[bess] Re: Short new WGLC and IPR poll for draft-ietf-bess-evpn-ipvpn-interworking-12
Gyan Mishra <hayabusagsm@gmail.com> Tue, 04 February 2025 04:23 UTC
Return-Path: <hayabusagsm@gmail.com>
X-Original-To: bess@ietfa.amsl.com
Delivered-To: bess@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82C62C169433; Mon, 3 Feb 2025 20:23:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.862
X-Spam-Level:
X-Spam-Status: No, score=-0.862 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NUMERIC_HTTP_ADDR=1.242, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X7j5jevhanjG; Mon, 3 Feb 2025 20:23:25 -0800 (PST)
Received: from mail-pl1-x636.google.com (mail-pl1-x636.google.com [IPv6:2607:f8b0:4864:20::636]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 425CBC15109C; Mon, 3 Feb 2025 20:23:20 -0800 (PST)
Received: by mail-pl1-x636.google.com with SMTP id d9443c01a7336-21bc1512a63so98493135ad.1; Mon, 03 Feb 2025 20:23:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1738642999; x=1739247799; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=A2nbqQU/h4+BoU6N1/qmmKPXKX7XTxLfqtmY0AkSGGQ=; b=dQYHJmo3qY81AHbre+mlCjCM/NkGXwhDGZIJE4e+ETvdV3prZgu8eX1IHgliYrptPy vVVWOGwCvb5dNkZZuYI+2NOYUuC7UwZOlrv9mx4C/LtEmCGoxHsu6IXxYuF+JQ7j9da5 PDKdLNmOhUAnq2KfyceB2z3zlv8uaTQU7pamoRABFCCFgBIiPTcmmYE3HUYiZsc7O69k PuqghJ+3skFdUs5PH5ys6+v5ESqGN2RXye6bNH3Hc1OoM2dQ/7zpYE1qpY0B48SFoVB/ xUL3CCTqcPP+c5P0WQWVg1xxhMWXtZaL6uzUmin3qd3+FHx2aF7aTGA4D6zj8h6AiOU3 yj8g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1738642999; x=1739247799; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=A2nbqQU/h4+BoU6N1/qmmKPXKX7XTxLfqtmY0AkSGGQ=; b=puX7kTITC1Du428jqI94XO5jF1BGzIvcwZK+F7YX1OyMnXZgNoSgRlHRFL5hSI9MoU VfIgLlU9Bw/G3ZSc3lVZLq4c21Pj9O8j5BhQHQEe6htUNVArEq/k+ZmOd8koyVbzZp7d 6zbPkSrVtd2ySba8NXnz7NqTSVDfS/+JTtAtV8diszk+ql7rCTY8uhULJKf18s1OdgPI rw0amdpcmuQyQHRhulknYgnLKoUaQ/OH0vxK//L/O/bsJ83CyQJpnLrgrB9ITHTBlsKY 1LvxXblaz20q88hzKqZQHvrIHW9cqJX91DyXPOV61gcQFhywSXHgmZFiSdprglV6KIpE 9m8A==
X-Forwarded-Encrypted: i=1; AJvYcCUr/zjuhxfa6ISB4LbCx+P5q5Y4wI31HZ4QsQoggd0f2F2Bwr5JnuLcq+FZsfSSuP4zPSuy@ietf.org, AJvYcCXPpN7PNpkutchKyUNDfGx1bayon2kt59TYbUEn+jmDPOhVgeKtm2xTnDQK826vlEb9GBmtmLSKeXmvE66WuBx8S1SMzOFIv8FUuFXpnNmfe+yl43ceqpYH@ietf.org
X-Gm-Message-State: AOJu0YypwvyEWkEdjaiA3oeFuBX49BoQSzLkSvjhKB8FRMoVhwLXeN5V lo+q4wPQ+NMeP68NQXPSeumLPykZ8GZqpzqXAmCJuI0mvbqKGnKPv8fyyWMgJJuEMbthUHenUdp tDIaCCO5A8aDsRJxzdFj/W2unvu4=
X-Gm-Gg: ASbGnctfhDnSqkgYv9gotUzgjv/y+g2kSxcfefMj3Lo7aseoN2nBHv56VkPs2g4RKqo tP1uJkJXCRRhhl6QDaHMV86kgr6c6UeR2VOtYsjYEmYiGA1d8CxL5KKaKPb1NyxRR+r2H+iYQTD X+5ukEBGjgfb81SC1yrpKlA9BKW/8nSgE=
X-Google-Smtp-Source: AGHT+IEYknf8OHAbHDHXE186lgyBVp+ItJe4kIlXokaPQjthlQX0ohVzUzK/+GAj2omXbXi7yy+fO5S7ebTcGvAYljs=
X-Received: by 2002:a17:902:f609:b0:21f:1bd:efd4 with SMTP id d9443c01a7336-21f01bdf311mr26174725ad.19.1738642998668; Mon, 03 Feb 2025 20:23:18 -0800 (PST)
MIME-Version: 1.0
References: <SJ0PR11MB5136D3166B4B1BD99167D97CC2EC2@SJ0PR11MB5136.namprd11.prod.outlook.com> <CABNhwV3G8DN8nzdihstAQTsgAS=+DdBnejLD=PFxZGO=h2B4Gw@mail.gmail.com> <SA1PR08MB721597ECC51455CC5A5E94D1F7EE2@SA1PR08MB7215.namprd08.prod.outlook.com> <CABNhwV170Qko3-WzaVrP+iXCW=C_5C8svLymd4x6QF5vt6RFGg@mail.gmail.com> <SA1PR08MB721511F7FEED9DCA783D76A3F7E92@SA1PR08MB7215.namprd08.prod.outlook.com> <CABNhwV3m9k_D_WqbACAXAtHUiT2+gtmx9yxmmD8gami+B+zuOA@mail.gmail.com> <SA1PR08MB7215F72622428D55FC6C5422F7E82@SA1PR08MB7215.namprd08.prod.outlook.com> <CABNhwV2Yy-wvGa051V7pOL_ZLPi8KR+6Dx7PH6e3E=Z7KEaU7g@mail.gmail.com> <CABNhwV1L8smS05XxYJxQfhUG=e-SO6ZzHWDZ2HunaBhAcXgj8Q@mail.gmail.com> <SA1PR08MB7215E70EAA78D6D5CC8CA8CFF7F52@SA1PR08MB7215.namprd08.prod.outlook.com>
In-Reply-To: <SA1PR08MB7215E70EAA78D6D5CC8CA8CFF7F52@SA1PR08MB7215.namprd08.prod.outlook.com>
From: Gyan Mishra <hayabusagsm@gmail.com>
