Re: [bess] Question regarding section 17.3 draft-ietf-bess-rfc7432bis

Igor Malyushkin <gmalyushkin@gmail.com> Tue, 10 January 2023 11:30 UTC

Return-Path: <gmalyushkin@gmail.com>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98F93C152711 for <bess@ietfa.amsl.com>; Tue, 10 Jan 2023 03:30:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.994
X-Spam-Level:
X-Spam-Status: No, score=-1.994 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xu0fb73HpdOa for <bess@ietfa.amsl.com>; Tue, 10 Jan 2023 03:30:14 -0800 (PST)
Received: from mail-pf1-x42c.google.com (mail-pf1-x42c.google.com [IPv6:2607:f8b0:4864:20::42c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A70FC15C538 for <bess@ietf.org>; Tue, 10 Jan 2023 03:28:05 -0800 (PST)
Received: by mail-pf1-x42c.google.com with SMTP id g20so8558390pfb.3 for <bess@ietf.org>; Tue, 10 Jan 2023 03:28:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=PXQFed0Gsgj0HGCZC5rupe7dmun0FpQ2XDMdTE2Qyyk=; b=AzkuQHvwFWATJeOuhgcKMZohVUqNEiP69RYLmqXp41kkGXPjv4uISP/XjpNZK4jve5 qTvkgwM4a/M6zdhnh2Y1H8t2BU5NNDInQoQxG4hB/cKfC8wcKUpJPP0aW5jIbeACVxWr n0gHfTseAsx0Osnw93wqysilxAhkYPoy0Dt3msAnsJkL/UqVKKOg/ripIaM+E65ANiro scCVyaSPOvniTjibm32e5Ajg0ygeDla35DWiOMPIvXIMuTJarolLawf4f4KD+ftb5c5L xUH36eIU0Jq6ymwohTmt0c3PSmWB3mluaOuLNIDLROLcpuu51N/DJR6ci/p7JyasMsLB y3Fg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=PXQFed0Gsgj0HGCZC5rupe7dmun0FpQ2XDMdTE2Qyyk=; b=VprgdDZe0actacgmVqszZguRyDcGP9uCfQAudTuHcK9Ftm8vb/a3F3Ep1AK9ZJd+OW S3TOBYOq45M4c9oOUbd7HauCdraDiSfi+bkBoP47hlt2MiJ1xkVOn5qHv2H0Tw4GJ3L5 nzJ2q+2A4aT02tlMhIOx7vaZHC8g3/idNuvgNI/FnjywlxsIE3ZfX3xcKpgx8/Kgdcvn uBpBImelSEIYsVUWN366pdcpd6jJn07tSBOMWDSkOphpzgtXh4ulVieCfZJBSSe8f7Xc 4DyLaAVua9ICFLJc1dH5Y66KtRpsTNqyHZ5CDyAo7+EkGCzA/eHpTakO5VzScqRqrvEn w9QQ==
X-Gm-Message-State: AFqh2krSWxfYDpB6j7e0wcRZcgd4+/jayDVRHU4cv/YCh3wbCwDwowru WdixpxD+gi7oglUp22B8TpYNo44mfi4rgGBS0YQ=
X-Google-Smtp-Source: AMrXdXvpoRYeXdCMq+BXeIKLoOwnWqVMVrcpETUWPJDLGVPeRT1FwDUmJk6YjMjNrQysLgV7PtKR9qJPeQXiF1pGgoo=
X-Received: by 2002:a63:b0e:0:b0:44e:466f:4759 with SMTP id 14-20020a630b0e000000b0044e466f4759mr4274619pgl.194.1673350084528; Tue, 10 Jan 2023 03:28:04 -0800 (PST)
MIME-Version: 1.0
References: <AM9PR08MB6004D08D52BFE0756514B05AD5FE9@AM9PR08MB6004.eurprd08.prod.outlook.com> <PH0PR03MB6300DF275E623A96FA64BA8BF6FE9@PH0PR03MB6300.namprd03.prod.outlook.com> <AM9PR08MB600495DCFDC0FDB213CEC4ABD5FE9@AM9PR08MB6004.eurprd08.prod.outlook.com> <PH0PR03MB6300FCC2BC30BADF8015C412F6FE9@PH0PR03MB6300.namprd03.prod.outlook.com> <CAEfhRrydbt994cVy2xpT2R9AcO=WTi8HH1mqnj0gQvUaVURK-Q@mail.gmail.com> <AM9PR08MB6004C4E948CB8DF81FAF50E3D5FF9@AM9PR08MB6004.eurprd08.prod.outlook.com>
In-Reply-To: <AM9PR08MB6004C4E948CB8DF81FAF50E3D5FF9@AM9PR08MB6004.eurprd08.prod.outlook.com>
From: Igor Malyushkin <gmalyushkin@gmail.com>
Date: Tue, 10 Jan 2023 15:27:53 +0400
Message-ID: <CAEfhRrz5kNff3G2ac7HwAeFxHx7C1Ye7UHdmT6DDh-ZP4LLMuA@mail.gmail.com>
To: Menachem Dodge <mdodge@drivenets.com>
Cc: Alexander Vainshtein <Alexander.Vainshtein@rbbn.com>, "bess@ietf.org" <bess@ietf.org>
