Re: [bess] draft-mohanty-bess-evpn-bum-opt-00 - clarification on problem description

John E Drake <jdrake@juniper.net> Thu, 22 March 2018 18:52 UTC

Return-Path: <jdrake@juniper.net>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24458126DC2 for <bess@ietfa.amsl.com>; Thu, 22 Mar 2018 11:52:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.712
X-Spam-Level:
X-Spam-Status: No, score=-0.712 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RQUZzyyhD6Yn for <bess@ietfa.amsl.com>; Thu, 22 Mar 2018 11:52:31 -0700 (PDT)
Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BA95F1242EA for <bess@ietf.org>; Thu, 22 Mar 2018 11:52:31 -0700 (PDT)
Received: from pps.filterd (m0108156.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w2MInDHe012983; Thu, 22 Mar 2018 11:52:27 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=GH7dGlfD+lnbVOVm8r0iZ+jduA2Ee+TEQgRbkUAGFAE=; b=gNhJaCqU5s6036YsGojS0HokeXcs6T98v9Lm/Co36L9g1Dj15wgytbGjv9sHGP7+MuGS Kz/gvtfP/fcuXpasllocsfggKeQAaCFOgDROqSAoqBRZnmsy1bqvbYHSmKv4MUK6z2Ci HT/bmXdp+tvA5vRqxi7bIZ2alRGKSLkrJrKquhAIP9RPXyWKe1BlzEeNxtPcu5V6OBKX xNykcQLfsiTAocpXoVjkYYHeCnoIrV6acqjL67nARBJWyks245+WUvqhb32ouTNINURh oPYJxiSHXR0qqBzvbzTGRqqLsJzc2UGpFZ2sA9G+HOwmXflOGJ5s3i29dP3uLIQBy7HO bg==
Received: from nam02-bl2-obe.outbound.protection.outlook.com (mail-bl2nam02lp0081.outbound.protection.outlook.com [207.46.163.81]) by mx0a-00273201.pphosted.com with ESMTP id 2gvh5pr4yv-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 22 Mar 2018 11:52:22 -0700
Received: from DM5PR0501MB3831.namprd05.prod.outlook.com (10.167.108.17) by DM5PR0501MB3864.namprd05.prod.outlook.com (10.167.108.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.631.5; Thu, 22 Mar 2018 18:52:19 +0000
Received: from DM5PR0501MB3831.namprd05.prod.outlook.com ([fe80::8dd1:3952:a1c5:3265]) by DM5PR0501MB3831.namprd05.prod.outlook.com ([fe80::8dd1:3952:a1c5:3265%2]) with mapi id 15.20.0609.012; Thu, 22 Mar 2018 18:51:59 +0000
From: John E Drake <jdrake@juniper.net>
To: Sandy Breeze <sandy.breeze@eu.clara.net>, "Rabadan, Jorge (Nokia - US/Mountain View)" <jorge.rabadan@nokia.com>, Eric Rosen <erosen@juniper.net>, "bess@ietf.org" <bess@ietf.org>
Thread-Topic: [bess] draft-mohanty-bess-evpn-bum-opt-00 - clarification on problem description
Thread-Index: AQHTwTLSpKI1nWgbp0ukIa0wdFUT3aPcSQuAgAAhzID///ZuMIAAJpKAgAAP3mA=
Date: Thu, 22 Mar 2018 18:51:59 +0000
Message-ID: <DM5PR0501MB38318F278E5ED98B77BF8B56C7A90@DM5PR0501MB3831.namprd05.prod.outlook.com>
References: <53C24F41-B86F-4FE1-8041-721C95C7E7F0@nokia.com> <b4272e23-0b57-bc23-0840-4a4eb0991966@juniper.net> <373D0F59-2947-4370-9BDC-081E03867B2E@nokia.com> <DM5PR0501MB3831F71679F22C4004B00D9BC7A90@DM5PR0501MB3831.namprd05.prod.outlook.com> <D9C29188-9085-4810-9649-9F05CF665C82@eu.clara.net>
In-Reply-To: <D9C29188-9085-4810-9649-9F05CF665C82@eu.clara.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [66.129.241.11]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM5PR0501MB3864; 7:VtGsP5356PX6DYUf4grIK9eguAuHXlyEryqpqUDBHYqjhGbMqYMukN204nPRtUpJI7IvyF12dyiMkLmWMYjqvT4EmmxoicUb/fNGeCaQd50Cuhc5/Mrr/b1nfBg6l20rmjLliIABkhF8Maprw8HPJfUUDzZC+U9drorw4c1s0jMn25cTxNDpWfZlHeO5W6/ZU7TC435s53iPmDrbw115upqgl0oGIdBD3RUKuLxR3NM9e3UwTuEZhK1W+l4P0EnT
