Re: [bess] FW: WG Last Call (including implem status & shepherd) for draft-ietf-bess-evpn-vpws-03

"Jeffrey (Zhaohui) Zhang" <zzhang@juniper.net> Wed, 18 May 2016 18:58 UTC

Return-Path: <zzhang@juniper.net>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3709C12D641 for <bess@ietfa.amsl.com>; Wed, 18 May 2016 11:58:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J_0iLEFnCA3J for <bess@ietfa.amsl.com>; Wed, 18 May 2016 11:58:35 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0138.outbound.protection.outlook.com [65.55.169.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EC5C12D0F1 for <bess@ietf.org>; Wed, 18 May 2016 11:58:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=CjkKrQcaN0P+u8qSibkqC/pLLDf7209ig8whrRFIbZc=; b=GYPgrYnpiEbCptrbrujHNmTZGcrOHnS19/zTKsxxYKqStjlADCkfZcH6fZ5qs4s8+Oi0ZH74GlYOJ3XT+7ZvV51U9priuin6K5TBNmsc+m+RLGQg9XDhzhZoaxLERR1s55m8aJxhypOYd57pN2ahAzXcktRr24w0nuD80g0HfH8=
Received: from BLUPR0501MB1715.namprd05.prod.outlook.com (10.163.120.18) by BLUPR0501MB1714.namprd05.prod.outlook.com (10.163.120.17) with Microsoft SMTP Server (TLS) id 15.1.497.12; Wed, 18 May 2016 18:58:32 +0000
Received: from BLUPR0501MB1715.namprd05.prod.outlook.com ([10.163.120.18]) by BLUPR0501MB1715.namprd05.prod.outlook.com ([10.163.120.18]) with mapi id 15.01.0497.019; Wed, 18 May 2016 18:58:32 +0000
From: "Jeffrey (Zhaohui) Zhang" <zzhang@juniper.net>
To: Sami Boutros <sboutros@vmware.com>
Thread-Topic: [bess] FW: WG Last Call (including implem status & shepherd) for draft-ietf-bess-evpn-vpws-03
Thread-Index: AQHRqgOZUf2Jc4CuVk++VehXUPZTSJ+4z9qAgALM/yCAA10LAIAAAi0g
Date: Wed, 18 May 2016 18:58:32 +0000
Message-ID: <BLUPR0501MB1715BE626403CF88E10F9488D4490@BLUPR0501MB1715.namprd05.prod.outlook.com>
References: <572B2655.3020605@alcatel-lucent.com> <D3095B2F-072B-42CA-B160-DB4888DA02A7@alcatel-lucent.com> <57303CEE.8040104@orange.com> <7A432DD5-E28B-4670-B53E-2137A0A6E445@alcatel-lucent.com> <57309395.8090408@orange.com> <SN1PR0501MB1709149BA36C410EF7E46E52C7700@SN1PR0501MB1709.namprd05.prod.outlook.com> <SN1PR0501MB1709DD24B90B52F014AA58CFC7700@SN1PR0501MB1709.namprd05.prod.outlook.com> <BLUPR0501MB17151371F2D0A16368B63FFAD4720@BLUPR0501MB1715.namprd05.prod.outlook.com> <CAFKBPj58Q_cDi3GhAtgCQ0XfAaYtdNeCzzuWN3eJURc47y5sWg@mail.gmail.com> <0D4E38AC-C11C-4DB9-8D61-8778FA2852B4@vmware.com> <BLUPR0501MB1715DB345CF2E66870572148D4770@BLUPR0501MB1715.namprd05.prod.outlook.com> <67A01B47-48C4-4899-9D87-F64E379DA174@vmware.com>