Date: Mon, 03 Feb 2025 23:23:07 -0500
X-Gm-Features: AWEUYZmrbRLvfaMalF5ppID_RziPSvMVPsdfiT2XTUgUqKCNX1xFN2R8CxaZzQQ
Message-ID: <CABNhwV3g11yotOL0gMKS_BW69O2r8TOaADGt1X-eMfTA3YzfRw@mail.gmail.com>
To: "Jorge Rabadan (Nokia)" <jorge.rabadan@nokia.com>
Content-Type: multipart/alternative; boundary="00000000000053bab6062d495e6b"
Message-ID-Hash: 7AQDUWO6HE3754Z3FRBIWXYGPN2BMMBA
X-Message-ID-Hash: 7AQDUWO6HE3754Z3FRBIWXYGPN2BMMBA
X-MailFrom: hayabusagsm@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-bess.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "Stephane Litkowski (slitkows)" <slitkows=40cisco.com@dmarc.ietf.org>, "draft-ietf-bess-evpn-ipvpn-interworking@ietf.org" <draft-ietf-bess-evpn-ipvpn-interworking@ietf.org>, "bess@ietf.org" <bess@ietf.org>, "Bernier, Daniel" <daniel.bernier@bell.ca>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [bess] Re: Short new WGLC and IPR poll for draft-ietf-bess-evpn-ipvpn-interworking-12
List-Id: BGP-Enabled ServiceS working group discussion list <bess.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/bess/wNi9GvjkhAsuY0mXdlKIfH63rq0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bess>
List-Help: <mailto:bess-request@ietf.org?subject=help>
List-Owner: <mailto:bess-owner@ietf.org>
List-Post: <mailto:bess@ietf.org>
List-Subscribe: <mailto:bess-join@ietf.org>
List-Unsubscribe: <mailto:bess-leave@ietf.org>
Agreed. I am good. Thank you Gyan On Mon, Feb 3, 2025 at 8:31 AM Jorge Rabadan (Nokia) < jorge.rabadan@nokia.com> wrote: > Hi Gyan, > > > > The key difference between a regular and a composite domain is that in a > composite domain, multiple ISF SAFIs are used to advertise ISF prefixes of > an IP-VRF, whereas a regular domain uses only one. As discussed in the case > of gateway procedures for regular domains, the procedures on composite PEs > remain unchanged regarding how they advertise EVPN and/or IPVPN routes for > a given encapsulation. > > > > Regarding the wording of “reorigination” versus “readvertisement” — it > depends on the perspective IMO. > > > > Consider Figure 2, where PE1 advertises an EVPN VXLAN IP Prefix route for > 10.0.0.0/24. GW1 imports 10.0.0.0/24 into the IP-VRF route table and then > reoriginates an IPVPN route, treating the prefix as if it were locally > learned (from the perspective of IPVPN, although if needed you can > ‘propagate’ some bgp path attributes between SAFIs as discussed in section > 5). > > > > From the perspective of how the route is advertised to a BGP peer with its > encapsulation parameters, this is a reorigination, as discussed, and it > follows existing specifications. However, from the viewpoint of the prefix > and certain path attributes, the route is effectively propagated through > the gateways all the way to PE2. > > > > Personally, I don’t think it matters much, since the spec is clear. The > proof is that it has been implemented by multiple vendors (at least 5 > implementations that I’m aware of) and interoperability has been proven for > a few years now. So I don’t think there is ambiguity in the text. > > Thanks. > > Jorge > > > > > > *From: *Gyan Mishra <hayabusagsm@gmail.com> > *Date: *Friday, January 31, 2025 at 9:29 PM > *To: *Jorge Rabadan (Nokia) <jorge.rabadan@nokia.com> > *Cc: *Stephane Litkowski (slitkows) <slitkows=40cisco.com@dmarc.ietf.org>, > draft-ietf-bess-evpn-ipvpn-interworking@ietf.org < > draft-ietf-bess-evpn-ipvpn-interworking@ietf.org>, bess@ietf.org < > bess@ietf.org>, Bernier, Daniel <daniel.bernier@bell.ca> > *Subject: *Re: [bess] Short new WGLC and IPR poll for > draft-ietf-bess-evpn-ipvpn-interworking-12 > > > > *CAUTION:* This is an external email. Please be very careful when > clicking links or opening attachments. See the URL nok.it/ext for > additional information. > > > > Hi Jorge > > > > In section 7 composite PE