Re: [bess] John Scudder's Discuss on draft-ietf-bess-srv6-services-11: (with DISCUSS and COMMENT)

liu.yao71@zte.com.cn Tue, 08 March 2022 04:00 UTC

Return-Path: <liu.yao71@zte.com.cn>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEE543A0D0C; Mon, 7 Mar 2022 20:00:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.906
X-Spam-Level:
X-Spam-Status: No, score=-1.906 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FbGLdzPTtE2c; Mon, 7 Mar 2022 20:00:30 -0800 (PST)
Received: from mxhk.zte.com.cn (mxhk.zte.com.cn [63.216.63.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BE553A0D0B; Mon, 7 Mar 2022 20:00:28 -0800 (PST)
Received: from mse-fl1.zte.com.cn (unknown [10.30.14.238]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mxhk.zte.com.cn (FangMail) with ESMTPS id 4KCM6y0RtnzBHr2h; Tue, 8 Mar 2022 12:00:26 +0800 (CST)
Received: from njxapp02.zte.com.cn ([10.41.132.201]) by mse-fl1.zte.com.cn with SMTP id 2284087q009310; Tue, 8 Mar 2022 12:00:08 +0800 (GMT-8) (envelope-from liu.yao71@zte.com.cn)
Received: from mapi (njxapp02[null]) by mapi (Zmail) with MAPI id mid203; Tue, 8 Mar 2022 12:00:08 +0800 (CST)
Date: Tue, 8 Mar 2022 12:00:08 +0800 (CST)
X-Zmail-TransId: 2afa6226d4c8a16845ff
X-Mailer: Zmail v1.0
Message-ID: <202203081200085293755@zte.com.cn>
Mime-Version: 1.0
From: <liu.yao71@zte.com.cn>
To: <robert@raszuk.net>
Cc: <jgs@juniper.net>, <ketant.ietf@gmail.com>, <iesg@ietf.org>, <draft-ietf-bess-srv6-services@ietf.org>, <bess-chairs@ietf.org>, <bess@ietf.org>, <matthew.bocci@nokia.com>
Content-Type: text/plain; charset="UTF-8"
X-MAIL: mse-fl1.zte.com.cn 2284087q009310
X-Fangmail-Gw-Spam-Type: 0
X-FangMail-Miltered: at cgslv5.04-192.168.250.137.novalocal with ID 6226D4DA.000 by FangMail milter!
X-FangMail-Envelope: 1646712026/4KCM6y0RtnzBHr2h/6226D4DA.000/10.30.14.238/[10.30.14.238]/mse-fl1.zte.com.cn/<liu.yao71@zte.com.cn>
X-Fangmail-Anti-Spam-Filtered: true
X-Fangmail-MID-QID: 6226D4DA.000/4KCM6y0RtnzBHr2h
Archived-At: <https://mailarchive.ietf.org/arch/msg/bess/SXCk1HpGJutszEmTDnjYrpcrBmg>
Subject: Re: [bess] =?utf-8?q?John_Scudder=27s_Discuss_on_draft-ietf-bess-srv?= =?utf-8?q?6-services-11=3A_=28with_DISCUSS_and_COMMENT=29?=
X-BeenThere: bess@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bess>, <mailto:bess-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess/>
List-Post: <mailto:bess@ietf.org>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bess>, <mailto:bess-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Mar 2022 04:00:34 -0000

Hi Robert,

Thanks for sharing your detailed consideration on BGP capability and new NLRI.
A few comments about the BGP capability solution. Please see inline [YAO].

==============================================================================

In BGP protocol any new service deployment using existing AFI/SAFI is not
easy. Especially when you are modifying content of MP_REACH or MP_UNREACH
NLRI attributes. Main reason being is that using capabilities only goes one
hop. In full mesh it all works perfect, but the moment you put RR in
between BGP speakers things are getting ugly as capabilities are not
traversing BGP nodes. /* Even in full mesh mixing transports for the same
service is a serious challenge for routers when say multihomes sites are
advertised from different PEs with different transport options */.

[YAO] As you mentioned, in the scenario multihomes sites are advertised from different PEs with different transport options without RR, e.g, CE1 are connected to PE1 and PE2, PE1 supports MPLS VPN while PE2 support SRv6 VPN, PE3 is the peer of PE1 and PE2, imagine PE3 supports both capabilities,  I don't think this brings much difference between the configuration approach and BGP capability approach.
If BGP capability is introduced, PE3 will receive both MPLS VPN and BGP VPN routes, how to process them is based on user's requirement,e.g, choosing one fixed type of routes, using the lastest routes, ECMP and so on.
If configuration approach is used, how to configure is based user's requirement as well. Before configuration on PE1 and PE2, one should first decide whether PE3 wants to receive only one type of route or to receive both routes. And if PE3 receive both routes, the processing rule also should be considered. 
In a word, in scenario like this, the consideration on user's requirement is similar in both approach.

Imagine RR signals SRv6 Service Capability to the PE. Then this PE happily
sends a new format of the UPDATE messages. Well as today we also do not
have a notion of conditional capabilities (only send when received from
all) so if some of the RR peers do not support it you end up in partial
service. One can argue that in this case the only deterministic model is to
push the configuration from the management station and control partial
deployment of the new service from mgmt layer.

[YAO] By saying "RR peers", do you mean that in the scenario that there're multiple RRs, and they're peers of each other, if some of the RRs don't support the new BGP capability, the SRv6 service routes will not be sent to them thus result in losing part of the routes? 
If this is the case, I don't think it's a serious problem. No matter what new BGP capability one wants to introduce in this scenario, RRs are always required to support it if we want to get it right. 
If "RR peers" means other PEs, it is the expected result that PEs don't support the new capability will not receive the new kind of UPDATE messages.  So the dropping the  new routes sent to these PEs is not a problem. 
On the other hand, the management approach is always a practical option by not sending new messages to these PEs .


Regards,
Yao