Re: [bess] bess: draft-zzhang-bess-mvpn-msdp-sa-interoperation

"Jeffrey (Zhaohui) Zhang" <zzhang@juniper.net> Fri, 24 November 2017 14:26 UTC

Return-Path: <zzhang@juniper.net>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD37B12894A; Fri, 24 Nov 2017 06:26:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5mcmNxz-FyY9; Fri, 24 Nov 2017 06:26:50 -0800 (PST)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EBB961288B8; Fri, 24 Nov 2017 06:26:49 -0800 (PST)
Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.21/8.16.0.21) with SMTP id vAOEOFBv025680; Fri, 24 Nov 2017 06:26:42 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=y06b2i7gN7PBKEiKeRAeQV8vNrqwCGizvtziKcgL//s=; b=CqiIO9XQWaBgPvyb1Q+dWdKGuKkjmYjXPR4QkvDsM4FSFmpzjtI0yxMOfvN/SoPQBa6t lu3V83gmaKO46gUjg+WKS/Zw3tjONDda6N90ryq7TymnL2DhT81jcFcGVm314eljVRq7 MvdRFfGQk7ImvJRaJWILqBA9wtwq1L9lV2z8zZYLETBA6tP/TEUnn5RNQPgnzVujXou5 OJsfbWsxL48WCBd8ZRBe1iT0LTe0tX1bBGIpP7mF5qNPn2zpb4lGCMb8guYzVrmoM1L6 nWckKRDX6u93eTG7JrJpIfNIu1eBosuKIhb+7XFUPNZlHBtivdbeo3bXW1Np9nSoS7uA BQ==
Received: from nam01-by2-obe.outbound.protection.outlook.com (mail-by2nam01lp0177.outbound.protection.outlook.com [216.32.181.177]) by mx0b-00273201.pphosted.com with ESMTP id 2eegkvgjqf-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Fri, 24 Nov 2017 06:26:42 -0800
Received: from DM5PR05MB3145.namprd05.prod.outlook.com (10.173.219.15) by BY2PR0501MB2070.namprd05.prod.outlook.com (10.163.197.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.260.2; Fri, 24 Nov 2017 14:26:39 +0000
Received: from DM5PR05MB3145.namprd05.prod.outlook.com ([10.173.219.15]) by DM5PR05MB3145.namprd05.prod.outlook.com ([10.173.219.15]) with mapi id 15.20.0282.002; Fri, 24 Nov 2017 14:26:40 +0000
From: "Jeffrey (Zhaohui) Zhang" <zzhang@juniper.net>
To: Toerless Eckert <tte@cs.fau.de>, Lenny Giuliano <lenny@juniper.net>
CC: MBONED WG <mboned@ietf.org>, Toerless Eckert <tte+ietf@cs.fau.de>, "bess@ietf.org" <bess@ietf.org>
Thread-Topic: [bess] bess: draft-zzhang-bess-mvpn-msdp-sa-interoperation
Thread-Index: AQHTXPJFRb/XpCS5yk+cPU93+HFWMKMg0JcwgAA6qICAAhZbgIAAe5tQ
Date: Fri, 24 Nov 2017 14:26:39 +0000
Message-ID: <DM5PR05MB31452E571F227E67EEC50C95D4260@DM5PR05MB3145.namprd05.prod.outlook.com>
References: <20171114024232.GF19390@faui40p.informatik.uni-erlangen.de> <DM5PR05MB31456805323BF32267D6BBEAD4200@DM5PR05MB3145.namprd05.prod.outlook.com> <alpine.DEB.2.02.1711221417300.10112@svl-jtac-lnx02.juniper.net> <20171124063041.GA21793@faui40p.informatik.uni-erlangen.de>
In-Reply-To: <20171124063041.GA21793@faui40p.informatik.uni-erlangen.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [66.129.241.13]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BY2PR0501MB2070; 6:k+ElBlTbKSc71j6YftKyWlISEGkv2hIZCMWHFK+WcXr9w9807rmczzaxPKT87PZcFQpOojn/gdSa5V0LwxJuagM+rgxXGaeWHlunxGKVJw7S9+DTkNj17EqXbwpSTIA6RZL0ib1I/fvi4W0akoGoz8r1nYeghI1sA9mFpgZP4+rw5ByA8C+5ndOznYnJPYlH+2IGM2YGCeypEKTlhSvoyrZHFqsVPOIVHIK1ATfbpRdVzkPb/+dFurRH1FxvUI0PxRY402Pnd+LfQTnOUHjFfS2/JJ5B0pvXNNhhblhj7h2/8l0YQJ9MADRt43ti3ZHyzer7Mx+mU5Wukl5g5wtSdF5N8Rnyjr8kaBXk8X9l/0E=; 