Re: [bess] EVPN MH: Backup node behavior in Primary Path Failure

[John E Drake <[e-mail]>]

Jorge,

The other possibility for this case is for each PE to advertise a Per EVI Ethernet A-D route for only those EVIs for which it would become DF if the current DF were to fail.

Yours Irrespectively,

John

From: BESS <[e-mail]> On Behalf Of Rabadan, Jorge (Nokia - US/Mountain View)
Sent: Tuesday, October 16, 2018 4:56 AM
To: Zhuangshunwan <[e-mail]>; Muthu Arul Mozhi Perumal <[e-mail]>
Cc: [e-mail]; [e-mail]; [e-mail]; [e-mail]
Subject: Re: [bess] EVPN MH: Backup node behavior in Primary Path Failure

Hi,

RFC7432 explains that if there are more than 2 PEs in the ES, then, upon receiving the AD route withdrawals, the remote PE will flood. That is, it'll flush the MACs and flood since it does not know who the new DF is, and there is no backup for a given MAC.

So yes, with more than 2 PEs, there is no backup per se. Note that, even if we had the BDF indication, upon an ES failure the remote PE will start receiving MAC/IP route withdrawals. Hence unless the re advertisements of the MACs start coming immediately, the BDF indication may not avoid flooding anyway.. We can add the P and B bits here too, but they may not be as useful as in RFC8214.

Thanks,
Jorge


________________________________
From: Zhuangshunwan <[e-mail]<mailto:[e-mail]>>
Sent: Tuesday, October 16, 2018 00:19
To: Rabadan, Jorge (Nokia - US/Mountain View); Muthu Arul Mozhi Perumal
Cc: [e-mail]<mailto:[e-mail]>; [e-mail]<mailto:[e-mail]>; [e-mail]<mailto:[e-mail]>; [e-mail]<mailto:[e-mail]>
Subject: RE: [bess] EVPN MH: Backup node behavior in Primary Path Failure

Hi Jorge,

8.4.  Aliasing and Backup Path of RFC7432 says:

<snip>
.   The backup path is a closely related function, but it is used in
.   Single-Active redundancy mode.  In this case, a PE also advertises
.   that it has reachability to a given EVI/ES using the same combination
.   of Ethernet A-D per EVI route and Ethernet A-D per ES route as
.   discussed above, but with the "Single-Active" bit in the flags of the
.   ESI Label extended community set to 1.  A remote PE that receives a
.   MAC/IP Advertisement route with a non-reserved ESI SHOULD consider
.   the advertised MAC address to be reachable via any PE that has
.   advertised this combination of Ethernet A-D routes, and it SHOULD
.   install a backup path for that MAC address.
<snip>

Actually, do we think that the function described in this section only works when there are only 2 PEs in one ES?
When there are more than 2 PEs in one ES, it cannot work unless RFC7432 also introduce the BDF election function defined in RFC8214.

Regards,
Shunwan

From: BESS [mailto:[e-mail]] On Behalf OfRabadan, Jorge (Nokia - US/Mountain View)
Sent: Friday, October 05, 2018 2:01 PM
To: Muthu Arul Mozhi Perumal <[e-mail]<mailto:[e-mail]>>
Cc: [e-mail]<mailto:[e-mail]>; [e-mail]<mailto:[e-mail]>; [e-mail]<mailto:[e-mail]>; [e-mail]<mailto:[e-mail]>
Subject: Re: [bess] EVPN MH: Backup node behavior in Primary Path Failure

That should be true only in RFC8214. That's my point...

From:Muthu Arul Mozhi Perumal <[e-mail]<mailto:[e-mail]>>
Date: Friday, October 5, 2018 at 5:47 AM
To: "Rabadan, Jorge (Nokia - US/Mountain View)" <[e-mail]<mailto:[e-mail]>>
Cc: "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>
Subject: Re: [bess] EVPN MH: Backup node behavior in Primary Path Failure

Thanks, Jorge.