Content-Type: multipart/related; boundary="0000000000005fa78f05f1e72d87"
Archived-At: <https://mailarchive.ietf.org/arch/msg/bess/8nnltfquKeYemHej73WexOycxKg>
Subject: Re: [bess] Question regarding section 17.3 draft-ietf-bess-rfc7432bis
X-BeenThere: bess@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bess>, <mailto:bess-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess/>
List-Post: <mailto:bess@ietf.org>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bess>, <mailto:bess-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jan 2023 11:30:18 -0000

Hi Menachem,

The remote PE isn't treating all MAC/IP advertisements learned from the
same ESI as being withdrawn, the important nuance from section 17.3 here
is: ... *from the advertising PE*. So we don't consider all MACs behind the
ES as being withdrawn, some of them can belong to other PEs.

My understanding of the highlighted sentence is that we should consider
these MACs as being withdrawn for the case when there are no other PE
routers behind the same ES. Checking of that is based on the existence of
Ethernet A-D routes for this ES. If we receive an Ethernet A-D withdraw
from a PE (and do not receive MAC/IP withdraws from the same PE) we can
resolve a next-hop for the MAC/IP routes from this PE via other Ethernet
A-D routes (if there are at least one). If we don't have any Ethernet A-D
routes for the ES, all MAC/IP routes behind this ES (based on an ESI) are
treated as being withdrawn at once. Section 9.2.2 gives a good explanation.

вт, 10 янв. 2023 г. в 11:47, Menachem Dodge <mdodge@drivenets.com>:

> Hello Igor, Sasha,
>
>
>
> Thanks for your responses.
>
>
>
> I would accept what you have explained, however I can’t then understand
> the meaning of the last paragraph of section 17.3:
>
>
>
> When a PE receives a withdrawal of a particular Ethernet A-D route from an
> advertising PE, it SHOULD consider all the MAC/IP Advertisement routes
> that are learned from the same ESI as in the Ethernet A-D route from the
> advertising PE as having been withdrawn. This optimizes the network
> convergence times in the event of PE-to-CE failures.
>
>
>
> Please could you explain why the remote PE is treating all the MAC/IP
> Advertisement routes learned from the same ESI as being withdrawn. That
> would mean that it would start flooding for these MAC addresses.
>
>
>
> Thank you kindly.
>
>
>
> Best Regards,
>
> Menachem
>
>
>
> *From: *Igor Malyushkin <gmalyushkin@gmail.com>
> *Date: *Monday, 9 January 2023 at 16:51
> *To: *Alexander Vainshtein <Alexander.Vainshtein@rbbn.com>
> *Cc: *Menachem Dodge <mdodge@drivenets.com>, bess@ietf.org <bess@ietf.org>
> *Subject: *Re: [bess] Question regarding section 17.3
> draft-ietf-bess-rfc7432bis
>
> Hi folks,
>
> I concur with Sasha. The idea behind retaining locally learned MACs until
> their timers hit zero is to reduce unknown unicast flooding in a service.
> All ingress PEs will have time to learn new MAC advertisements from the
> rest PE behind the ES (if they don't have them apriori). This is actually
> useful for both multihoming modes.