x-ms-exchange-antispam-srfa-diagnostics: SOS;SOR;
x-forefront-antispam-report: SFV:SKI; SCL:-1; SFV:NSPM; SFS:(10019020)(396003)(346002)(39380400002)(39860400002)(366004)(376002)(189003)(199004)(186003)(66066001)(9326002)(790700001)(2906002)(6116002)(3846002)(86362001)(93886005)(7736002)(81166006)(81156014)(8676002)(74316002)(478600001)(3280700002)(53546011)(11346002)(110136005)(3660700001)(5660300001)(6506007)(26005)(59450400001)(8936002)(316002)(446003)(25786009)(53936002)(99286004)(8656006)(9686003)(102836004)(55016002)(7696005)(236005)(6306002)(54896002)(229853002)(97736004)(5250100002)(6436002)(6246003)(106356001)(76176011)(5890100001)(2501003)(105586002)(1941001)(68736007)(33656002)(606006)(14454004)(2900100001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR0501MB3864; H:DM5PR0501MB3831.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 9324dc17-0bf0-4f98-9063-08d59025fe16
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:DM5PR0501MB3864;
x-ms-traffictypediagnostic: DM5PR0501MB3864:
x-microsoft-antispam-prvs: <DM5PR0501MB3864551F1093C5F34F7EB23BC7A90@DM5PR0501MB3864.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(28532068793085)(10436049006162)(138986009662008)(82608151540597)(100405760836317)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3002001)(3231221)(944501327)(52105095)(6055026)(6041310)(20161123558120)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(6072148)(201708071742011); SRVR:DM5PR0501MB3864; BCL:0; PCL:0; RULEID:; SRVR:DM5PR0501MB3864;
x-forefront-prvs: 0619D53754
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-microsoft-antispam-message-info: cc1CvXh1NDUu1JpF8mP81mN8z+DeEjnSZeiHrUGPZIIIkAIJSD8AAEkBB/Yorr/4APn5mTZnBAzZ3K22rL4EQMtKe8qqb7QWNTYD0ZrLP8iwoiQeTfOHHF6PiNxRKziSvtOz0ZV6wjl9fY7Qf1c+gy9/gpHaOnXmGTA9d2dNc4+88LwEeAR0fnuHWaHqPqkZ3npJWZoep1upH9j8pE8XAUlWnbUptd4pYN78Tmh44AqEchD6a5nUZWWL7TMqWD6pYQkbQXRtYUpj2L+XB4d0zQCte+kpqVy8F1OO/C7kBuyJL4OqOm7mUSoV2Dn4GKVEbUnEp/0kaaUR9dCHSDOoyg==
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_DM5PR0501MB38318F278E5ED98B77BF8B56C7A90DM5PR0501MB3831_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 9324dc17-0bf0-4f98-9063-08d59025fe16
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Mar 2018 18:51:59.3033 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR0501MB3864
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-22_09:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803220214
Archived-At: <https://mailarchive.ietf.org/arch/msg/bess/5YXJBObD3kX6aNqBqwmoTmF59u4>
Subject: Re: [bess] draft-mohanty-bess-evpn-bum-opt-00 - clarification on problem description
X-BeenThere: bess@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bess>, <mailto:bess-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess/>
List-Post: <mailto:bess@ietf.org>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bess>, <mailto:bess-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 22 Mar 2018 18:52:35 -0000