with congruent IPVPN & EVPN PEs at the inter > domain boundary between the domains, I wanted to confirm that this is also > underlay independent and hence the IPVPN and EVPN prefixes would be > automatically propagated between domains without any reorigination. > > > > The composite case applies to this draft below and so could be an > alternative to draft below drafts service interworking solution. The other > alternative I had come up with that I mentioned is inter-as opt-a for 7.2 > service IW. > > > > Your composite PE section 7 is much better as it’s a single peer. > > > > > https://datatracker.ietf.org/doc/html/draft-ietf-spring-srv6-mpls-interworking-00 > > > > Last question on reorigination versus readvertisement. We have the new > paragraph addition which says reorigination but I don’t see anywhere in the > draft saying reorigination but do see readvertising. If we are using > reorigination in the paragraph then then the draft maybe wherever we say > readvertising we should change reorigination to match or vice versa. I > believe for service interworking there is a reorigination keyword used for > GW/IW function going from safi-x to safi-y. > > > > Thanks > > > > > <http://www.verizon.com/> > > *Gyan Mishra* > > *Network Solutions Architect * > > *Email **gyan.s.mishra@verizon.com* <gyan.s.mishra@verizon.com> > > *M 301 502-1347* > > > > > > > > On Fri, Jan 31, 2025 at 11:06 PM Gyan Mishra <hayabusagsm@gmail.com> > wrote: > > > > Hi Jorge > > > > Please see in-line > > <http://www.verizon.com/> > > *Gyan Mishra* > > *Network Solutions Architect * > > *Email **gyan.s.mishra@verizon.com* <gyan.s.mishra@verizon.com> > > *M 301 502-1347* > > > > > > > > On Fri, Jan 31, 2025 at 11:16 AM Jorge Rabadan (Nokia) < > jorge.rabadan@nokia.com> wrote: > > Hi Gyan, > > > > Please see in-line. > > > > > > *From: *Gyan Mishra <hayabusagsm@gmail.com> > *Date: *Thursday, January 30, 2025 at 11:19 PM > *To: *Jorge Rabadan (Nokia) <jorge.rabadan@nokia.com> > *Cc: *Stephane Litkowski (slitkows) <slitkows=40cisco.com@dmarc.ietf.org>, > draft-ietf-bess-evpn-ipvpn-interworking@ietf.org < > draft-ietf-bess-evpn-ipvpn-interworking@ietf.org>, bess@ietf.org < > bess@ietf.org>, Bernier, Daniel <daniel.bernier@bell.ca> > *Subject: *Re: [bess] Short new WGLC and IPR poll for > draft-ietf-bess-evpn-ipvpn-interworking-12 > > > > *CAUTION:* This is an external email. Please be very careful when > clicking links or opening attachments. See the URL nok.it/ext for > additional information. > > > > Hi Jorge > > > > Responses in-line > > > > On Thu, Jan 30, 2025 at 8:02 AM Jorge Rabadan (Nokia) < > jorge.rabadan@nokia.com> wrote: > > Hi Gyan, > > > > Thank you for your comments. > > I added this text at the end of the introduction section: > > > > "The interworking procedures in this document always require creating an > IP-VRF on the interworking PE. When connecting different domains, the > interworking PE follows these steps: it receives routes from one domain > (along with that domain’s encapsulation parameters), installs them in the > IP-VRF route table, and then reoriginates the routes with the encapsulation > parameters of the adjacent domain before advertising them. This > reorigination process ensures that the procedures remain independent of the > specific transport tunnels used in each domain.” > > > > I hope it helps. > > > > Gyan> I want to make sure I understand the reorigination with the > gateway function see below: > > > > So this solution is definitely service interworking with the reorigination > which makes it underlay protocol independent. Please mention service > interworking and transport protocol independence > > *[jorge] Since the procedures mention IP-VPN and EVPN AFI-SAFIs, I think > it is clear that the procedures happen in the context of a VRF, i.e. a > service. But sure, no issue in adding “service interworking” to the > clarification text.