>
>
>
> пн, 9 янв. 2023 г. в 18:18, Alexander Vainshtein <
> Alexander.Vainshtein@rbbn.com>:
>
> Menachem,
>
> Please note that the procedures defined in Section 17.3 of RFC 7432 (and
> of the 7432bis draft) are not limited to failure of PE-CE links that belong
> to multi-homed Ethernet Segments (MH ES).
>
>
>
> If the failed link belongs to a All-Active MH ES, retention of EVPN MAC/IP
> Advertisement routes advertised by the PE in question for MAC addresses
> locally learned by the PE in question:
>
>    1. Allows remote PEs to continue forwarding traffic with Destination
>    MAC addresses in question to other PEs attached to the same MH ES as
>    described in Section 8.2 of RFC 7432
>    2. Prevents these MAC addresses being from being stuck forever in the
>    FDBs of remote PEs if they are not locally re-learned by one of the
>    remaining PEs attached to the same MH ES.
>
>
>
> Hope this helps.
>
>
>
> Regards,
>
> Sasha
>
>
>
> *From:* Menachem Dodge <mdodge@drivenets.com>
> *Sent:* Monday, January 9, 2023 2:37 PM
> *To:* Alexander Vainshtein <Alexander.Vainshtein@rbbn.com>; bess@ietf.org
> *Subject:* [EXTERNAL] Re: Question regarding section 17.3
> draft-ietf-bess-rfc7432bis
>
>
>
> Hello Sasha,
>
>
>
> Thanks for your response.
>
>
>
> If the only reason to keep the MAC addresses at the PE with the failed
> link is for implementing the EVPN Fast Reroute, then would it be possible
> to state this clearly in section 17.3; such that if the EVPN Fast Reroute
> is not supported or the EVPN Redirect Label was not received from the other
> PEs of that ESI, then BGP could send withdraw of MAC/IP Advertisement
> routes immediately.
>
>
>
> Thank you kindly.
>
>
>
> Best Regards,
>
> Menachem
>
>
>
>
>
> *From: *Alexander Vainshtein <Alexander.Vainshtein@rbbn.com>
> *Date: *Monday, 9 January 2023 at 14:22
> *To: *Menachem Dodge <mdodge@drivenets.com>
> *Cc: *bess@ietf.org <bess@ietf.org>
> *Subject: *RE: Question regarding section 17.3 draft-ietf-bess-rfc7432bis
>
> Menachem and all,
>
> As I see it, Section 17.3 of 7432bis
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__clicktime.symantec.com_15t5pN1f8G28GkmXKHYMT-3Fh-3DSjpaaxCyxLAZzwwflrJej0b7trn9LrojCZMcgSkK2h8-3D-26u-3Dhttps-3A__urldefense.proofpoint.com_v2_url-3Fu-253Dhttps-2D3A-5F-5Fdatatracker.ietf.org-5Fdoc-5Fhtml-5Fdraft-2D2Dietf-2D2Dbess-2D2Drfc7432bis-2D2D06-2D23section-2D2D17.3-2526d-253DDwMFAg-2526c-253DeuGZstcaTDllvimEN8b7jXrwqOf-2Dv5A-5FCdpgnVfiiMM-2526r-253DcezglEhs6Oa-5FCKN9mhFbT8T8kmWwaNdtBDjE9bvBG-5FE-2526m-253DdfM6dD-2DfslW05FpT7-2D3WWuNUAouGp6rNX5ABb5ciRm0-2526s-253DfHphfhvH0o5QSVnCcrA-5FdI1yivjVdxbrkq5Bn8ChUsk-2526e-253D&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cezglEhs6Oa_CKN9mhFbT8T8kmWwaNdtBDjE9bvBG_E&m=Grphi4loNd6qZ1SactwcOMkzFwEf-RVNcCMaZSiLzJs&s=daT-2SqHxk4Kk5kmXBE9eOjMGTEL_WrlASSN9oWXkGg&e=>
> does not differ from Section 17.3 in RFC 7432
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__clicktime.symantec.com_15t5uCCwashighbSrqwW5-3Fh-3DWHsjQh3h8Twd1jPlYfM9vpTX9F0ObZymPu7ZykHmVU0-3D-26u-3Dhttps-3A__urldefense.proofpoint.com_v2_url-3Fu-253Dhttps-2D3A-5F-5Fwww.rfc-2D2Deditor.org-5Frfc-5Frfc7432-2D23section-2D2D17.3-2526d-253DDwMFAg-2526c-253DeuGZstcaTDllvimEN8b7jXrwqOf-2Dv5A-5FCdpgnVfiiMM-2526r-253DcezglEhs6Oa-5FCKN9mhFbT8T8kmWwaNdtBDjE9bvBG-5FE-2526m-253DdfM6dD-2DfslW05FpT7-2D3WWuNUAouGp6rNX5ABb5ciRm0-2526s-253Dut1QXQIflQEqnm0ubOZ7I-5FJC1pBwc-2DHxzf5QiHhDWX4-2526e-253D&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cezglEhs6Oa_CKN9mhFbT8T8kmWwaNdtBDjE9bvBG_E&m=Grphi4loNd6qZ1SactwcOMkzFwEf-RVNcCMaZSiLzJs&s=JmbjrkLzhU9KgrS-cdHZJOyFeKND6qwJCQrZ_pMSLLM&e=>
> .
