[bess] Re: A question about duplicate MAC detection in Section 15.1 of draft-ietf-bess-rfc7432bis

Alexander Vainshtein <Alexander.Vainshtein@rbbn.com> Sun, 02 February 2025 07:25 UTC

Return-Path: <alexander.vainshtein@rbbn.com>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44CD5C14F6B7 for <bess@ietfa.amsl.com>; Sat, 1 Feb 2025 23:25:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.103
X-Spam-Level:
X-Spam-Status: No, score=-2.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rbbn.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gqjb7xns7raX for <bess@ietfa.amsl.com>; Sat, 1 Feb 2025 23:25:40 -0800 (PST)
Received: from usb-smtp-delivery-110.mimecast.com (usb-smtp-delivery-110.mimecast.com [170.10.153.110]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 023CEC151095 for <bess@ietf.org>; Sat, 1 Feb 2025 23:25:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rbbn.com; s=mimecast20240522; t=1738481139; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=v7X4akX9DNI+i6l7vJGRQPvFpI0aMrwhtr/Tuo9vNpY=; b=cyyqLerxt1TttzRACwxXGQAOz56Wbr1xBjfuLwaKy/zsNQ+MXQ+cm56A2adrdMbTIxzR5C Z7U3w0CkoYLcRlNoXfvt/5TPr8ewmM7mCc/nXtyZqOFX8KDT6pR4GWCgIBkbl5m74HLEo7 mxS+4kM0bucPEODmJGJ3vuMx8sJn9aw6MYokHhmfBtLTuVjD4E9n+pmbze0hd21XJ8gkB/ xaGPM+HZohxYzhy87lyqKdAZSuIRT1DUi6QftlAt1u9ITM+BHyHNxGu7g5IJq3DU7l0iz/ 0ysmkAx+DHTyAReCJN8bLNieXfLuIdwXwrWoz9PyTlSCmmMLE5Ipy7BKSCkhDw==
Received: from BL0PR05CU006.outbound.protection.outlook.com (mail-BL0PR05CU006.outbound1701.protection.outlook.com [40.93.2.8]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id usb-mta-26-IMAeNjykOcqAmPSlcYnvVg-1; Sat, 01 Feb 2025 23:25:26 -0800
X-MC-Unique: IMAeNjykOcqAmPSlcYnvVg-1
X-Mimecast-MFC-AGG-ID: IMAeNjykOcqAmPSlcYnvVg
Received: from PH0PR03MB6300.namprd03.prod.outlook.com (2603:10b6:510:e2::5) by SJ0PR03MB5453.namprd03.prod.outlook.com (2603:10b6:a03:28e::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8398.21; Sun, 2 Feb 2025 07:25:22 +0000
Received: from PH0PR03MB6300.namprd03.prod.outlook.com ([fe80::a48b:db16:775a:4a16]) by PH0PR03MB6300.namprd03.prod.outlook.com ([fe80::a48b:db16:775a:4a16%4]) with mapi id 15.20.8398.020; Sun, 2 Feb 2025 07:25:22 +0000
From: Alexander Vainshtein <Alexander.Vainshtein@rbbn.com>
To: "Jorge Rabadan (Nokia)" <jorge.rabadan@nokia.com>
Thread-Topic: A question about duplicate MAC detection in Section 15.1 of draft-ietf-bess-rfc7432bis
Thread-Index: AdtnEcJD7S5AIiysTlS3XYKPiL95ugDRopaQAAk4FgACL12iugCCJZ+w
Date: Sun, 02 Feb 2025 07:25:22 +0000
Message-ID: <PH0PR03MB6300E0D510E78CD7C5280DB0F6EA2@PH0PR03MB6300.namprd03.prod.outlook.com>
References: <PH0PR03MB63000592782B2FDF91211A03F6192@PH0PR03MB6300.namprd03.prod.outlook.com> <PH0PR03MB6300286F5FB8763F1F1D601EF6E42@PH0PR03MB6300.namprd03.prod.outlook.com> <PH0PR03MB63002B05846BC6055E7F7BD8F6E42@PH0PR03MB6300.namprd03.prod.outlook.com> <SA1PR08MB7215418458AA0BD51B025049F7E92@SA1PR08MB7215.namprd08.prod.outlook.com>
In-Reply-To: <SA1PR08MB7215418458AA0BD51B025049F7E92@SA1PR08MB7215.namprd08.prod.outlook.com>
Accept-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH0PR03MB6300:EE_|SJ0PR03MB5453:EE_
x-ms-office365-filtering-correlation-id: 9ad0fae6-075d-418f-26ca-08dd435ac12e
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|7053199007|8096899003|38070700018
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH0PR03MB6300.namprd03.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(7053199007)(8096899003)(38070700018);DIR:OUT;SFP:1102
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
MIME-Version: 1.0
X-OriginatorOrg: rbbn.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH0PR03MB6300.namprd03.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 9ad0fae6-075d-418f-26ca-08dd435ac12e
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Feb 2025 07:25:22.3056 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 29a671dc-ed7e-4a54-b1e5-8da1eb495dc3
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: W/0SWcMHHhuI59KCWOZYMOwaFVm7/bkaBzpKLYSeD/qoWmQoNjqcGjwiRgT02hwsBDn1znBfZmZbc+oh4gtaHA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR03MB5453
X-Mimecast-Spam-Score: 0
X-Mimecast-MFC-PROC-ID: CYdQwWPnQ-mkXRr3Wjy7O35DsG1C-vU3_qW4GTtWFBc_1738481125
X-Mimecast-Originator: rbbn.com
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_PH0PR03MB6300E0D510E78CD7C5280DB0F6EA2PH0PR03MB6300namp_"
Message-ID-Hash: Y4MWG63DWMSL4MCNPKOFH5VG5RL5RKI4
X-Message-ID-Hash: Y4MWG63DWMSL4MCNPKOFH5VG5RL5RKI4
X-MailFrom: alexander.vainshtein@rbbn.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-bess.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "bess@ietf.org" <bess@ietf.org>, "Matthew Bocci (Nokia)" <matthew.bocci@nokia.com>, "draft-ietf-bess-rfc7432bis@ietf.org" <draft-ietf-bess-rfc7432bis@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [bess] Re: A question about duplicate MAC detection in Section 15.1 of draft-ietf-bess-rfc7432bis
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/bess/8Ih5jjBYLeVzWuz-hIexTe09Hng>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Owner: <mailto:bess-owner@ietf.org>
List-Post: <mailto:bess@ietf.org>
List-Subscribe: <mailto:bess-join@ietf.org>
List-Unsubscribe: <mailto:bess-leave@ietf.org>

