Re: [bess] comment on draft-ietf-bess-ir

Eric C Rosen <erosen@juniper.net> Mon, 21 September 2015 13:36 UTC

Return-Path: <erosen@juniper.net>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1028B1B31A6; Mon, 21 Sep 2015 06:36:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.003
X-Spam-Level:
X-Spam-Status: No, score=-0.003 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2qPUqyReXafS; Mon, 21 Sep 2015 06:36:31 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0132.outbound.protection.outlook.com [65.55.169.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC5071B319E; Mon, 21 Sep 2015 06:36:27 -0700 (PDT)
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=erosen@juniper.net;
Received: from [172.29.34.173] (66.129.241.13) by BY1PR0501MB1095.namprd05.prod.outlook.com (10.160.103.141) with Microsoft SMTP Server (TLS) id 15.1.268.17; Mon, 21 Sep 2015 13:36:23 +0000
To: Lucy yong <lucy.yong@huawei.com>, "Jeffrey (Zhaohui) Zhang" <zzhang@juniper.net>, "draft-ietf-bess-ir@ietf.org" <draft-ietf-bess-ir@ietf.org>
References: <2691CE0099834E4A9C5044EEC662BB9D571D7792@dfweml701-chm> <BLUPR0501MB1715C4449A20759976E757F5D46A0@BLUPR0501MB1715.namprd05.prod.outlook.com> <2691CE0099834E4A9C5044EEC662BB9D571D78FA@dfweml701-chm> <55E60759.3090502@juniper.net> <2691CE0099834E4A9C5044EEC662BB9D571D85E5@dfweml701-chm>
From: Eric C Rosen <erosen@juniper.net>
Message-ID: <560007CF.6010206@juniper.net>
Date: Mon, 21 Sep 2015 09:36:15 -0400
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0
MIME-Version: 1.0
In-Reply-To: <2691CE0099834E4A9C5044EEC662BB9D571D85E5@dfweml701-chm>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Originating-IP: [66.129.241.13]
X-ClientProxiedBy: CO1PR06CA031.namprd06.prod.outlook.com (10.242.160.21) To BY1PR0501MB1095.namprd05.prod.outlook.com (25.160.103.141)
X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1095; 2:8Ddu8/e3xJQfR91GwSuSdE4lotaWemvKdtATyUIbZB4uzITOjRaZHZYM2XL+OBgbc/PaWkVhVKO9fFm0ZYl+J5YdFSS8gGozY7o6YN/kkOqkfugoT1tWUfEG7uLY9efzbmrtVjyf5/upK+yTBbIebLj8FSgOXINne3XbEkAgIfk=; 3:trhG7PkOppfpI0UXVIt/FmoTk6cJewP4ID2BB0RmEG/2QF+iimkb+aYcUh8aSTm8C/suaUTyt6pgn3kE7SegQmtCzJ63ZUN1jT3aH6Ga2zJZPS30/epgnBqr7cduSpiebOb+/wkSKQObptIfmYMFkw==; 25:mguVC50zsXGJaMoieH0bVjX+23LJmWT5BAi4DsRdmWXfYBd9dH2qHSMUrx/XZ8S8vKFnLH3ZFp3Xw89jzRyWTy6jA+SXacPk7m9yolrmBg67970XNm99hI14bmMogeSUpPnOC7OZxLEWAOJtHVQ11we2XGu7+NWRPJEYHpUYLEXOmFtiE6GR3zMJMyHxMP7PGsDaRkqpkbbmGACJwgo0qn2/B7QOL9g7YnBAtxqeqfgfXrZP2FzTSwl05Lu1PzTch3WtkNol7+vCm/DyFu0GDg==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1095;
X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1095; 20: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; 4:AA+CT6mnOynzY7g/OHIB9uo4nswxpLzgE0EuMou/7c0X7yFo5X7Po72qc3Md0Et0RdHd5rl8hE/fd1qKoc4xNLgYvc05l/YcDZ5n4EWz656SUyjOZ1C6x/BudIZR9HA5YfjdxWDEOz1GqKW3m2kuiD2mPS9wBsdrlrgNxnfeuB6if5k9lG2YgOwrtatTI6mnnOEmR4GeDMlcDkx50w4EGXghD6WgvIKCU8cXkokO+J87w12YAU5OaaRrq37oDjojSmnFlvEAay3L0EV0+ECrQEISkboCbfH/zVWIEwJtrfoXQw/5BxbtwYpGyWbKZmiJ/6rnJGh+Ml4oCZTXLQveFw==
X-Microsoft-Antispam-PRVS: <BY1PR0501MB1095F1F7F0B6D87EF543EBF8D4460@BY1PR0501MB1095.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(601004)(8121501046)(5005006)(520078)(3002001); SRVR:BY1PR0501MB1095; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1095;
X-Forefront-PRVS: 07063A0A30
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(6049001)(6009001)(199003)(52314003)(189002)(87976001)(65806001)(54356999)(2501003)(62966003)(122386002)(40100003)(83506001)(47776003)(33656002)(65956001)(64706001)(77156002)(5001860100001)(230783001)(36756003)(92566002)(2950100001)(77096005)(68736005)(93886004)(59896002)(66066001)(97736004)(4001540100001)(5001770100001)(4001350100001)(81156007)(5001830100001)(86362001)(64126003)(5004730100002)(105586002)(5007970100001)(1941001)(46102003)(106356001)(99136001)(76176999)(65816999)(101416001)(87266999)(42186005)(23746002)(5001960100002)(80316001)(189998001)(50466002)(50986999); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1095; H:[172.29.34.173]; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
Received-SPF: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1095; 23: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
X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1095; 5:bEmvNnc78PB5ST0HyiGxNG80+2jkw78z9r3Y+rnQ2eUQc0lvoBRrhv+Bd+ACAYkMnuSnjqK/jAOU5vgBoc3aNj50tq7YHiwB8UkWCbGO9b5RxO4oaBUoyBqETfWtDzwDxIPc63Pq7rlFTIsiBoAS5g==; 24:IBXwPGDPW9zVUwoPHUoCK8HiD0vvpJIH2kg7gUGat6tphTPsoJshdHxKWgWa1aQKpJXdmJ0cSWFfwNleCjGKvVDgP9E6CYvNd3RUf5YC5MM=; 20:NEniBeZC/nDwYj+aKIAsHmOjRPif9U3lGw7PBUx5hCW9Desk+ltsT7j668aLdCKn2fgxG7JMLZWI3ygCdhD5ZQ==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Sep 2015 13:36:23.4889 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1095
Archived-At: <http://mailarchive.ietf.org/arch/msg/bess/Oja2PcxEG3klIekCCiAnrhb4s2I>
Cc: "bess@ietf.org" <bess@ietf.org>
Subject: Re: [bess] comment on draft-ietf-bess-ir
X-BeenThere: bess@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bess>, <mailto:bess-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess/>
List-Post: <mailto:bess@ietf.org>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bess>, <mailto:bess-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Sep 2015 13:36:33 -0000