5:QzQCv/ZzcfeG13SMTwq+zvk3puGJVRPHiWxzogRLuowxyylZflPjuPbn4PMYAvN22/oM3KpBxI4PcuHZHtJi9hL8yIZDKLs2qfzLXAAKDiX44ut2lCS3+CcPddHli9jnxgoKnW0LfGlygweFn1yZ3d0HZinbkOQa+ATWkUx1JZo=; 24:ZgZEUzcBUyL3S94WH+zXROMD+Cnx3KEJ0vburbdouHanP0CTKqTVsK5FG7kngzhVqt4O6ZYeafk9r8Eg8GhVMzpEmSaJY4FYiycGN/Hsmgo=; 7:2CYph9oGLAOL37T1/A6zNDDGnRQum/vgYd8W+D22Kb6p0GeJodr2VjuVPF5w2VjpwOQlPO9RIQlxGWHdMJYyWPv8NEvArLrTodui6EZhxew4xC6Bt+79RYR92aYJ2gQkU6bHpKfiCvE93+zCSNoZKEOEgYvHym+SSpzlysqhHEQvWU4ubQN4d9aycwZfk2ljC9b47K9pPttMBej3c6oSqU7egqVG1ls5V5fxQx3z1ce7V5ns60NAn3kWdelM9g64
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(48565401081)(2017052603258); SRVR:BY2PR0501MB2070;
x-ms-traffictypediagnostic: BY2PR0501MB2070:
x-ms-office365-filtering-correlation-id: 1f688115-d6ef-4bf2-4212-08d5334760a9
x-microsoft-antispam-prvs: <BY2PR0501MB2070927C995EEF70BAF6DA86D4260@BY2PR0501MB2070.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(10436049006162)(138986009662008);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(2401047)(5005006)(8121501046)(3002001)(93006095)(93001095)(10201501046)(3231022)(6055026)(6041248)(20161123558100)(20161123555025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(20161123564025)(20161123560025)(6072148)(201708071742011); SRVR:BY2PR0501MB2070; BCL:0; PCL:0; RULEID:(100000803101)(100110400095); SRVR:BY2PR0501MB2070;
x-forefront-prvs: 05015EB482
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(376002)(346002)(366004)(39860400002)(24454002)(199003)(13464003)(51914003)(189002)(54906003)(110136005)(6116002)(3846002)(102836003)(575784001)(86362001)(6306002)(8676002)(9686003)(81166006)(81156014)(14454004)(229853002)(55016002)(53936002)(93886005)(97736004)(189998001)(4326008)(7696005)(2900100001)(99286004)(106356001)(230783001)(7736002)(305945005)(5660300001)(6506006)(105586002)(6246003)(1941001)(74316002)(3280700002)(3660700001)(76176999)(54356999)(25786009)(66066001)(6436002)(50986999)(966005)(53546010)(68736007)(8936002)(2906002)(316002)(77096006)(101416001)(478600001)(33656002)(2950100002)(6636002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR0501MB2070; H:DM5PR05MB3145.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 1f688115-d6ef-4bf2-4212-08d5334760a9
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Nov 2017 14:26:39.9411 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR0501MB2070
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-11-24_05:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1709140000 definitions=main-1711240196
Archived-At: <https://mailarchive.ietf.org/arch/msg/bess/W4VXRAmLRDDXo1N70cbikVsjjtw>
Subject: Re: [bess] bess: draft-zzhang-bess-mvpn-msdp-sa-interoperation
X-BeenThere: bess@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bess>, <mailto:bess-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess/>
List-Post: <mailto:bess@ietf.org>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bess>, <mailto:bess-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Nov 2017 14:26:57 -0000

