Re: [bess] Comments on draft-sajassi-bess-evpn-ip-aliasing-02

"Rabadan, Jorge (Nokia - US/Mountain View)" <jorge.rabadan@nokia.com> Wed, 28 July 2021 06:46 UTC

Return-Path: <jorge.rabadan@nokia.com>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DAF0B3A200C for <bess@ietfa.amsl.com>; Tue, 27 Jul 2021 23:46:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.351
X-Spam-Level:
X-Spam-Status: No, score=-2.351 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.452, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3PJg8NbBrWek for <bess@ietfa.amsl.com>; Tue, 27 Jul 2021 23:46:14 -0700 (PDT)
Received: from NAM04-BN8-obe.outbound.protection.outlook.com (mail-bn8nam08on2102.outbound.protection.outlook.com [40.107.100.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C58DA3A200B for <bess@ietf.org>; Tue, 27 Jul 2021 23:46:13 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Q/PZj0NvN5dUfU1kBvEcVe8Zlei4XPIHrh8bLNbpUh3lsrszJisr/i9jRftbC7yFFHpfkzLETvm2SgGDsivg+Ej2ln6GsahyfF/38TVZMKz/vNhQOGJ9abiq+weXqeIjHOiT1Nw3gu9R5unT2XuttWlOYppVi8zNYLK8Q4G7w0ovrNEb1mqylgWFmF0LU0FxIpKH2mvTp0rtj0LH/OEpP8y2ocHNongOjPtVVRHlcWT0QP+0DbEBXebXNVI/OIjrfSvJjMqu0+o5Y8Zj2EUzzH3qLOg9bn1KIPZDABiX6WOalmyoB2E7DhehggoBZ/6Q33/rQ83IH2JAhLUh+eWmHQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2pvreMnJJ98HvW0dmfnfpG6/vATmmSrcT14boyUZmzc=; b=Er//lyQwnzOSM/HHAzcBteg7OW5xdTK89A6gwUBcnT2B9PHTdM/+8buETmWPBo28IynJ3NZuS80w9yRJePwLWPHN7fYyVy4URoltBidEsWyS7jnDhfxLjArZyT0zbM4hO0c/YTbNl02Uw/nL+aLZ2V6/WcXkfKUdO038p6Fwn31sOP762wzsjfBLF37Qk4ZfLatc8LOpDvSb7YnVJJaWXcXGVmmkQlGHRGUiRNKNZFeJc7i49vADBnTPCkyONSUrXpotVeIbKt2xF1Q8rxbxQ01/lPDuJmZfew3eqeBZrr90K/EFktg8wzldl0rY5ZfPX/5r3xnAZN2l75VCsYfj7A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia.com; dmarc=pass action=none header.from=nokia.com; dkim=pass header.d=nokia.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2pvreMnJJ98HvW0dmfnfpG6/vATmmSrcT14boyUZmzc=; b=Z1dtjPzrmjTKzmlgzl8Z/4cSQnLkIou8T8Gl24oHDts98Y+1uBDtxmXYzK9i78Uhb4a3QOzCKO3/w1TLYfUC/PvkdqPZexhduFW/n+r+0rIOlDRDwint5GChHZSINu94+kEoFWrscIOwwmiNpIVVuVDE6gXsvaEHsjUpIOKGrlM=
Received: from BY3PR08MB7060.namprd08.prod.outlook.com (2603:10b6:a03:36d::19) by BY3PR08MB7188.namprd08.prod.outlook.com (2603:10b6:a03:366::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4352.25; Wed, 28 Jul 2021 06:46:08 +0000
Received: from BY3PR08MB7060.namprd08.prod.outlook.com ([fe80::35f5:8eaa:7269:93f4]) by BY3PR08MB7060.namprd08.prod.outlook.com ([fe80::35f5:8eaa:7269:93f4%5]) with mapi id 15.20.4373.019; Wed, 28 Jul 2021 06:46:08 +0000
From: "Rabadan, Jorge (Nokia - US/Mountain View)" <jorge.rabadan@nokia.com>
To: "wang.yubao2@zte.com.cn" <wang.yubao2@zte.com.cn>
CC: "bess@ietf.org" <bess@ietf.org>
Thread-Topic: Comments on draft-sajassi-bess-evpn-ip-aliasing-02
Thread-Index: AQHXgzTJlwLCMo1deU2z0pZ04/UYtatX6m2M
Date: Wed, 28 Jul 2021 06:46:08 +0000
Message-ID: <BY3PR08MB706090851FAD2A4CF4C6204AF7EA9@BY3PR08MB7060.namprd08.prod.outlook.com>