* > > Gyan> Thank you > > > > > > In a composite domain or PE, IPVPN and EVPN must have different VRF as the > different SAFI cannot share the same VRF. > > *[jorge] Gyan, I have to say that is not true. In our implementations and > a few others, IP-VRFs support multiple intersubnet forwarding families in > the same IP-VRF. IPVPN and EVPN (L3) can definitively use the same IP-VRF. > As described in the text, the IP-VRF in figure 1 can be programmed with ISF > routes of different types at the same.* > > Gyan> I was not sure and was thinking that using a different VRF would be > a way to identify an IPVPN peer from EVPN peer, and the reorigination of > the routes, however I see now EVPN (L3) can be the same VRF as IPVPN as > you said. I was thinking L2/L3 but as this is L3 for both SAFI, as ISF > routes can be different route types. Agreed. > > > > GW > > IPVPN = VRF IPVPN > > EVPN = VRF EVPN > > > > Domain 1 Domain 2 > > VXLAN SRv6 > > R1 - EVPN - GW - PE1 EVPN / IPVPN > > > > GW receives the EVPN routes on EVPN peer (safi-x) and reoriginates the > routes on IPVPN peer (safi-y) > > > > So basically we are just taking the routes from safi-x EVPN peer and > reoriginating the routes on safi-y IPVPN peer. In my original examples the > unicast SAFI on both ends of peering does not require any reorigination > since it’s the same safi. However here we are taking the NLRI and > translating the SAFI from EVPN to IPVPN. So in that case all the RT-2 mac > VRF host routes and RT-5 prefix would all get propagated out to PE1 as > IPVPN routes using the new RT/RD defined for the IPVPN VRF. Same would > happen in the opposite direction. The gateway is configured with > encapsulation for vxlan domain with NVE tunnnel and also has SRv6 locator > config and under VRF peer has SRv6 sid allocation mode per-VRF so it’s not > really underlay independent but underlay dependent since both left vxlan > domain underlay and right side SRv6 domain are stretched to the GW which is > siting on both transports. So in that way it’s doing transport > interworking by butting up the two adjacent domain types to the GW box. In > the case GW box is the VXLAN DCI or ASBR and so sits on the VXLAN side > already so only have to extend the SRv6 domain over to the GW box on the > right side. > > *[jorge] it is independent of the underlay in the sense that importing > routes with certain encapsulation parameters and exporting routes with > certain encapsulation parameters is something specified in other specs and > this one does not change anything about that termination/origination. For > instance, import/export of EVPN VXLAN routes is specified in RFC8365, IPVPN > or EVPN for SRv6 routes is specified in RFC9252 (and so forth)* > > Gyan> Since on the Gateway the link to safi-x on left has the left > domain encapsulation parameters and the link to safi-y on right has left > domain different encapsulation parameters so by doing so I can see the > underlay does not come into play making it underly independent. I’m in > agreement. > > > > > > Please let me know if I got it right. > > > > I modified the paragraph slightly based on my understanding. Figure 8 is > a bit confusing for GW diagram. I would think the GW box since it sits in > the DC side and is the EVPN Denmark PE to the core it should have EVPN > MAC-VRF like Figure 7 being a composite PE. The diagram shows the NVO > tunnels on PE1 and PE2 and the stretched MPLS tunnels to the gateway which > is perfect for the transport interworking. The point I am making about > gateway placement is important as it would always sit on the DC side and > connect to the core PE. You may have to redraw a bit the diagrams so they > all match up. > > Since