Re: [bess] Routing Directorate Review for draft-ietf-bess-evpn-vpws-10

Sami Boutros <sboutros@vmware.com> Mon, 13 March 2017 14:46 UTC

Return-Path: <sboutros@vmware.com>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 969CF129517; Mon, 13 Mar 2017 07:46:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=onevmw.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tQwbBRfdvZMr; Mon, 13 Mar 2017 07:46:50 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0043.outbound.protection.outlook.com [104.47.42.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68B29129549; Mon, 13 Mar 2017 07:46:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=onevmw.onmicrosoft.com; s=selector1-vmware-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=lRmVj+Cm2VaAJa4p8B44nis0PlCbqdy+V9IQzV8R3nA=; b=LVvXlmppzHwrP/ytvOlQFe46DPuU3jg2aBWq3WB0dpsIUtNj/wykO7LcGEEG//Vopz+Drk2StolvmCwg5XsPVksDvTSjmiq3BJWFNCdPtlicDtEylaj3iOcwGFt8gA7i6sisSgAdquX5Ky78FAZBBKy+uI24b3IM3ZBV/DOIjuU=
Received: from BN6PR05MB3009.namprd05.prod.outlook.com (10.173.19.15) by BN6PR05MB3009.namprd05.prod.outlook.com (10.173.19.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.977.5; Mon, 13 Mar 2017 14:46:49 +0000
Received: from BN6PR05MB3009.namprd05.prod.outlook.com ([10.173.19.15]) by BN6PR05MB3009.namprd05.prod.outlook.com ([10.173.19.15]) with mapi id 15.01.0977.010; Mon, 13 Mar 2017 14:46:49 +0000
From: Sami Boutros <sboutros@vmware.com>
To: "Rabadan, Jorge (Nokia - US)" <jorge.rabadan@nokia.com>, "Acee Lindem (acee)" <acee@cisco.com>, "bess@ietf.org" <bess@ietf.org>, Routing ADs <rtg-ads@tools.ietf.org>, Routing Directorate <rtg-dir@ietf.org>, "draft-ietf-bess-evpn-vpws@ietf.org" <draft-ietf-bess-evpn-vpws@ietf.org>
Thread-Topic: Routing Directorate Review for draft-ietf-bess-evpn-vpws-10
Thread-Index: AQHSlDuI/Ow9Knx4yEm0UAqeXGTsw6GM45SAgATD4oD//4dBgIABrjyA//+WhIA=
Date: Mon, 13 Mar 2017 14:46:49 +0000
Message-ID: <C119CFBA-D7D2-49D0-9DEF-3345E752F259@vmware.com>
References: <D4DF046E.A0B7A%acee@cisco.com> <3954A93E-FA95-43DE-9CC5-40725C94C4A1@vmware.com> <D4EB020B.A1450%acee@cisco.com> <2F8E6D0C-D7C6-4693-901D-0EF2AC2D6224@vmware.com> <A9F382CB-F71A-46C6-96E8-FD00778A9E46@nokia.com>
In-Reply-To: <A9F382CB-F71A-46C6-96E8-FD00778A9E46@nokia.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: nokia.com; dkim=none (message not signed) header.d=none;nokia.com; dmarc=none action=none header.from=vmware.com;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [2601:642:4400:5082:8c03:3ae4:26e:2fb0]