>
> Both documents only define reaction of the EVPN Control Plane to failure
> of a PE-CE link, and these definitions guarantee that remote PEs would stop
> sending "known unicast" traffic for customer MAC addresses that have been
> learned from the failed link to the affected PE.
>
>
>
> If the failed link belonged to a multi-homed Ethernet Segment, fast
> recovery of affected traffic can be provided using the method defined in
> the EVPN Fast Reroute
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__clicktime.symantec.com_15t5jXpNfeLXrowbmj9Cq-3Fh-3D9bR1ndElY-5FypBg4i3gF9fz4-2DimFmDppGk-5FXBQmU7nrc-3D-26u-3Dhttps-3A__urldefense.proofpoint.com_v2_url-3Fu-253Dhttps-2D3A-5F-5Fdatatracker.ietf.org-5Fdoc-5Fhtml-5Fdraft-2D2Dburdet-2D2Dbess-2D2Devpn-2D2Dfast-2D2Dreroute-2D2D03-2526d-253DDwMFAg-2526c-253DeuGZstcaTDllvimEN8b7jXrwqOf-2Dv5A-5FCdpgnVfiiMM-2526r-253DcezglEhs6Oa-5FCKN9mhFbT8T8kmWwaNdtBDjE9bvBG-5FE-2526m-253DdfM6dD-2DfslW05FpT7-2D3WWuNUAouGp6rNX5ABb5ciRm0-2526s-253DQnbRrmQWvX1osKypfiORzfk0pcI1btu8O0d5-2DA15t4g-2526e-253D&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cezglEhs6Oa_CKN9mhFbT8T8kmWwaNdtBDjE9bvBG_E&m=Grphi4loNd6qZ1SactwcOMkzFwEf-RVNcCMaZSiLzJs&s=OP_Q3lMYi0lglIan76aaneN8TUBQWhRnHfi4Jq7msXk&e=>
> draft.
>
>
>
>
>
> Regards,
>
> Sasha
>
>
>
> *From:* BESS <bess-bounces@ietf.org> *On Behalf Of *Menachem Dodge
> *Sent:* Monday, January 9, 2023 10:22 AM
> *To:* bess@ietf.org
> *Subject:* [EXTERNAL] [bess] Question regarding section 17.3
> draft-ietf-bess-rfc7432bis
>
>
>
> Hello All,
>
>
>
> In section 17.3 of the draft-ietf-bess-rfc7432bis PE-to-CE Network
> Failures the first paragraph states that:
>
>
> “If the connectivity between the multihomed CE and one of the PEs to
> which it is attached fails, the PE MUST withdraw the set of Ethernet A-D
> per ES routes that had been previously advertised for that ES.”
>
> …
>
> “When the MAC entry on the PE ages out, the PE MUST withdraw the MAC
> address from BGP.”
>
> The last paragraph of that section 17.3 states that:
>
> When a PE receives a withdrawal of a particular Ethernet A-D route from an
> advertising PE, it SHOULD consider all the MAC/IP Advertisement routes
> that are learned from the same ESI as in the Ethernet A-D route from the
> advertising PE as having been withdrawn. This optimizes the network
> convergence times in the event of PE-to-CE failures.
