Re: [bess] FW: Closing on Stephane's open issue with draft-ietf-bess-datacenter-gateway => Requesting feedback from IDR
slitkows.ietf@gmail.com Mon, 08 June 2020 14:48 UTC
Return-Path: <slitkows.ietf@gmail.com>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FC503A0BB5; Mon, 8 Jun 2020 07:48:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wASlSuqKMcAk; Mon, 8 Jun 2020 07:48:40 -0700 (PDT)
Received: from mail-wm1-x32d.google.com (mail-wm1-x32d.google.com [IPv6:2a00:1450:4864:20::32d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4FC73A0B98; Mon, 8 Jun 2020 07:48:29 -0700 (PDT)
Received: by mail-wm1-x32d.google.com with SMTP id r9so15577116wmh.2; Mon, 08 Jun 2020 07:48:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:thread-index:content-language; bh=I/nYqyOJmDPpwJSl+3jWzHbDeaU9ezgDEcWMrFj6SbY=; b=pMEg+BPz1ccYZ9vkG/esW36+8g8OkMzTkOGL/QsX4GlcNIfVy9XRp3czHgYJwWhay5 dMri0cC+bx9PKSAcrTqnCZilaRxcRoXy6UOEKu3tVbhm1kh7WGvGsB3Ft+hJsUTaPJtN wSLKWccK2PomCxQAGV/qp1fpKdRVx9XVEYVqhkgPhkptjk8HNaeFqfBVY4eQWQbm9F+y a92vIBcuzOk+Q5jlpCQVn2IC9seFACBtGO0GCdbkWVHrISH9+DTB9AYSfVZzr1x+S2o1 Ws3sVCWnB7ivYycDnTYAGvsZqa7CS+DDgyq1kBMsVWpNk+Ou4PFn71DAvuEeFL/2ZHDn mT5Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:references:in-reply-to:subject:date :message-id:mime-version:thread-index:content-language; bh=I/nYqyOJmDPpwJSl+3jWzHbDeaU9ezgDEcWMrFj6SbY=; b=b1GGQJjuwIvpw53wXH0LYs5mPiie+oi86tj0Th9kvn1esSeXH0dYmhAUkQMSAGQtTE UnloQLiK6ZcOOtyPL/at9ljExs/nETqHnVcg2BwUXAhwYy/qwl3nVrHDmEfAvSEBVw21 q5Xwa99pSM1k6+lZUq9yMfEh4SAB/m6ZaXSJXqdsP2MLLaFF6yw++T+vyIZlQYc9mQ3I hTim6osu6os7qg6HRXegf421dhSfiDzIac4D2LuYya4qJ8d8wk84TdhnPCAt48iUppIa lKi/sHYkn0AyHLEScFhEjZriecudl4y5vbmoRLriVeufBqb3YBtSbM1SukB8c56aNW1+ kfYQ==
X-Gm-Message-State: AOAM5315M9Ftj/gwxb7a2lJw5idyCwVhi+WhubV5vK7egXUR+GBL5n13 hEE9WbaOU/MlPl4nVR7MTK8eozM=
X-Google-Smtp-Source: ABdhPJyBDCkQXLLIWmTqBrXsmlFZjJqRJa9RtRMvH/vWtjYIV4qz1V+Oxab/sjwZAusg0rFjLb8UKg==
X-Received: by 2002:a7b:cf31:: with SMTP id m17mr14002454wmg.47.1591627704983; Mon, 08 Jun 2020 07:48:24 -0700 (PDT)
Received: from SLITKOWS3YYU6 ([173.38.220.53]) by smtp.gmail.com with ESMTPSA id a14sm25137310wrv.20.2020.06.08.07.48.23 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 08 Jun 2020 07:48:24 -0700 (PDT)
From: slitkows.ietf@gmail.com
To: 'Robert Raszuk' <robert@raszuk.net>
Cc: "'idr@ietf. org'" <idr@ietf.org>, 'BESS' <bess@ietf.org>
References: <00cc01d63d6f$9b7af880$d270e980$@gmail.com> <CAOj+MMGpLCVNiMOFPV3PoTE=LkcwbYJVmHgfnMcOCuuOk_wm3Q@mail.gmail.com>
In-Reply-To: <CAOj+MMGpLCVNiMOFPV3PoTE=LkcwbYJVmHgfnMcOCuuOk_wm3Q@mail.gmail.com>
Date: Mon, 08 Jun 2020 16:48:22 +0200
Message-ID: <011601d63da3$dc4aedf0$94e0c9d0$@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0117_01D63DB4.9FD74060"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQFnMsxVbx6V5bE5BMMwslDyB9P/AAG+RVsUqZ7qD9A=
Content-Language: fr
Archived-At: <https://mailarchive.ietf.org/arch/msg/bess/DgMI5pZ6iOD_cBkS7JY6p5kX984>
Subject: Re: [bess] FW: Closing on Stephane's open issue with draft-ietf-bess-datacenter-gateway => Requesting feedback from IDR
X-BeenThere: bess@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bess>, <mailto:bess-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess/>
List-Post: <mailto:bess@ietf.org>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bess>, <mailto:bess-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Jun 2020 14:48:43 -0000
Hi Robert, Thanks for your feedback. Please find some comments inline. Stephane From: Robert Raszuk <robert@raszuk.net> Sent: lundi 8 juin 2020 11:55 To: slitkows.ietf@gmail.com Cc: idr@ietf. org <idr@ietf.org>; BESS <bess@ietf.org> Subject: Re: [bess] FW: Closing on Stephane's open issue with draft-ietf-bess-datacenter-gateway => Requesting feedback from IDR Stephane, Two points .. 