x-microsoft-exchange-diagnostics: 1; BN6PR05MB3009; 7:BjMAXfPGZzgafu0/EiPyoBgobcDl30mEAYP+2fJ2QiWJg2f4vc7hRs0GXdti2X4XcgduyXyMohW+S4cy55KzUdKZtZ2VErjeP5koIbkRR3wVV73m7RanInY9EeI103KZcBkkPbCobx/h5GPKObUdusUO3MZ18FifHvGbeaQQ1Ab5fsJX67DQe/+BR/HSn+56j2X0f5En4AnZFFAkpJbWgAtNZSrCrxRZBRRVRBXQbPN3CATLxrvr9RYY0zU6vEM1e9aMweecqL55/vHDkXCRtCr/+CjrGN+NeHQnRi3LEl6tdvkV7D9dn07HcO7ESEhqQJ+XlRJh/yTQct/Q0h33qw==; 20:jcuna6z8vqLs9yHQ/TBqM0xzsytelT7fqqQm36iZ0TGRdxpuasGOmgbZxpmkObf1V0dmzNviH3BtnfVmF97JgjN/r/P8dvoRY+5+2gO7i2fbDPugFHqcYgPodyIs8S3jao3BbBP6+Cf86ZeA4VX9gfNpYPZYbrVs6tSBdlRp5C8=
x-ms-office365-filtering-correlation-id: b8c75c3d-1861-499c-b078-08d46a1fc7b4
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN6PR05MB3009;
x-microsoft-antispam-prvs: <BN6PR05MB300994FCF5DD33DD2DCAEF0BBE250@BN6PR05MB3009.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(61668805478150)(82608151540597)(95692535739014);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6041248)(20161123562025)(20161123560025)(20161123564025)(20161123555025)(20161123558025)(6072148); SRVR:BN6PR05MB3009; BCL:0; PCL:0; RULEID:; SRVR:BN6PR05MB3009;
x-forefront-prvs: 0245702D7B
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(39830400002)(39450400003)(39410400002)(24454002)(377454003)(77096006)(2950100002)(6486002)(6506006)(229853002)(2900100001)(5890100001)(5660300001)(8676002)(2501003)(81166006)(7736002)(122556002)(86362001)(305945005)(36756003)(8936002)(25786008)(82746002)(106116001)(3280700002)(6246003)(99286003)(38730400002)(53546006)(230783001)(6512007)(33656002)(93886004)(189998001)(6436002)(54356999)(76176999)(3660700001)(2906002)(6116002)(83716003)(102836003)(53936002)(50986999)(104396002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR05MB3009; H:BN6PR05MB3009.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <41697F0D993CB54DB0381A208CBBED5E@namprd05.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: vmware.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Mar 2017 14:46:49.1038 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR05MB3009
Archived-At: <https://mailarchive.ietf.org/arch/msg/bess/gm0FqrRwhWg2VuryW7Ou-sOREAg>
Subject: Re: [bess] Routing Directorate Review for draft-ietf-bess-evpn-vpws-10
X-BeenThere: bess@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bess>, <mailto:bess-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess/>
List-Post: <mailto:bess@ietf.org>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bess>, <mailto:bess-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 13 Mar 2017 14:46:53 -0000