Jorge,
Lots of thanks for an unambiguous and very encouraging response.

IMHO and FWIW it would be nice if the text in the section in question would be more explicit on that point.

Regards,
Sasha

From: Jorge Rabadan (Nokia) <jorge.rabadan@nokia.com>
Sent: Thursday, January 30, 2025 7:19 PM
To: Alexander Vainshtein <Alexander.Vainshtein@rbbn.com>; draft-ietf-bess-rfc7432bis@ietf.org
Cc: bess@ietf.org; Matthew Bocci (Nokia) <matthew.bocci@nokia.com>
Subject: [EXTERNAL] Re: A question about duplicate MAC detection in Section 15.1 of draft-ietf-bess-rfc7432bis

Hi Sasha,

That’s what the implementations I know do as well.
The section suggests that mobility events occur between local learning events and received MAC/IP Advertisement routes.

Thanks.
Jorge

From: Alexander Vainshtein <Alexander.Vainshtein@rbbn.com<mailto:Alexander.Vainshtein@rbbn.com>>
Date: Sunday, January 19, 2025 at 6:22 AM
To: draft-ietf-bess-rfc7432bis@ietf.org<mailto:draft-ietf-bess-rfc7432bis@ietf.org> <draft-ietf-bess-rfc7432bis@ietf.org<mailto:draft-ietf-bess-rfc7432bis@ietf.org>>
Cc: bess@ietf.org<mailto:bess@ietf.org> <bess@ietf.org<mailto:bess@ietf.org>>, Matthew Bocci (Nokia) <matthew.bocci@nokia.com<mailto:matthew.bocci@nokia.com>>
Subject: RE: A question about duplicate MAC detection in Section 15.1 of draft-ietf-bess-rfc7432bis

CAUTION: This is an external email. Please be very careful when clicking links or opening attachments. See the URL nok.it/ext for additional information.


