441-2371e352ad73@gmail.com> <B4F99EAF-46CB-4BFD-AC1D-6F5B6BE83879@tzi.org> <b66b380f-6847-ec43-3d93-c11df85e3da6@gmail.com>
Comments: In-reply-to Brian E Carpenter <brian.e.carpenter@gmail.com> message dated "Sat, 10 Jun 2017 11:33:32 +1200."
X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha1"; protocol="application/pgp-signature"
Date: Sat, 10 Jun 2017 11:20:07 -0400
Message-ID: <14942.1497108007@dooku.sandelman.ca>
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/Jt4NBowvZpe1UuqlvKmUCJJvk3c>
Subject: Re: [Anima] ACP [was I-D Action: draft-ietf-anima-grasp-13.txt - SONN]
X-BeenThere: anima@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Autonomic Networking Integrated Model and Approach <anima.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima>, <mailto:anima-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima/>
List-Post: <mailto:anima@ietf.org>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima>, <mailto:anima-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 11 Jun 2017 18:16:17 -0000

Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
    > If the VRF simply emulates multicast sending, that is a trvial
    > stateless process, and the GRASP state goes like N(interfaces).

Again, the ACP VRF is a set of PPP links over IPsec tunnels.
It will show up as interfaces with seperate ifindex.
(Replacing IPsec with another IP-level security mechanism won't change this)

A long time ago, I asked carefully if it was intended that GRASP to be
providing application layer multicast (vs supporting multicast across the ACP
via PIM or MPL), and the response I got was that GRASP would do it.

And GRASP do it the right thing now, so I'm really lost as to what the
concern is.

Putting on my ISP architect hat:

In a realistic ISP situations, the occurances of having more than
one or two ACP peers on a single physical link is pretty rare.
The exception would be at access networks that look like ethernet. (Cable,
FTTH, GPONs).

xDSL networks tend to use PPPoE, so have a seperate interface per CPE device.
b2b ISPs that use GPON tend to split off the customer traffic into seperate
VLANs, although both they and Cable networks usually put the GPON
terminals/Cable_modem management into a VLAN seperate from the customer
traffic.   At this point, these networks are using TR-069 for management
with a transition from SOAP to NETCONF apparently on the way.

So for initial deployment of ACP, I expect not to see more than 3-4 devices
per link.  The interface between the access devices and the core devices may
initially have a higher fan-out, until one looks at the actual wires, and
realizes that the layer-2 switching hardware in between ought to be involved
in the ACP, and then the ACP devolves to point to point ethernet cables.

Whether Metro-Ethernet rings will be presented to the ACP as a single link
with many nodes (ignoring all the layer-2 topology), or whether the layer-2
topology will be revealed will, I think be a question of evolution.

--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-