In-Reply-To: <67A01B47-48C4-4899-9D87-F64E379DA174@vmware.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: vmware.com; dkim=none (message not signed) header.d=none;vmware.com; dmarc=none action=none header.from=juniper.net;
x-originating-ip: [66.129.241.14]
x-ms-office365-filtering-correlation-id: f2452d52-8515-4c4c-5ba1-08d37f4e6861
x-microsoft-exchange-diagnostics: 1; BLUPR0501MB1714; 5:Ab4Njsg1dDeBEDZtzw5P0ID65YoRzqqVIQUtqzfKVIcO/0Rk+Jvs9ua+2z7kwBOF3AtghM7ofl6X/zE7xAp97JsMZX8rYaodiz2+HFi41qGYRvHKRp0JsOI0u1pUJj0hbHwSw18IV1AZznpjviVxZg==; 24:tTqgaZ36ZsbraaGmO6ZDqSfpNkyyadcQwHMGIU545yCYwLnPeSNXn2v01vSF0vbHmAdFhaGlcANKoWkQcp7qabQkoAx+v1c+5Y3R8GMTQT0=; 7:DD4dAklC/qTBCho+bYxxoIw0PpaXHv1i963exf1OYunTKRYByl6Ie97pixcLZk7vaZwpfCKA5XLDqnOFqwzWOIWgXzaLUbc7M9KIbA1u0FMuRKR00VRJ+pssqhJWA6IAOmg22ysYAkkagGADcyEvHGPOsHILXGoOj9lk9We5icoI0iTM7ha1W6cVBIlgnd0k
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BLUPR0501MB1714;
x-microsoft-antispam-prvs: <BLUPR0501MB17145999ADCB26F28D7FCBC0D4490@BLUPR0501MB1714.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:BLUPR0501MB1714; BCL:0; PCL:0; RULEID:; SRVR:BLUPR0501MB1714;
x-forefront-prvs: 0946DC87A1
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(43544003)(76576001)(8676002)(81166006)(189998001)(8936002)(3660700001)(19625215002)(33656002)(86362001)(5002640100001)(110136002)(3280700002)(1220700001)(122556002)(76176999)(102836003)(5890100001)(50986999)(230783001)(6116002)(54356999)(5008740100001)(586003)(93886004)(19300405004)(2906002)(790700001)(9686002)(5004730100002)(10400500002)(9326002)(77096005)(15975445007)(2950100001)(2900100001)(74316001)(92566002)(5003600100002)(106116001)(4326007)(16236675004)(19580395003)(66066001)(87936001)(99286002)(11100500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BLUPR0501MB1714; H:BLUPR0501MB1715.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BLUPR0501MB1715BE626403CF88E10F9488D4490BLUPR0501MB1715_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 May 2016 18:58:32.3353 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR0501MB1714
Archived-At: <http://mailarchive.ietf.org/arch/msg/bess/LnRH4qLupJizi7DZZhyhiIrSjqo>
Cc: "bess@ietf.org" <bess@ietf.org>
Subject: Re: [bess] FW: WG Last Call (including implem status & shepherd) for draft-ietf-bess-evpn-vpws-03
X-BeenThere: bess@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bess>, <mailto:bess-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess/>
List-Post: <mailto:bess@ietf.org>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bess>, <mailto:bess-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 May 2016 18:58:37 -0000