Hi Jorge,

The issue I see with ignoring the routes with P and B Flags clear is the following:

What if a PE advertised P or B Flag set then decide to send P and B Flags clear, what should we do in that case?

Ignore the P and B Flags clear route and keep the old P or B Flag set route, wouldn’t that be incorrect?

Thanks,

Sami


On 3/13/17, 6:04 AM, "Rabadan, Jorge (Nokia - US)" <jorge.rabadan@nokia.com> wrote:

>Sami, 
>
>About this one:
>
>“  1. Why is receiving an extended community with both the P and B flags
>set treated as a withdrawal, while it is ignored for the case when both
>the P and B flags are clear?
>
>I agree both should be treated as a withdrawal, I will change the text.”
>
>
>[JORGE] Sami, please correct this:
>
>“If the PE receives a route with both B and P
>   clear, it MUST treat the route as a withdrawal from the sender PE.”
>
>As you have in the following paragraph, flags P=B=0 is perfectly valid:
>
>“In multihoming single-active scenario for a given VPWS service
>   instance, the DF election should result in the Primary-elected PE for
>   the VPWS service instance advertising the P Flag set and the B Flag
>   clear, the Backup elected PE should advertise the P Flag clear and
>   the B Flag set, ****and the rest of the PEs in the same ES should signal
>   both P and B Flags clear.****”
>
>
>Let me know if I’m missing something please. Don’t want to hold the progress, but this is important.
>Thank you.
>Jorge
>
>
>
>On 3/12/17, 8:24 PM, "Sami Boutros" <sboutros@vmware.com> wrote:
>
>    Hi Acee,
>    
>    Please find attached document with all comments addresses, if all good will 
>    Submit before the cut-off tomorrow.
>    
>    Please see comments inline.
>    On 3/12/17, 11:36 AM, "Acee Lindem (acee)" <acee@cisco.com> wrote:
>    
>    
>    >Hi Sami, 
>    >
>    >I think this version reads much better. I still have a couple comments and
>    >questions. 
>    >
>    >  1. Why is receiving an extended community with both the P and B flags
>    >set treated as a withdrawal, while it is ignored for the case when both
>    >the P and B flags are clear?
>    
>    I agree both should be treated as a withdrawal, I will change the text.
>    
>    >  2. A related question is if a route with both the P and B flags clear is
>    >ignored, won’t this break DF election described on the bottom of page 8?
>    >It says “the rest of the PEs in the same ES should single both the P and B
>    >Flags clear.”
>    
>    The DF election is between the PE(s) attached to the ES and has nothing to do 
>    With the remote PE receiving the routes from the PE(s) attached to the ES.
>    The remote PE expect to receive one route with P Flag set and another route 
>    With with B flag set from another PE, all other routes received from other PE(s) 
>    Attached to the same ES are not needed, and hence can be treated as withdrawal
>    Of previous routes from those Pe(s). 
>    
>    > 
>    >  3. Also, during DF election, is it implementation specific which backup
>    >is chosen if multiple PEs advertise the B Flag set in their respective
>    >extended communities?
>    
>    The DF election MUST always result in one Backup and One primary, however 
>    During transit more than one route with P or B Flags can be received.
>    
>    >Why isn’t it the last one similar to the primary PE
>    >selection?
>    
>    Ok, to be consistent, will change the text to have the remote PE select the 
>    last advertising backup PE.
>    
>    > 
>    >  4. Both VID and VLAN ID are used in the document. I didn’t research this
>    >but from the context it appears these are synonymous. If VID is used, I’d
>    >also add it to the “Terminology” in 1.1.
>    
>    Ok.
>    >
>    >  A few more Nits:
>    >*** draft-ietf-bess-evpn-vpws-11.txt.orig	2017-03-12 13:56:46.000000000
>    >-0400
>    >--- draft-ietf-bess-evpn-vpws-11.txt	2017-03-12 14:34:06.000000000 -0400
>    >***************
>    >*** 153,163 ****
>    >     instance. As with the Ethernet Tag in standard EVPN, the VPWS service
>    >     instance identifier has uniqueness within an EVPN instance.
>    >  
>    >!    For EVPN routes, the Ethernet Tag ID are set to zero for Port-based,
>    >!    VLAN-based, and VLAN-bundle interface mode and it is set to non-zero
>    >!    Ethernet tag ID for VLAN-aware bundle mode. Conversely, for EVPN-
>    >     VPWS, the Ethernet tag ID in the Ethernet A-D route MUST be set to a