In EVPN single-active dual-homing or EVPN VPWS single-active multi-homing, when other PEs realize that the DF is dead, they all need to re-run the DF election for sure. However, traffic recovery need not wait until the DF election gets over electing a new DF..it only requires the other PEs and the backup to realize the primary/DF is dead and start forward. That's my point..

Regards,
Muthu

On Fri, Oct 5, 2018 at 1:30 AM Rabadan, Jorge (Nokia - US/Mountain View) <[e-mail]<mailto:[e-mail]>> wrote:
Muthu,


From:Muthu Arul Mozhi Perumal <[e-mail]<mailto:[e-mail]>>
Date: Thursday, October 4, 2018 at 5:37 PM
To: "Rabadan, Jorge (Nokia - US/Mountain View)" <[e-mail]<mailto:[e-mail]>>
Cc: "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>
Subject: Re: [bess] EVPN MH: Backup node behavior in Primary Path Failure

Thanks, Jorge. This is inline with my thinking. So, in single-active multihoming, once the primary is dead we don't need to wait for the DF election to happen for the backup (or some other PE in the ES) to become active and start forwarding traffic over the ES, instead it only requires the remote PEs and backup to realize that the primary is dead (thru' NH tracking / BFD) and start forwarding over the ES, right?
[JORGE] When the other PEs in the ES realize the DF is dead, they need to remove the dead PE from the candidate list and run DF Election. You may optimize things if you only have two PEs in the ES (such as skip the timer) but if you have more than 2 PEs in the ES, there is really no concept of backup PE in RFC7432, but simply the other PEs are non-DF. However, the concept of backup PE in an ES with more than two PEs is specified in RFC8214, where all the PEs in the ES not only elect a DF but also a backup DF, and signal this backup condition in the AD per-EVI routes. Note this is not there in RFC7432.

Regards,
Muthu

On Thu, Oct 4, 2018 at 8:10 PM Rabadan, Jorge (Nokia - US/Mountain View) <[e-mail]<mailto:[e-mail]>> wrote:
Muthu,

About this:

Suppose we have a full mesh of iBGP sessions b/w the PEs, then who would withdraw the routes if the primary PE / DF itself fails? Instead, the BGP session would timeout causing the primary PE's neighbors to flush out the A-D routes received from the primary PE, right? This can take several seconds, isn't it?

No, not in the implementations I know of. Next Hop tracking will immediately detect that the PE is not in the network anymore and the routes will be invalidated. You can also bootstrap the BGP sessions to BFD.
But that has nothing to do with EVPN!.. it's regular BGP.

Thx
Jorge

From:Muthu Arul Mozhi Perumal <[e-mail]<mailto:[e-mail]>>
Date: Thursday, October 4, 2018 at 1:14 PM
To: "Rabadan, Jorge (Nokia - US/Mountain View)" <[e-mail]<mailto:[e-mail]>>
Cc: "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>
Subject: Re: [bess] EVPN MH: Backup node behavior in Primary Path Failure

Please see inline..

On Thu, Oct 4, 2018 at 3:33 PM Rabadan, Jorge (Nokia - US/Mountain View) <[e-mail]<mailto:[e-mail]>> wrote:
In-line.

Thx
Jorge

From:Jaikumar Somasundaram <[e-mail]<mailto:[e-mail]>>
Date: Thursday, October 4, 2018 at 11:28 AM
To: "Rabadan, Jorge (Nokia - US/Mountain View)" <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>
Cc: Jiang He <[e-mail]<mailto:[e-mail]>>, P Muthu Arul Mozhi <[e-mail]<mailto:[e-mail]>>
Subject: RE: [bess] EVPN MH: Backup node behavior in Primary Path Failure

Thanks Jorge for the quick reply.
Please find further question below.