Hi,

Comments inline

Yours Irrespectively,

John

From: Sandy Breeze <sandy.breeze@eu.clara.net>
Sent: Thursday, March 22, 2018 1:42 PM
To: John E Drake <jdrake@juniper.net>; Rabadan, Jorge (Nokia - US/Mountain View) <jorge.rabadan@nokia.com>; Eric Rosen <erosen@juniper.net>; bess@ietf.org
Subject: Re: [bess] draft-mohanty-bess-evpn-bum-opt-00 - clarification on problem description

Hi John,

On 22/03/2018, 15:50, "John E Drake" <jdrake@juniper.net<mailto:jdrake@juniper.net>> wrote:

Hi,

Wouldn’t it be better to have this draft define a bit in the Multicast Flags extended community (https://tools.ietf.org/html/draft-ietf-bess-evpn-igmp-mld-proxy-01<https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_draft-2Dietf-2Dbess-2Devpn-2Digmp-2Dmld-2Dproxy-2D01&d=DwMGaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=CRB2tJiQePk0cT-h5LGhEWH-s_xXXup3HzvBSMRj5VE&m=1qUG2zcOnBYVgqYAruIyYwYTWI_ccvWmgqpVaj6nw_g&s=VPDaymo2gpPzYJstfpbXMMhH21sHQWFlZM5dWELsiPY&e=>) indicating that that the originating PE is neither DF nor backup DF for this broadcast domain on any ES to which it is attached?  This allows us to always advertise the IMET route and makes the situation explicit.  I think the consensus is that this situation is rare so the number of IMET route updates shouldn’t be excessive and we could also say that this bit is only set by EVPN DC GWs.

[Sandy] We’d considered alternative methods other than withdraw, such as extended community or something specific in PMSI Tunnel Attribute.  Withdraw/don’t advertise RT3 approach was chosen for the following reasons;
-        Requires no change to protocol
-        Is computationally easier on all participating PE’s, to deal with a simple withdraw than to look for something in an update.  For instance, on transition from BDF to NDF for example


[JD]  I think what Eric and I are saying is that this is a bad idea.  As an example, it breaks IGMP Proxy because we no longer no whether all of the PEs attached to a given ES support it which effectively disables IGMP Proxy on that ES.  It would also break OISM because, again, we would no longer know the capabilities of the PEs attached to that ES.


[Sandy] You mention only applicable to EVPN DC GWs.  In my world this is a converged EVPN PE router.  How would you declare an EVPN DC GW and treat it differently from an EVPN PE?


[JD]  The normal case is that a PE is attached to a multiplicity of ESEs


As an aside, I think Ali’s suggestion of using local configuration to set the ESI to zero in the HRW is fine.

However, given the you are using local configuration to do this, why isn’t preference-based DF election (https://tools.ietf.org/html/draft-ietf-bess-evpn-pref-df-00<https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_draft-2Dietf-2Dbess-2Devpn-2Dpref-2Ddf-2D00&d=DwMGaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=CRB2tJiQePk0cT-h5LGhEWH-s_xXXup3HzvBSMRj5VE&m=1qUG2zcOnBYVgqYAruIyYwYTWI_ccvWmgqpVaj6nw_g&s=26lcqkrOqqDHo5faivKsv2-uJQ_3Qbe17Zmkolbiht8&e=>) a better solution?  I.e., we should have specific DF election type for a specific set of situations rather than trying to parameterize the HRW DF election to handle a multiplicity of situations.
[Sandy] I don’t think in my specific case, I’m reliant on setting ESI to zero to since I am only 1 ES per BD.


[JD]  I don’t think this is consistent w/ the DCI interconnect draft and I don’t see any reason for doing this.  I.e., there is supposed to be any interconnect ESI for the DC as a whole..

In the more general case however, as Satya mentions in an earlier thread, this may be desirable to set ESI to 0 for optimal NDF position where all BD’s share the same ES and there are many ES’s.


[JD]  I have heard this assertion from both you and Satya.  Do you have any evidence to support it?


[Sandy] As with any existing DF type I know of, preference DF is fine as a selection mechanism, but it doesn’t stop NDF’s attracting traffic unnecessarily which is what I’m trying to achieve here.


[JD]  That is why I am suggesting the bit in the Multicast Flags extended community.