Hi Toerless,

> -----Original Message-----
> From: BESS [mailto:bess-bounces@ietf.org] On Behalf Of Toerless Eckert
> Sent: Friday, November 24, 2017 1:31 AM
> To: Lenny Giuliano <lenny@juniper.net>
> Cc: MBONED WG <mboned@ietf.org>; Toerless Eckert <tte+ietf@cs.fau.de>;
> bess@ietf.org
> Subject: Re: [bess] bess: draft-zzhang-bess-mvpn-msdp-sa-interoperation
> 
> Hi Lenny,
> 
> a) I was asking Jeffrey in the WG meeting if he saw any difference
>    between MSDP and 4610 wrt. to the applicability of your draft, and
>    he also said no (as i think too), thats where this originated.

On the spot I did make a mistake that I thought with 4610 the RPs would propagate registers (received from a C-RP) to another :-) Lenny caught that.

> 
> b) Wrt to your contentions below:
> 
>    1) I agree, #1 is covered - for both MVPN SA and rfc4610 register
>    messages according to rfc6514, 14.1.
> 
>    2) Let first make the argument where MSDP and rfc4610 operate equally:
>    when you configure an MSDP mesh group. If all the non-PE RPs in an
>    MVPN C domain are either an MSDP mesh group or an rfc4610 RP-set
>    (same function, different names), then you could just add some PE
>    as members of the MSDP mesh group or the RFC4610 RP-set and that
>    would work "fine" without extending rfc6514 14.1, aka: those PEs
>    would learn active C (S,G) and distribute it to all other PE, and
>    they would not need to send any (S,G) SA/register messages back to the
>    non-PE mesh group/rp-set because those RPs already have all state
>    they need. And, as your draft says, as soon as you add more than
>    one PE this way, you have multiple PEs that will send to all other
>    PEs all active C (S,G) state info. And its kinda difficult to figure
>    out how much redundancy one wants to set up that way.

Correct.

> 
>    So, the model that i thought your draft meant to establish is one
>    where you would avoid having to build a mesh-group/RP-set across all
>    non-PE RPs in a large network:

Not to "avoid" -- just to make it work (better) -- when there is no such mesh-group/RP-set across all non-PE RPs, by making all RP-PEs into an MSDP mesh-group of their own (though replacing MSDP session with BGP-MVPN session).

> 
>    You would logically have a per-MVPN-site mesh-group/RP-set between
>    the PEs of that site (one or more) and one or more non-PE RP.

And the RP-PEs will be in their own "core" mesh.

>    Whenenver a PE receives an MVPN SA that comes from another site,
>    it would forward it to the other non-PE members of this mesh-group/RP-set,
>    and your new draft section 3 would permit this type of source check
>    (i am not completeley through understanding that part of your draft).
> 
>    So, that would be a very scaleable setup as soon as you have
>    non-PE RPs in the MVPN.
> 
>    3) MSDP of course has setup options not shared with rfc6410, aka:
>    any setup that is more than a mesh-group. If you intended for the
>    draft to also apply to such cases,

Yes.

>    it would be great to give
>    examples of the so tht one can check if/how the proposed spec in your
>    draft would work in the fce of those cases existing MSDP RPF rules
>    (which can of course be quite complex).

Yes more text would help. The idea is that MVPN SA messages would just be treated as MSDP SAs from the PE that originated the SAs. Those MSDP SAs received from true MSDP peers and those treated as MSDP SAs would follow the existing MSDP rules.

> 
> 3) Btw: It would be good if you would add some picture to your draft
>    starting from section 2 to illustrate your text example PE1, PE2
>    and so on.

Sure.

> 
>    Also, your draft says:
> 
>      [RFC6514] only specifies that a PE receiving the MVPN SA routes, say
>      PE2, will advertise (C-S,C-G) C-multicast routes if it has
>      corresponding (C-*,C-G) state learnt from its CE
> 
>    can you point me to the text in 6514 that says that ?

The full text is the following:

14.2.  Receiver(s) within a Site

   ...