Hi Sami,

Some text snipped … Please see zzh2> below.


Zzh> When it comes to PIC, the closed thing I can find in section 5 is the following:

   Upon link or node failure, EVPN can trigger failover with the
   withdrawal of a single BGP route per EVPL service or multiple EVPL
   services, whereas with VPWS PW redundancy, the failover sequence
   requires exchange of two control plane messages: one message to
   deactivate the group of primary PWs and a second message to activate
   the group of backup PWs associated with the access link. Finally,
   EVPN may employ data plane local repair mechanisms not available in
   VPWS.

The first part (before “Finally”) talks about the two control plane message – so that’s not “data-plane” (the text I had question about talks about “data-plane prefix independent convergence). The second part talks about “data plane local repair” but has no details that I was looking for.

Sami:
The local repair here will be done by the primary PE o(on local AC down) using the label advertised in per EVI EAD route advertised by the backup PE will direct the traffic to backup PE, I will add this text to clarify this, is this ok?

Zzh2> So you’re talking about “egress link protection” – in flight traffic from the other end arriving on the primary PE will be redirected to the backup PE if the AC is down on the primary PE. This definitely needs some clarifying text, and it’s better to say egress link protection instead of data plane local repair?

Sami: Will add to the terminology section that an ES on a PE refer to the link attached to it, this link can be part of a set of links attached to different Pes in multi home cases, or could be a single link in single home cases. How does that sound?

Zzh2> Yes that’s good.


In the following paragraph:

   For EVPL
   service, the Ethernet frames transported over an MPLS/IP network MUST
   remain tagged with the originating VID and any VID translation is
   performed at the disposition PE. For EPL service, the Ethernet frames
   are transported as is and the tags are not altered.

"remain tagged" is a little unclear to me and RFC 7432 does not talk about it either. Is it that incoming tagging is not changed at all (e.g. double tagged) or is it single tagged with normalized VIDs? Is it that for both services, the frames are transported as is across the core, and the tag alteration is only happening at the disposition PE in case of EVPL?

[Sami]

We will change the MUST to a SHOULD to be consistent with [7432] Vlan based services section 6.1.

Zzh> It’s not the MUST that I am having trouble with. It’s the “remain tagged” that is not clear to me (7432 is not clear to me either). As I mentioned in the other exchange with Jorge on this – is it that in both cases the Ethernet frames are transported in the core as is?

If both cases are “transported as is” (in the core – I understand that in EVPL case translation may be done on the egress PE), then it is confusing to me to say “remain tagged” for EVPL but “as is” for EPL. Better use consistent wording.

If “remain tagged” means that traffic in the core is using “normalized VID” (e.g., double tagged incoming packets become single tagged), then the word “remain” is not clear enough.

Sami: Shall we say, for EVPL, at least one VID should be present on the packet, and the VID manipulation is a local matter.

Zzh2> Because RFC7432 is not clear about “remain tagged” (for example, see my above questions), it would be good to spell out the details, not just “at least one VID should be present”?

[Sami]

Zzh> Basically, my points about BW are:

- It seems that it does not have to be limited to BW reservation in the network; it could be simply traffic shaping/limiting on the PE into the network. Therefore it does not have to be limited to only one AS. For example, the nework could be using LDP and there is no way to reserve BW but shaping is still desired on the PEs.

Sami: The issue here is that we are using the BW idr draft, and there is no shaping defined there, and we don’t plan to define a new attribute for this, perhaps we can add that to a new draft?

Zzh2> Good point that BW is not equal to shaping parameters; however, existing PW specifications do not seem to have BW related stuff and one actual customer use case I am aware of with EVPN VPWS actually does involve shaping; so maybe it’s better to take care of this in the base spec? It’s just a new attribute anyway.

[Sami]

7.2 Multi-Homed CEs

   For a faster convergence in multi-homed scenarios with either Single-
   Active Redundancy or All-active redundancy, mass withdraw technique
   as per [EVPN] baseline is used. A PE previously advertising an
   Ethernet A-D per ES route, can withdraw this route signaling to the
   remote PEs to switch all the VPWS service instances associated with
   this multi-homed ES to the backup PE

Does the PE also withdraw the individual per-EVI AD routes? I assume not; better make it clear.
[Sami]
It will withdraw as per [7432], we are not defining any new behavior.

Zzh> Now that you mention it, I did a search in RFC 7432 and the only place I can found about withdrawing per-EVI route is the following:


   When an Ethernet tag is decommissioned on an Ethernet segment, then

   the PE MUST withdraw the Ethernet A-D per EVI route(s) announced for

   the <ESI, Ethernet tags> that are impacted by the decommissioning.

All other mentioning of withdrawing are about mac/ip and per-ES AD route. I think it’s better to explicitly point out in this section that per-EVI routes are not withdrawn (so that when the link comes back only a single per-ES route is advertised) when the link goes down.

Sami: Actually per EVI EAD routes must be withdrawn too

Zzh2> RFC7432 only says it’s withdrawn when a tag is “decommissioned”; if the intention is to withdraw when the AC goes down, it should be explicitly spelled out (it’s not in RFC 7432 but should be added to this draft if that’s the right behavior). However, isn’t it better to keep those routes around so that they don’t need to be re-advertised when the link comes back up?

Thanks!
Jeffrey