Regards
Sandy



Yours Irrespectively,

John

From: BESS <bess-bounces@ietf.org<mailto:bess-bounces@ietf.org>> On Behalf Of Rabadan, Jorge (Nokia - US/Mountain View)
Sent: Thursday, March 22, 2018 10:58 AM
To: Eric Rosen <erosen@juniper.net<mailto:erosen@juniper.net>>; Sandy Breeze <sandy.breeze@eu.clara.net<mailto:sandy.breeze@eu.clara.net>>; bess@ietf.org<mailto:bess@ietf.org>
Subject: Re: [bess] draft-mohanty-bess-evpn-bum-opt-00 - clarification on problem description

Eric,

The way the draft is described makes me think there are no IRB interfaces and this is limited to Ingress Replication. But should be clarified.

Also my interpretation of RFC7432 is that IMET routes are mandatory to enable the handling of multi-destination traffic in a BD. But in a non-DF PE for a given ES and with no other ACs in the BD, assuming Ingress Replication, there is no such multi-destination traffic (Tx or Rx). So one could interpret that RFC7432 is ok with withdrawing the IMET route in that case.

Assuming the above, my reasoning is that advertising/withdrawing an IMET route does not change any procedures or modifies any routes.

Other than that, I fully agree with you this is a corner case scenario. And if this goes one, it must explain clearly what the use-case is.

Thank you.
Jorge

From: Eric C Rosen <erosen@juniper.net<mailto:erosen@juniper.net>>
Date: Thursday, March 22, 2018 at 1:57 PM
To: "Rabadan, Jorge (Nokia - US/Mountain View)" <jorge.rabadan@nokia.com<mailto:jorge.rabadan@nokia.com>>, Sandy Breeze <sandy.breeze@eu.clara.net<mailto:sandy.breeze@eu.clara.net>>, "bess@ietf.org<mailto:bess@ietf.org>" <bess@ietf.org<mailto:bess@ietf.org>>
Subject: Re: [bess] draft-mohanty-bess-evpn-bum-opt-00 - clarification on problem description

On 3/21/2018 12:36 PM, Rabadan, Jorge (Nokia - US/Mountain View) wrote:
This scenario definitively helps understand the use-case better. Still a bit specific but I think you should add this scenario to the draft, and again, make it Informational since there is no control plane change for this.

If I understand correctly, the draft does make a control plane change, since it describes situations in which IMET routes should not be originated.  This contradicts RFC 7432, and so would have to be considered a update to that, and hence a standards track document.

Since I wasn't at the BESS meeting (but did watch the video), it's possible I missed some of the discussion, but from my reading of the draft, I have the following concerns.

I'm not sure the draft properly describes the situations in which one may omit the IMET route.  It describes the situation in which a PE doesn't need to propagate, on any of its ACs, BUM traffic that it receives from the backbone.  However, if the PE has IRB interfaces, doesn't it need to receive some of the BUM traffic in order to process that traffic itself?  For example, if a PE is configured to be  a PIM router attached to two Broadcast Domains, BD1 and BD2, won't it need to receive PIM Hellos from BD1, even if it doesn't actually propagate those out the local AC attaching it to BD1?

At the meeting a DF election scheme was proposed in which, for a given <ES,BD> pair, there could be a different DF for each(S,G)  multicast flow.  I don't think the draft takes this into account.  I wonder how many other scenarios there are which the draft fails to consider.

Many EVPN drafts have been written on the presumption that IMET routes will always be originated.  Some of the drafts add flags or communities to the IMET routes to advertise capabilities of one sort or another.  Every one of those drafts would need to be checked to see if it still works when some nodes do not originate IMET routes.

As future EVPN drafts are written, the authors (and reviewers) will now have to remember that they cannot presume that all the PEs attached to a given BD are originating IMET routes for that BD.   This creates more complexity, more corner cases, and ultimately, more specification bugs.

Still, one might consider adopting this complication if it were a big win.  But it only seems to apply to one specific (and not very common) scenario, and from the discussion at the microphone it wasn't clear to me that the co-authors are even on the same page about just what that scenario is (recall the discussion about whether the diagram in the draft does or does not depict the intended use case).