   When (as a result of receiving PIM messages from one of its CEs) a PE
   creates, in one of its MVPN-TIBs, a (new) (C-*,C-G) entry with a non-
   empty outgoing interface list that contains one or more PE-CE
   interfaces, the PE MUST check if it has any matching Source Active
   A-D routes.  If there is one or more such matching routes, and the
   best path to C-S carried in the matching route(s) is reachable
   through some other PE, then for each such route the PE MUST originate
   a Source Tree Join C-multicast route.  If there is one or more such
   matching routes, and the best path to C-S carried in the matching
   route(s) is reachable through a CE connected to the PE, then for each
   such route the PE MUST originate a PIM Join (C-S,C-G) towards the CE.

   When, as a result of receiving a new Source Active A-D route, a PE
   updates its VRF with the route, the PE MUST check if the newly
   received route matches any (C-*,C-G) entries.  If there is a matching
   entry, and the best path to C-S carried in the (A-D) route is
   reachable through some other PE, the PE MUST originate a Source Tree
   Join C-multicast route for the (C-S,C-G) carried by the route.  If
   there is a matching entry, and the best path to C-S carried in the
   (A-D) route is reachable through a CE connected to the PE, the PE
   MUST originate a PIM Join (C-S,C-G) towards the CE.

Jeffrey

> 
> Cheers
>     Toerless
> 
> On Wed, Nov 22, 2017 at 02:38:09PM -0800, Leonard Giuliano wrote:
> > Toerless,
> >
> > Thanks for the comments.  After thinking about your feedback on RFC4610 a
> > bit, I'm not sure that case is applicable here.  Consider the 2 directions
> > of interworking:
> >
> > 1) MSDP SA/AnycastRP_PIM_Register -> MVPN SA
> >
> > 2) MVPN SA -> MSDP SA/AnycastRP_PIM_Register
> >
> > As I understand, #1 is already covered by RFC6513/6514.  #2 is the missing
> > piece that this draft attempts to address.  I don't believe #2 will be
> > applicable for RFC4610, as these registers only go to members of the RP
> > set.  And the RP set should be configured on all the C-RPs.  It wouldn't
> > make much sense to have these registers transit the MVPN domain to go to
> > an AnycastRP not in the configured RP set.
> >
> > Hope this is clear, and let me know if I'm missing anything.
> >
> > -Lenny
> >
> > | -----Original Message-----
> > | From: BESS [mailto:bess-bounces@ietf.org] On Behalf Of Toerless Eckert
> > | Sent: Monday, November 13, 2017 9:43 PM
> > | To: bess@ietf.org
> > | Cc: mboned@ietf.org
> > | Subject: [bess] bess: draft-zzhang-bess-mvpn-msdp-sa-interoperation
> > |
> > | Jeffrey presented subject draft in mboned. Given how i am
> > | not usually tracking BESS WG mailing list and may not be around:
> > |
> > | I would like to see subject draft to be adopted as a WG document in BESS
> > | and become an update to RFC6514 (not to say bugfix ;-).
> > |
> > | Feeedback detail: The draft should be amended to fix the same problem
> not only for
> > | MSDP SA but also RFC4610 and probably accordingly change the draft
> name.
> > |
> > | Cross-posted to mboned (sorry) because there where a couple of MBoned
> > | participants expressing support for the draft in BESS and may like me not
> > | be BESS regulars.
> > |
> > | Cheers
> > |     Toerless
> 
> --
> ---
> tte@cs.fau.de
> 
> _______________________________________________
> BESS mailing list
> BESS@ietf.org
> https://urldefense.proofpoint.com/v2/url?u=https-
> 3A__www.ietf.org_mailman_listinfo_bess&d=DwICAg&c=HAkYuh63rsuhr6Scbf
> h0UjBXeMK-
> ndb3voDTXcWzoCI&r=f7wsLGcfzAWDNS6XNTBZwj_OLAOsZZqdrR2IDAzeZqE&
> m=hQz-NA6r7ahWKqMy6aI7ZXX5lvGX1ubRovr3Co5_VNE&s=rC5k8JOSHYD-
> XaNaPGxhtl-yyDQhzqd909XjwXnS5EI&e=