you have 2 DC one on left and one on right with core in the middle > we are missing a few routers. > > I would make PE1-4 core boxes. I would give different names for DC side > call it leaf for very left and right PE device and add a single GW PE on > left and right side that connects to PE5 and PE1 and PE2. On the right > side GW PE that sits between PE3 PE4 and PE6. We can clean up figure 9 to > also have the clear core & dc demark. The device that connects to the > gateway PE in the DC call if a leaf. > > *[jorge] I believe Figure 8 accurately represents the example we want to > illustrate. For a given tenant, the Gateways can have a single IP-VRF > (without a MAC-VRF) and handle IPVPN (RFC 4364) and EVPN IFL (RFC 9136) > routes within that IP-VRF* > > Gyan> I see now it does since it’s EVPN (L3) and both IPVPN and EVPN > share the same VRF so the drawing illustrates correctly showing all nodes > having IP-VRF. > > > > > > I would label core & dc so you know the demark point for each domain. That > way it matches as well the paragraph below. > > > "The interworking gateway procedures in this document always require > creating an IP-VRF on the gateway PE. When connecting to the core > domains, the gateway PE follows these steps: it receives routes from dc > domain (along with that domain’s dc underlay encapsulation parameters), > installs them in the MAC-VRF route table, and then reoriginates the routes > with the core underlay encapsulation parameters before advertising them to > core PE. This reorigination process as it happens on the core IPVPN peers > with the underlay encapsulation to core PE, it provides the transport > interworking congruence dependency on the specific transport tunnel type by > extending that transport tunnel to the gateway. > > *[jorge] The issue with your text is that core and dc domains are only one > very specific example. This spec covers interworking in any type of > network. Also, as discussed there is no MAC-VRF involved in the procedures > for ISF routes. How about:* > > > > *“The interworking procedures in this document always require creating an > IP-VRF on the interworking PE. When connecting different domains, the > interworking PE follows these steps: it receives routes from one domain > (along with that domain’s encapsulation parameters), installs them in the > IP-VRF route table, and then reoriginates the routes with the encapsulation > parameters of the adjacent domain before advertising them. This > reorigination process ensures that the procedures remain independent of the > specific transport tunnels used in each domain, as it functions as a > service interworking solution.”* > > Gyan> Agreed to make generic with the node naming keep as-is. Text looks > perfect!! > > > > Excellent job with this work as it’s extremely helpful for operators > for IW between mix technologies. > > *Thanks!* > > *Jorge* > > > > > > > > > > About this: > > Example of draft for MPLS/SR-MPLS to SRv6 GW/IW uses a GW for transport > translation interworking > > & service interworking. This is just one draft but their are many drafts > on interworking between technologies and both transport and service > interworking concepts. > > > > > https://datatracker.ietf.org/doc/html/draft-agrawal-spring-srv6-mpls-interworking-15 > > > > We spoke with the authors before draft-ietf-spring-srv6-mpls-interworking > <https://datatracker.ietf.org/doc/html/draft-ietf-spring-srv6-mpls-interworking-00#name-gateway-interworking> > was adopted by SPRING. They will add references to our document for their > section 7.2.1 Gateway Interworking, which is a high level description of > the gateway model we are specifying in our document in detail for > intersubnet forwarding. As discussed, > draft-ietf-bess-evpn-ipvpn-interworking procedures work