References: <202107280614271841200@zte.com.cn>
In-Reply-To: <202107280614271841200@zte.com.cn>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: zte.com.cn; dkim=none (message not signed) header.d=none;zte.com.cn; dmarc=none action=none header.from=nokia.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 77608633-de19-4dc1-fee8-08d95193616d
x-ms-traffictypediagnostic: BY3PR08MB7188:
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <BY3PR08MB7188BE98A3665A3BF8CF3FDFF7EA9@BY3PR08MB7188.namprd08.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: Ctduk+TiDcLvuUHuEaEcYoieNe2RcO7aWKizgQOCL+C57DmOBxS7Geg3c7W036hNWDNmy0elvDZMczdLxVMZLf6GvB2/7aTYrwvjYTdBHc1TY74qH0r7SAZ70cBes/2B4bJ+P3iQBnogKu7M6lUVocB/GOhMvoLCABw81Ipra6SNnDveNFwUF9RfTCQQ+qtRfL9RGygqzY7g4nCX9wnmDbkwnJt+oLFcclfui7wfPr59sODIpW/vo71+W3da1quNhJYAJSl9JsiEz6tCWgZYL+Sddeuk4QfJV33NJ5BFW8GK4M5o0r0EJBKwaOhQYEvvOdTJvuJFKxpDAPy/RmBDT5MIztighSEYWkNDIaF67rKWMm26cm4EqKVT7LxQ3sYtnQDRIPnUBuhjeFWCxTBYFksz7795c6gYuC2sS3jy0myWdIe0NPOP63dt3l59/TSkJ8Jo+yBPaBUQMHRJe7sHShGPHLNLz/IuqUKuO6u7FfcoUuSm6WmfwO3UHZ03aZ1yu+Mw3qImpgH+HPHXi/TUPJDqF+0H0T8ZVQeRTMst8v/tbYXmdL1Gr50E39TuZiun93svN75EebUbeKWo3qa4KjR1AiSDsWpVE7HrPSRKUh6Cuqp/HYOW+vtxODbt6lzbgQzjYY75RDP6LItq2Gm0EN4SCQOiD+k7b6Ab3wDUF4jMEItdNdH3J3P9hhGYcHd9f2HVjM5jy9kLBVIqayK9RzI+UyudrMoMqBg7KTAwf98nR4JzhXRxZDpOLu+xMkKp8/wd6bUNUloC+VkvsXHtK0aXuqj7LcOBhlLj/u0bQo1+RMKnqzFea52xSHXM4Datux8WuBp6vk0VhbqsbJ9SCw==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY3PR08MB7060.namprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(9326002)(38100700002)(26005)(186003)(6916009)(38070700005)(53546011)(6506007)(5660300002)(9686003)(7696005)(122000001)(508600001)(4326008)(55016002)(33656002)(8936002)(66446008)(64756008)(76116006)(66556008)(66476007)(2906002)(66946007)(83380400001)(91956017)(166002)(52536014)(71200400001)(316002)(86362001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_BY3PR08MB706090851FAD2A4CF4C6204AF7EA9BY3PR08MB7060namp_"
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BY3PR08MB7060.namprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 77608633-de19-4dc1-fee8-08d95193616d
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jul 2021 06:46:08.3747 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: SEXS7jaozuKvuB9UJ7f2ZtjqcM/RVpxEZzVw4m3EM9GUYfmXdX09Kfi6GhBoPHmLTr43BYgF/dcwNjrp+Bcmng==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR08MB7188
Archived-At: <https://mailarchive.ietf.org/arch/msg/bess/BMgVOCdV5dYhek9bIWLjng24SiU>
Subject: Re: [bess] Comments on draft-sajassi-bess-evpn-ip-aliasing-02
X-BeenThere: bess@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bess>, <mailto:bess-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess/>
List-Post: <mailto:bess@ietf.org>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bess>, <mailto:bess-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jul 2021 06:46:19 -0000