Hi all,
Some corrections.
The

Regards,
Sasha

From: Alexander Vainshtein
Sent: Sunday, January 19, 2025 11:59 AM
To: draft-ietf-bess-rfc7432bis@ietf.org<mailto:draft-ietf-bess-rfc7432bis@ietf.org>
Cc: bess@ietf.org<mailto:bess@ietf.org>; Bocci, Matthew (Nokia - GB) <matthew.bocci@nokia.com<mailto:matthew.bocci@nokia.com>>
Subject: RE: A question about duplicate MAC detection in Section 15.1 of draft-ietf-bess-rfc7432bis
Importance: High

Hi,
More of the same:
My colleagues and I have identified at least one implementation in which EVPN PEs only count MAC Move events detected via local learning does not count MAC Move events between different remote PEs affecting duplicate MAC address detection.

If this is indeed the intention of Section 15.1, can you please update the text accordingly?

Regards, and lots of thanks in advance,
Sasha

From: Alexander Vainshtein
Sent: Wednesday, January 15, 2025 8:25 AM
To: draft-ietf-bess-rfc7432bis@ietf.org<mailto:draft-ietf-bess-rfc7432bis@ietf.org>
Cc: bess@ietf.org<mailto:bess@ietf.org>; Bocci, Matthew (Nokia - GB) <matthew.bocci@nokia.com<mailto:matthew.bocci@nokia.com>>
Subject: A question about duplicate MAC detection in Section 15.1 of draft-ietf-bess-rfc7432bis
Importance: High

Hi,
I have a question about the rule for detection of duplicate MAC addresses in Section 15.1 of draft-ietf-bess-rfc7432bis<https://datatracker.ietf.org/doc/html/draft-ietf-bess-rfc7432bis-10#section-15.1>.

The problematic text is copied below (with the relevant fragments highlighted) admits two  interpretations:

a PE that detects a MAC mobility event via local learning starts an M-second timer (with a default value of M = 180), and if it detects N MAC moves before the timer expires (with a default value of N = 5), it concludes that a duplicate-MAC situation has occurred

I.e.:

The first MAC Move event that triggers the PE attempt to detect duplication MUST be detected via local learning (and therefore results in increment of the sequence number for the corresponding MAC address by the PE in question)

There is no explicit “via local learning” qualification for the consequent MAC Move events that are counted to decide whether the MAC address in question is duplicate or not.

IMHO this ambiguity may result in different decisions by the affected PEs. Please consider the following scenario:

An EVPN BD is instantiated in PE-1, PE-2 and PE-3. In each of these PEs it is attached to a single-homed Ethernet segment via a single AC

Initially MAC address X is locally learned by PE-1

Then X is locally learned by PE-2 that starts the M-seconds timer

After that X is locally learned by PE-3, PE-1, PE-3, PE- 1 and so on - but not by PE-2 – while the M-seconds timer in PE-2 is still running. All these events are identified by PE-2 as MAC Move events – but not via local learning:

If PE-2 counts these MAC Move events for the purpose of duplicate MAC detection, it declares X as duplicate and alerts the operator  - even if it did not participate in in

Otherwise, PE-2 does not declare X as duplicate.

I understand that the example above is a corner case, but. IMHO and FWIW, it should be resolved.
Can you please clarify, which of the above interpretations of the rule is correct and, in any case, clarify this point in the next revision of the draft?

Regards, and lots of thanks in advance,
Sasha



Disclaimer

This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Affiliates that is confidential and/or proprietary for the sole use of the intended recipient. Any review, disclosure, reliance or distribution by others or forwarding without express permission is strictly prohibited. If you are not the intended recipient, please notify the sender immediately and then delete all copies, including any attachments.