>
> *Clarification*
>
> Please could you explain why the PE that has detected the network failure
> to its CE is retaining the MAC addresses until age-out time, and only then
> withdrawing the MAC/IP Advertisement routes; while all the remote PEs that
> receive the withdrawal of the Ethernet A-D route should be considering all
> the MAC/IP Advertisement routes received from that PE and learned from that
> ESI as having been withdrawn, without waiting for the withdrawal of the
> MAC/IP Advertisement routes. This seems to be inconsistent behavior.
>
> Thank you kindly.
>
> Best Regards,
>
>
>
> *Menachem Dodge*
>
> System Architect
>
> [image: signature_227873180]
>
> +972-52-617-5734
>
> mdodge@drivenets.com
>
> follow us on LinkedIn
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__clicktime.symantec.com_15t5ehd6D2ewSs7gEAk4D-3Fh-3DP-2DePmL-5FytXLySNaDoyBLZ-2DyIEAs4uPowWoy0ZShyrZE-3D-26u-3Dhttps-3A__urldefense.proofpoint.com_v2_url-3Fu-253Dhttps-2D3A-5F-5Fclicktime.symantec.com-5F15siKypPPVR6CW288BcBc-2D3Fh-2D3DQZH9KlwmZbXPTDgoU19R1IAeBWh-2D5FJpPi0nB7SNM4AKM-2D3D-2D26u-2D3Dhttps-2D3A-5F-5Fwww.linkedin.com-5Fcompany-5Fdrivenets-2526d-253DDwMFAg-2526c-253DeuGZstcaTDllvimEN8b7jXrwqOf-2Dv5A-5FCdpgnVfiiMM-2526r-253DcezglEhs6Oa-5FCKN9mhFbT8T8kmWwaNdtBDjE9bvBG-5FE-2526m-253DdfM6dD-2DfslW05FpT7-2D3WWuNUAouGp6rNX5ABb5ciRm0-2526s-253D9OlX8rX6IfH-5F0GKDtZmbU0YP2RPPFHNkYNPgqvQD0CA-2526e-253D&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cezglEhs6Oa_CKN9mhFbT8T8kmWwaNdtBDjE9bvBG_E&m=Grphi4loNd6qZ1SactwcOMkzFwEf-RVNcCMaZSiLzJs&s=wzXKLuCav6U2SfJftL14Kfj5Xev_rJoj01PhbmV9d38&e=>
>
> www.drivenets.com
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.drivenets.com&d=DwQFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cezglEhs6Oa_CKN9mhFbT8T8kmWwaNdtBDjE9bvBG_E&m=Grphi4loNd6qZ1SactwcOMkzFwEf-RVNcCMaZSiLzJs&s=n6wev3g3GS7wjDga5IByZwBnSvTJWnK_Yd-NwWnKY0k&e=>
>
>
>
>
>
>
>
>
> Notice: This e-mail together with any attachments may contain information
> of Ribbon Communications Inc. and its Affiliates that is confidential
> and/or proprietary for the sole use of the intended recipient. Any review,
> disclosure, reliance or distribution by others or forwarding without
> express permission is strictly prohibited. If you are not the intended
> recipient, please notify the sender immediately and then delete all copies,
> including any attachments.
>
>
> Notice: This e-mail together with any attachments may contain information
> of Ribbon Communications Inc. and its Affiliates that is confidential
> and/or proprietary for the sole use of the intended recipient. Any review,
> disclosure, reliance or distribution by others or forwarding without
> express permission is strictly prohibited. If you are not the intended
> recipient, please notify the sender immediately and then delete all copies,
> including any attachments.
>
> _______________________________________________
> BESS mailing list
> BESS@ietf.org
> https://www.ietf.org/mailman/listinfo/bess
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_bess&d=DwQFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cezglEhs6Oa_CKN9mhFbT8T8kmWwaNdtBDjE9bvBG_E&m=Grphi4loNd6qZ1SactwcOMkzFwEf-RVNcCMaZSiLzJs&s=Xq7mI9sR48BjLvyo7nPieGvAXgvAcj349_XisCDDF_Y&e=>
>
>