> Think more about using BGP mechanism to achieve the make before
> break at a child.
>
> The child can do it without parent cooperation. When a child changes
> the parent for a Leaf A-D route, it first sends out the route with
> the new parent address encoded in RT; when old parent receives the
> route, it does not need to take any action on it;

Note that if Constrained Route Distribution (RFC4684) is running, the
old parent will see an explicit withdraw when the RT is changed.

Even if Constrained Route Distribution is not running, once the 
attributes of a route are modified, the route is considered to have been 
implicitly withdrawn, and the route with the new attributes is 
considered to be a replacement route.  (See section 3.1 of RFC 4271.)

So once the RT no longer identifies the old parent, the old parent must
consider the route to have been withdrawn and replaced.  Since the 
replacement route does not identify the old parent, it does not impact 
the old parent's multicast state.

> The old parent updates multicast state and new parent do nothing when
> receiving the withdraw leaf A-D route.

As indicated above, the old parent will have seen an implicit or
explicit withdraw as soon as the RT was changed.

Further, if the new parent sees a withdraw, it cannot decide to maintain
the route anyway, as this would violate BGP semantics.

> Regarding suppress the non-parent node to re-distribute the leaf A-D
> route, if we take RR as an exception case and require RR to
> re-distribute leaf A-D; IMO, it MAY work too.

There are a variety of deployment scenarios in which a received Leaf A-D
route must be redistributed, even by a router that is not identified in
the route's RT and that is not an RR.  For instance, this will be
necessary if non-segmented P-tunnels are being used, but the routes need
to be distributed through multiple EBGP sessions in order to travel from
egress to ingress.  The only time it is safe to not redistribute a Leaf
A-D route is when one knows that the route has already reached its
target, or that it will reach its target through some other path.  There
is no simple set of rules to determine this.  If you want to constrain
the distribution of the Leaf A-D routes, you either need to use
Constrained Route Distribution, or to set up policies that are specific
to a particular deployment.

> I suggest to relax the second rule in Section 6.2, i.e. no need to
> require N to have exact same set of downstream neighbors in two
> tunnels. For example, if K1 has downstream neighbors n1~n10 and K2
> has downstream neighbors n2-n10. N node can assign a single label for
> the upstream for both tunnels. As a result, the packet with this
> label from upstream node will be sent to downstream neighbors n1-n10;
> n1 accepts the packets that associate with K1 and discard the packets
> that associate with K2. N2-N10 will accept the packets that associate
> with either K1 or K2.

As Jeffrey has explained, there is no way in this scenario for N1 to 
determine that a particular packet should be associated with K1 rather 
than with K2.  Suppose the parent node receives packet P1 on tunnel K1 
and packet P2 on tunnel K2.  Since  those packets carry the same label, 
the parent node doesn't know which packet has arrived on which tunnel. 
The parent node will just do a label swap and send the packets along to 
N1-N10.  When N1 gets packets P1 and P2, they both have the same label, 
and therefore N1 has no way to determine that one of the two packets is 
on tunnel K2 and should be discarded.