irrespective of the > encapsulation of the domains, since there is always an IP-VRF instantiation > and the routes are reoriginated with the encapsulation parameters of the > destination domain. > > > > About this: > > Gyan> yes this example is subinterfaces and not tunnels in my opt-a > example. Since this draft is talking about the all the permutations and > details of service interworking and transport independence I wonder if it > would be possible to include as it does not require any gateway feature and > the routes get propagated between domains. > > I don’t think there is anything new to specify with respect to RFC4364 > section 10 option a to guarantee interoperability, and that is not already > described. It would be good to hear from others too, in case I’m > missing something. > > > > Gyan> I understand this gateway procedures much better now and agree > nothing additional is needed. > > > > Thanks. > > Jorge > > > > > > *From: *Gyan Mishra <hayabusagsm@gmail.com> > *Date: *Wednesday, January 29, 2025 at 10:46 PM > *To: *Jorge Rabadan (Nokia) <jorge.rabadan@nokia.com> > *Cc: *Stephane Litkowski (slitkows) <slitkows=40cisco.com@dmarc.ietf.org>, > draft-ietf-bess-evpn-ipvpn-interworking@ietf.org < > draft-ietf-bess-evpn-ipvpn-interworking@ietf.org>, bess@ietf.org < > bess@ietf.org>, Voyer, Daniel <daniel.voyer@bell.ca>, Bernier, Daniel < > daniel.bernier@bell.ca> > *Subject: *Re: [bess] Short new WGLC and IPR poll for > draft-ietf-bess-evpn-ipvpn-interworking-12 > > > > *CAUTION:* This is an external email. Please be very careful when > clicking links or opening attachments. See the URL nok.it/ext for > additional information. > > > > > Hi Jorge > > > > Responses in-line > > > > Thanks > > > > Gyan > > > > > > > > > > On Wed, Jan 29, 2025 at 8:28 AM Jorge Rabadan (Nokia) < > jorge.rabadan@nokia.com> wrote: > > Hi Gyan, > > > > Thanks for reviewing the draft. > > Please see my comments in-line. > > > > *From: *Gyan Mishra <hayabusagsm@gmail.com> > *Date: *Tuesday, January 28, 2025 at 9:02 PM > *To: *Stephane Litkowski (slitkows) <slitkows=40cisco.com@dmarc.ietf.org> > *Cc: *draft-ietf-bess-evpn-ipvpn-interworking@ietf.org < > draft-ietf-bess-evpn-ipvpn-interworking@ietf.org>, bess@ietf.org < > bess@ietf.org>, Voyer, Daniel <daniel.voyer@bell.ca>, Bernier, Daniel < > daniel.bernier@bell.ca> > *Subject: *Re: [bess] Short new WGLC and IPR poll for > draft-ietf-bess-evpn-ipvpn-interworking-12 > > > > *CAUTION:* This is an external email. Please be very careful when > clicking links or opening attachments. See the URL nok.it/ext for > additional information. > > > > > > I support progressing this draft with some slight modifications below. > > > > I have a very important addition to the draft that I think is pertinent > that I would like to share. > > > > Before I get to that I had a comment on the draft as it exists today. > > > > The draft does not talk about underlay mismatch at the domain boundary > which is very important. > > *[jorge] the procedures we're outlining are independent of the underlying > infrastructure in each domain. I don’t think the draft needs to discuss any > underlay aspects. If you think the scope should clarify that the procedures > are independent of the underlay, we can do it in the introduction.