Hi Yubao,

Thanks for your email. Yes, you misunderstood the use-case 😊 but these are good questions, we will clarify in the next revision.


  1.  The IP Prefix routes are advertised with the ESI and always a zero-GW-IP.
     *   Three co-authors of this draft are also co-authors of draft-ietf-bess-evpn-prefix-advertisement and the latter explicitly prohibits the use of non-zero ESI and non-zero GW-IP simultaneously. So you will not see the use of the GW-IP in draft-sajassi-bess-evpn-ip-aliasing.
     *   In fact that is also one of my comments for draft-mackenzie-bess-evpn-l3aa-proto-00: using non-zero ESI *and* non-zero GW-IP in the IP Prefix routes is non-backwards compatible and will break interoperability with existing RRs. But I will send a separate email with my comments.



  1.  About the use-case of slide 7:
     *   As mentioned, the (virtual) ES is associated to the VNF loopback, i.e. 1.1.1.1, and its operational state is tied to the reachability of that loopback.
     *   On leaf-1/2/3/4, the reachability of the loopback is determined by a static-route or IGP, and can be used along with BFD to speed up fault detection.
     *   As an example, suppose leaf-2 has a static-route to 1.1.1.1 with next-hops {20.0.0.1,20.0.0.2,20.0.0.3}, and 1.1.1.1 is associated to ES-1.

                        i.   The ARP resolution to those next-hops is done as usual, nothing especial, it’s done as soon as the static-route is added.

                      ii.   ES-1 will be oper-up as long as the static route is active in the IP-VRF route-table. When it goes inactive, ES-1 will go down and the AD routes withdrawn.

                     iii.   Obviously, and individual AC going down in leaf-2 will not make the static-route inactive, hence will not bring down the ES. The IRB going down will make the static-route inactive, hence the ES will go down.

     *   A similar example would work with an IGP instead of a static route to 1.1.1.1.

I think that should clarify your questions.
Let me know otherwise.

Thanks.
Jorge


From: wang.yubao2@zte.com.cn <wang.yubao2@zte.com.cn>
Date: Wednesday, July 28, 2021 at 12:14 AM
To: Rabadan, Jorge (Nokia - US/Mountain View) <jorge.rabadan@nokia.com>
Cc: bess@ietf.org <bess@ietf.org>
Subject: Comments on draft-sajassi-bess-evpn-ip-aliasing-02



Hi Jorge,



This is the detailed explanation of the question I asked in the IETF 111 meeting.

In page 7 of slides-111-bess-sessa-evpn-ip-aliasing<https://datatracker.ietf.org/meeting/111/materials/slides-111-bess-sessa-evpn-ip-aliasing-00>, when leaf-5 send traffic to leaf-2,  how does leaf-2 find the corresponding ARP entry for 20.0.0.2 or 20.0.0.1 or 20.1.1.3 ?

I guess the GW-IP 1.1.1.1 will be advertised as overlay index along with the ESI.

But the draft-ietf-bess-evpn-prefix-advertisement-11 does not define an IP Prefix Advertisement Route with both GW-IP and ESI both as overlay index.

I suggest that this should be updated if you want to do so.

And the preference of ESI overlay index should be considered higher than GW-IP overlay index for Leaf-5's sake.

But the preference of ESI overlay index should be considered lower than (or maybe they should both be used? ) GW-IP overlay index for Leaf-2's sake

These are new rules that can't be found in draft-ietf-bess-evpn-prefix-advertisement-11<https://datatracker.ietf.org/doc/html/draft-ietf-bess-evpn-prefix-advertisement-11#section-3.2> .



But on the contary,  if the IP Prefix Advertisement Route has a GW-IP overlay index,

It can support the same protection procedures without any ESI overlay index.

( The details to do such protection using GW-IP overlay index I have described in draft-wang-bess-evpn-arp-nd-synch-without-irb-06<https://datatracker.ietf.org/doc/html/draft-wang-bess-evpn-arp-nd-synch-without-irb-06>. )

So I don't get the point why we need two redundant overlay index?

Can you clearify it?



Maybe an IP Prefix Route Style with a GW-IP overlay index is engough here.

And such Route Style is in compliance with  draft-ietf-bess-evpn-prefix-advertisement-11<https://datatracker.ietf.org/doc/html/draft-ietf-bess-evpn-prefix-advertisement-11#section-3.2> already.



Another question is that: If the ESI overlay index is advertised, when will the IP A-D per EVI route of Leaf-2 be withdrawn?

When the IRB interface on Leaf-2 fails?

When one of the three ACs fails?

When all of the three ACs fails?

If you want to do so, I suggest that the ESI-1 to be configured onto the IRB interfaces,

But in Figure 2 of  draft-sajassi-bess-evpn-ip-aliasing<https://datatracker.ietf.org/doc/html/draft-sajassi-bess-evpn-ip-aliasing-02#section-1.3>-02, I see the ESI is configured on the ACs of the BDs.



Is anything I have misunderstood?



Best,

Yubao