From: Rabadan, Jorge (Nokia - US/Mountain View) <[e-mail]<mailto:[e-mail]>>
Sent: Thursday, October 4, 2018 1:52 PM
To: Jaikumar Somasundaram <[e-mail]<mailto:[e-mail]>>;[e-mail]<mailto:[e-mail]>
Cc: Jiang He <[e-mail]<mailto:[e-mail]>>; P Muthu Arul Mozhi <[e-mail]<mailto:[e-mail]>>
Subject: Re: [bess] EVPN MH: Backup node behavior in Primary Path Failure

Hi,


Questions:
1.      Will the node in backup mode forward the packet to CE?

[JORGE] as soon as it becomes DF it can forward packets to the CE. The backup node will have to run DF election upon the ES route withdrawal from the primary. If AC-DF is enabled, it can also react to the withdrawal of AD routes from the primary PE.

[Jai] Does that mean if any packet comes to a node that is still in the backup mode will get dropped, before the new DF election is complete? Why cant this be used as FRR? Or what is the use case of having backup node(s)?

[JORGE2] when the primary node fails, ES and AD routes are withdrawn.
Suppose we have a full mesh of iBGP sessions b/w the PEs, then who would withdraw the routes if the primary PE / DF itself fails? Instead, the BGP session would timeout causing the primary PE's neighbors to flush out the A-D routes received from the primary PE, right? This can take several seconds, isn't it?

Regards,
Muthu

The AD route withdrawal is an indication for remote nodes that they have to send traffic to the backup (for a given MAC) or to flush the MACs if there are more than 2 PEs in the ES. Around the same time or maybe earlier, the ES route withdrawal will make the backup PE take over as DF. So the overall convergence time will depend on how/when those two things happen in time. Only the DF PE can forward traffic. A non-DF can never forward traffic or there will be risk of duplicate packets.


2.      Will all the nodes in backup mode forward the packet before DF election?

[JORGE] Only the new DF can forward.



3. If they forward, how is duplicate packets handled, in this case?
[JORGE] see above.

My two cents..

Thanks.
Jorge



From:BESS <[e-mail]<mailto:[e-mail]>> on behalf of Jaikumar Somasundaram <[e-mail]<mailto:jaikumar.somasundaram@ericsson..com>>
Date: Thursday, October 4, 2018 at 10:03 AM
To: "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>
Cc: Jiang He <[e-mail]<mailto:[e-mail]>>, P Muthu Arul Mozhi <[e-mail]<mailto:[e-mail]>>
Subject: [bess] EVPN MH: Backup node behavior in Primary Path Failure


Hello Everyone,

Sorry if it is a duplicate. I repost this query as I did not receive any response yet.
(I was wondering if this mail already reached the group or not)


I have a question on Primary PE encountering a failure in EVPN multihoming

in single active mode.



RFC7432, section 14.1.1:

<snip>

   If there is more than one backup PE for a given ES, the remote PE

   MUST use the primary PE's withdrawal of its set of Ethernet A-D per

   ES routes as a trigger to start flooding traffic for the associated

   MAC addresses (as long as flooding of unknown unicast packets is

   administratively allowed), as it is not possible to select a single

   backup PE.

</snip>



Questions:

1. Will the node in backup mode forward the packet to CE?

2. Will all the nodes in backup mode forward the packet before DF election?

3. If they forward, how is duplicate packets handled, in this case?



Please help me anwere these questions.



Thanks & Regards

Jaikumar S


_______________________________________________
BESS mailing list
[e-mail]<mailto:[e-mail]>
https://www.ietf.org/mailman/listinfo/bess<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_bess&d=DwMF-g&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=CRB2tJiQePk0cT-h5LGhEWH-s_xXXup3HzvBSMRj5VE&m=llt1h0ORtcdfSlkLb74jt9vVkGyLR7KhsJZdkWdoEgc&s=oDroIh7x63kHwujqh4jOajbDMQbGlP8jcMoIyVNdt6A&e=>