>    >!    non-zero value for all four  service interface types.
>    >  
>    >     In terms of route advertisement and MPLS label lookup behavior, EVPN-
>    >     VPWS resembles the VLAN-aware bundle mode of [RFC7432] such that when
>    >--- 153,163 ----
>    >     instance. As with the Ethernet Tag in standard EVPN, the VPWS service
>    >     instance identifier has uniqueness within an EVPN instance.
>    >  
>    >!    For EVPN routes, the Ethernet Tag IDs are set to zero for Port-based,
>    >!    VLAN-based, and VLAN-bundle interface mode and set to non-zero
>    >!    Ethernet Tag IDs for VLAN-aware bundle mode. Conversely, for EVPN-
>    >     VPWS, the Ethernet tag ID in the Ethernet A-D route MUST be set to a
>    >!    non-zero value for all four service interface types.
>    >  
>    >     In terms of route advertisement and MPLS label lookup behavior, EVPN-
>    >     VPWS resembles the VLAN-aware bundle mode of [RFC7432] such that when
>    >***************
>    >*** 181,188 ****
>    >     Ethernet frames are transported as is and the tags are not altered.
>    >  
>    >     The MPLS label value in the Ethernet A-D route can be set to the
>    >!    VXLAN Network Identifier (VNI) for VxLAN encap, and this VNI may have
>    >!    a global scope or local scope per PE and may also be made equal to
>    >     the VPWS service instance identifier set in the Ethernet A-D route.
>    >  
>    >     The Ethernet Segment identifier encoded in the Ethernet A-D per-EVI
>    >--- 181,188 ----
>    >     Ethernet frames are transported as is and the tags are not altered.
>    >  
>    >     The MPLS label value in the Ethernet A-D route can be set to the
>    >!    VXLAN Network Identifier (VNI) for VXLAN encap, and this VNI may have
>    >!    a global scope or local scope per PE and may also be equal to
>    >     the VPWS service instance identifier set in the Ethernet A-D route.
>    >  
>    >     The Ethernet Segment identifier encoded in the Ethernet A-D per-EVI
>    >***************
>    >*** 312,321 ****
>    >  
>    >  2.3 VLAN-Aware Bundle Service Interface
>    >  
>    >!    Contrary to EVPN, in EVPN-VPWS this service interface maps to VLAN-
>    >     based service interface (defined in section 2.1) and thus this
>    >     service interface is not used in EVPN-VPWS.  In other words, if one
>    >!    tries to define data-plane and control plane behavior for this
>    >     service interface, one would realize that it is the same as that of
>    >     VLAN-based service.
>    >  
>    >--- 312,321 ----
>    >  
>    >  2.3 VLAN-Aware Bundle Service Interface
>    >  
>    >!    Contrary to EVPN, in EVPN-VPWS this service interface maps to a VLAN-
>    >     based service interface (defined in section 2.1) and thus this
>    >     service interface is not used in EVPN-VPWS.  In other words, if one
>    >!    tries to define data plane and control plane behavior for this
>    >     service interface, one would realize that it is the same as that of
>    >     VLAN-based service.
>    >  
>    >***************
>    >*** 326,332 ****
>    >     signal VPWS services. The Ethernet Segment Identifier field is set to
>    >     the customer ES and the Ethernet Tag ID 32-bit field MUST be set to
>    >     the VPWS service instance identifier value. The VPWS service instance
>    >!    identifier value MAY be set to a 24-bit value, when 24-bit value is
>    >     used, it MUST be right aligned. For both EPL and EVPL services using
>    >     a given VPWS service instance, the pair of PEs instantiating that
>    >     VPWS service instance will each advertise a per-EVI Ethernet A-D
>    >--- 326,332 ----
>    >     signal VPWS services. The Ethernet Segment Identifier field is set to
>    >     the customer ES and the Ethernet Tag ID 32-bit field MUST be set to
>    >     the VPWS service instance identifier value. The VPWS service instance
>    >!    identifier value MAY be set to a 24-bit value and when a 24-bit value
>    >is
>    >     used, it MUST be right aligned. For both EPL and EVPL services using
>    >     a given VPWS service instance, the pair of PEs instantiating that
>    >     VPWS service instance will each advertise a per-EVI Ethernet A-D
>    >***************
>    >*** 354,361 ****
>    >  
>    >  3.1 EVPN Layer 2 attributes extended community
>    >  
>    >!    This draft proposes a new extended community [RFC4360], to be