* > > > > Gyan> yes please clarify in the introduction why the procedures are > independent of the underlay and why. > > > > There are a variety of different underlays and depending on the underlay > type the solution maybe completely different as it would require a special > gateway / IW feature specific to the two underlays that need to communicate > with some type of translation. Also the underlay protocol maybe a mismatch > IPv4 on one side and IPv6 on the other and that poses a another problem. > In my initial email I mentioned inter-as opt-a because it is plain IP back > to back VRF and the underlay transport IW is taken out of the picture and > only service IW is dealt with and it works seamlessly and is thus underlay > independent. > > > > Example of draft for MPLS/SR-MPLS to SRv6 GW/IW uses a GW for transport > translation interworking > > & service interworking. This is just one draft but their are many drafts > on interworking between technologies and both transport and service > interworking concepts. > > > > > https://datatracker.ietf.org/doc/html/draft-agrawal-spring-srv6-mpls-interworking-15 > > > > > > The draft does not talk about intra-domain scenario within a NVO VXLAN or > MPLS / SR-MPLS / SRv6 fabric. > > *[jorge] the document defines a domain as follows:* > > *Domain: Two PEs are in the same domain if they are attached to the same > tenant and the packets between them do not require a data path IP lookup > (in the tenant space) in any intermediate router. A gateway PE is always > configured with multiple DOMAIN-IDs. The domain boundaries are not limited > to an Autonomous System or an IGP instance. The PEs in a domain can all be > part of the same or different Autonomous System, and an Autonomous System > can also contain multiple domains.* > > *So it is independent of the underlay “domains”. * > > > > Domain is not the same think as underlay. Domain is very generic. > When I say underlay I am talking about the technology used in the underlay > that may require some sort of translation or gateway interworking at the > transport underlay level. Along the same lines for any technology their is > transport interworking which is for the underlay technology and service > interworking which is the overlay. > > > > Also this draft talks mostly all about the new D-PATH path attribute but > does not talk about any details of the gateway function going from ISF to > SAFI 128 and how that would work. Is the RT reoriginated at the domain > boundary as the other type of SAFI in either direction I am guessing maybe > but the draft does not talk about it at all. > > *[jorge] Not sure what you mean by “from ISF to SAFI 128”. SAFI 128 routes > are deined as ISF routes too in the document. Also if by “RT” you mean > route targets, sections 5 and 8 describe how route targets are treated when > routes are readvertised into the adjacent domain. * > > > > Gyan> Sorry I should be more by ISF I meant L2 VPN EVPN and SAFI 128 I > meant IP VPN. Yes by RT I mean route target. So in a composite domain the > tenant VRFs are advertised in both EVPN & IP VPN and so they have identical > set of prefixes. I would think the difference would be EVPN has MAC VRF > RT-2 so not identical but would be preferred due to longer matches. In > figure 9 it’s not clear is PE1 have EVPN and IPVPN peer to IPVPN? I did not > think that was possible? In section 8 figure 8 the gateway device has a > safi-x peer and a safi-y peer and is able to propagate the prefixes from > any of the 4 NLRI let’s say safi-x is RT-2 / RT-5 and safi-y is IPVPN. How > is that possible as the SAFI are different I would not think the safi-x > routes would automatically propagate to safi-y and vice versa. Am I > missing something.. > > > > I think this is critical to the progression of the draft. > > > > My recommendation is to rename the draft to “EVPN to IPVPN IW with > D-PATH” would make more sense the way the draft is written. > > *[jorge] I'm not sure I agree. D-PATH is only one aspect. The spec also > talks about Path attribute propagation, route selection across ISF routes, > composite and gateway procedures, error handling, etc.