1. It is not clear to me that draft-ietf-bess-datacenter-gateway recommends to use RTC for anything - do they ? If not there is no issue. [SLI] Right, but nothing prevents someone to activate it or it can be activated “by inheritance” if sessions already runs VPNv4 for instance with RTC. 2. Also note that RTC can be enabled on a per AF basis hence even if you use it say for SAFI 128 you do not need to use it for SAFI 1. [SLI] RFC4684 is AFI/SAFI agnostic. I’m not aware of per-AFI/SAFI scoping of RT membership from an implementation point of view. You can do it by splitting sessions usually. [SLI] It could work if: we prevent usage of RTC for these families, or we specify the default behavior of RTC for AFI/SAFI 1/1, 2/1 when there is no RT (distribute routes that don’t have an RT). As a general comment I do not see any issues using RTs on non VPN SAFIs. Thx,, R. On Mon, Jun 8, 2020 at 10:34 AM <slitkows.ietf@gmail.com <mailto:slitkows.ietf@gmail.com> > wrote: Hi IDR WG, We have a draft that was on WGLC which introduces the usage of Route Targets on Internet address families to allow automated filtering of gateway routes. I raised a concern on a potential issue happening when Route Target constraint is deployed on these sessions. Internet address families don't use RTs today, and are propagated following the BGP propagation rules. When applying an RT and when having RTC deployed on the session (RTC not being family aware), propagation of Internet routes that don't have an RT may be stopped because of the behavior defined in draft-ietf-idr-rtc-no-rt. This will so break the existing default behavior of Internet SAFIs. We would like to get IDR's feedback on this topic. Thanks, Stephane BESS co-chair -----Original Message----- From: Adrian Farrel <adrian@olddog.co.uk <mailto:adrian@olddog.co.uk> > Sent: jeudi 4 juin 2020 19:31 To: slitkows.ietf@gmail.com <mailto:slitkows.ietf@gmail.com> Cc: bess-chairs@ietf.org <mailto:bess-chairs@ietf.org> ; bess@ietf.org <mailto:bess@ietf.org> ; draft-ietf-bess-datacenter-gateway@ietf.org <mailto:draft-ietf-bess-datacenter-gateway@ietf.org> Subject: Closing on Stephane's open issue with draft-ietf-bess-datacenter-gateway Hi, John and I had a chat today about what we perceive is Stephane's open issue. What we think the concern is is that we are using RTs in conjunction with normal (i.e., non-VPN) routes. We do this to allow gateways to filter their imports based on the RT that applies to the SR domain that it serves. An option was to use the Route Origin extended community instead. RFC 4360, which introduces both the Route Target and the Route Origin extended communities and gives some guidance. Loosely expressed, the RT says which routers should import, the RO says which routers have advertised. In both cases, the text suggests that "One possible use of the community is specified in RFC4364" which implies that there are other acceptable uses. 4364 implies that the RO is used "to uniquely identify the set of routes learned from a particular site." That is (my words), to apply a filter on top of the RT to prevent re-import by a site of routes that match the RT and that were advertised by other entry points to the site. Indeed, the RO would seem to be used (in the 4364 case) only when the RT is also in use. We appreciate that the distinction is pretty delicate, but we think we are right to use RT in this case because we are filtering to import, not to avoid importing. Furthermore, if we used the RO then, to be consistent with 4364, we would still be using the RT anyway. That, we think, disposes of the "RT or RO?" question. Now, we can go back to the original formulation of the question: is it OK to use RT with "non-VPN IP addresses"? Well, we consulted around a bit privately amongst some BGP experts, and we couldn't find anyone to say it was actually a problem. And (of course) no one raised the issue in WG last call - but Matthew might claim that is because the document was only lightly reviewed, and Stephane might claim that this is because he had already raised the point. Obviously, some of the authors know a bit about BGP, and Eric was a lead author on 4364 and drove a lot of the details of what we wrote. Two points in closing: - If someone can show that we break something, we will have to fix it. - If the chairs want to run this point past IDR and BESS explicitly, that would be fine. Hope this helps. Best, Adrian _______________________________________________ BESS mailing list BESS@ietf.org <mailto:BESS@ietf.org> https://www.ietf.org/mailman/listinfo/bess
- [bess] FW: Closing on Stephane's open issue with … slitkows.ietf
- Re: [bess] FW: Closing on Stephane's open issue w… Robert Raszuk
- Re: [bess] FW: Closing on Stephane's open issue w… slitkows.ietf
- Re: [bess] FW: Closing on Stephane's open issue w… Robert Raszuk
- Re: [bess] [Idr] FW: Closing on Stephane's open i… Gyan Mishra
- Re: [bess] FW: Closing on Stephane's open issue w… slitkows.ietf
- Re: [bess] [Idr] FW: Closing on Stephane's open i… Gyan Mishra