>    >!    included with the per-EVI Ethernet A-D route. This attribute is
>    >     mandatory if multihoming is enabled.
>    >  
>    >          +------------------------------------+
>    >--- 354,361 ----
>    >  
>    >  3.1 EVPN Layer 2 attributes extended community
>    >  
>    >!    This document defines an extended community [RFC4360], to be
>    >!    included with per-EVI Ethernet A-D routes. This attribute is
>    >     mandatory if multihoming is enabled.
>    >  
>    >          +------------------------------------+
>    >***************
>    >*** 423,429 ****
>    >  
>    >     In a multihoming all-active scenario, there is no DF election, and
>    >     all the PEs in the ES that are active and ready to forward traffic
>    >!    to/from the CE will set the P Flag. A remote PE will do per-flow load
>    >     balancing to the PEs that set the P Flag for the same Ethernet Tag
>    >     and ESI. The B Flag in control flags SHOULD NOT be set in the
>    >     multihoming all-active scenario and MUST be ignored by receiving
>    >--- 423,429 ----
>    >  
>    >     In a multihoming all-active scenario, there is no DF election, and
>    >     all the PEs in the ES that are active and ready to forward traffic
>    >!    to/from the CE will set the P Flag. A remote PE will do per-flow load-
>    >     balancing to the PEs that set the P Flag for the same Ethernet Tag
>    >     and ESI. The B Flag in control flags SHOULD NOT be set in the
>    >     multihoming all-active scenario and MUST be ignored by receiving
>    >***************
>    >*** 493,499 ****
>    >  
>    >     All PEs and ASBRs are enabled for the EVPN SAFI and exchange per-EVI
>    >     Ethernet A-D routes, one route per VPWS service instance.  For inter-
>    >!    AS option B, the ASBRs re-advertise these routes with NEXT_HOP
>    >     attribute set to their IP addresses as per [RFC4271]. The link
>    >     between the CE and the PE is either a C-tagged or S-tagged interface,
>    >     as described in [802.1Q], that can carry a single VLAN tag or two
>    >--- 493,499 ----
>    >  
>    >     All PEs and ASBRs are enabled for the EVPN SAFI and exchange per-EVI
>    >     Ethernet A-D routes, one route per VPWS service instance.  For inter-
>    >!    AS option B, the ASBRs re-advertise these routes with the NEXT_HOP
>    >     attribute set to their IP addresses as per [RFC4271]. The link
>    >     between the CE and the PE is either a C-tagged or S-tagged interface,
>    >     as described in [802.1Q], that can carry a single VLAN tag or two
>    >***************
>    >*** 570,576 ****
>    >     Finally, EVPN may employ data plane egress link protection mechanisms
>    >     not available in VPWS. This can be done by the primary PE (on local
>    >     AC down) using the label advertised in the per-EVI Ethernet A-D route
>    >!    by the backup PE to encapsulate the traffic and direct it to backup
>    >     PE.
>    >  
>    >  6 Failure Scenarios
>    >--- 570,576 ----
>    >     Finally, EVPN may employ data plane egress link protection mechanisms
>    >     not available in VPWS. This can be done by the primary PE (on local
>    >     AC down) using the label advertised in the per-EVI Ethernet A-D route
>    >!    by the backup PE to encapsulate the traffic and direct it to the
>    >backup
>    >     PE.
>    >  
>    >  6 Failure Scenarios
>    >***************
>    >*** 592,600 ****
>    >     For a faster convergence in multi-homed scenarios with either Single-
>    >     Active Redundancy or All-active redundancy, a mass withdraw technique
>    >     is used. A PE previously advertising a per-ES Ethernet A-D route, can
>    >!    withdraw this route signaling to the remote PEs to switch all the
>    >     VPWS service instances associated with this multi-homed ES to the
>    >!    backup PE
>    >  
>    >  7 Acknowledgements
>    >  
>    >--- 592,600 ----
>    >     For a faster convergence in multi-homed scenarios with either Single-
>    >     Active Redundancy or All-active redundancy, a mass withdraw technique
>    >     is used. A PE previously advertising a per-ES Ethernet A-D route, can
>    >!    withdraw this route by signaling to the remote PEs to switch all the
>    >     VPWS service instances associated with this multi-homed ES to the
>    >!    backup PE.
>    >  
>    >  7 Acknowledgements
>    
>    Thanks,
>    
>    Sami
>    >
>    
>