* > > > > In the context of IPVPN & EVPN interaction and ISF and SAFI 128 there is a > myriad of scenarios that can exist. > > This is an extremely important topic as it comes up all the time for inter > domain boundaries propagating of L2 & L3 NLRI successfully across domain > boundaries and within a domain a translation gateway. > > > > In most all cases generally the composite PE, composite domain works > seamlessly no issues as two ships in the night that don’t touch each other. > > > > The complexity and possible loops that D-PATH solves the Gateway scenario. > > > > A typical method which is very commonly done for eBGP peering to > propagate EVPN RT-5 prefixes to IP VPN. One end of eBGP peering is NVO > VXLAN/GENEVE ASBR (CE) and other end is MPLS IP VPN SAFI 128 PE. The > peering is inter-as opt-a back to back VRF IPv4 Unicast and IPv6 unicast > peering. This works extremely well and both ends can be pretty much any > kind of underlay data plane mismatch and you don’t require any special > gateway transport or service interworking in the case of any of the > following: > > > > MPLS / SR-MPLS to SRv6. > > MPLS / SR-MPLS to VXLAN > > SRv6 to VXLAN > > > > Stick diagram (eBGP) > > > > Inter-as opt-a > > > > If the underlay on core & dc is the same then you still have to use > inter-as opt-a > > > > ASBR (DC EVPN) <-> PE (Core IP VPN) > > *[jorge] I’m not sure if I follow. RFC4364 section 10 option a is IP-VRF > to IP-VRF connectivity via subinterfaces, not tunnels. This spec does not > introduce any procedures for option “a".* > > > > Gyan> yes this example is subinterfaces and not tunnels in my opt-a > example. Since this draft is talking about the all the permutations and > details of service interworking and transport independence I wonder if it > would be possible to include as it does not require any gateway feature and > the routes get propagated between domains. > > > > If you have underlay mismatch then there is also IW/GW transport or > service interworking > > > > This same concept works with iBGP peering within the data center where the > concept requires an intermediate router we can call a Gateway and can be > solved by NVO VXLAN/GENEVE EVPN on one end iBGP to PE with IP VPN SAFI > 128 PE. The EVPN leaf-1 advertises the routes IPv4 unicast / IPv6 unicast > routes RT-5 prefixes to an intermediate router (GW) PE SAFI 128 -> VPNv4 / > VPNv6 (RR) -> propagates VPNv4/VPNv6 to rest of fabric. > > > > Stick diagram (iBGP) > > > > leaf-1 <-> GW <-> (RR) <-> rest of fabric > > *[jorge] this falls under the gateway procedures in the draft. Please > check out section 8. * > > > > Gyan> Agreed. I did please see my comments on section 8. > > > > In both the eBGP & iBGP use case we are trying to get the EVPN mac VRF > routes reachability imported into SAFI 128 but all we need is the RT-5 > prefixes and not the MAC VRF RT-2 host routes so the RT-5 summary suffices. > > > *[jorge] this spec is about ISF routes, that is, Inter Subnet Forwarding > routes, and not layer-2 information. For EVPN that includes routes that are > processed in the context of an IP-VRF route table, which includes IP Prefix > routes and MAC/IP routes when processed as in RFC9135 symmetric IRB model. > That’s because both types are used for inter subnet forwarding in EVPN > networks. Please let me know if I’m missing something.* > > *Thank you.* > > *Jorge* > > > > Gyan> Understood. I was excluding the RT-2 for summarization with > RT-5 only advertised inter domain but agreed for consistency the RT-2 > should be included. > > > > Using this solution it’s very simple and elegant and no loops. > > > > Is it possible to add my comments to the draft. > > > > Many Thanks!! > > > > Gyan > > > > > > On Mon, Jan 27, 2025 at 5:25 AM Stephane Litkowski (slitkows) <slitkows= > 40cisco.com@dmarc.ietf.org> wrote: > > Hi, > > > > As draft-ietf-bess-evpn-ipvpn-interworking went through multiple > discussions that seem to be closed now. We would like to do a new short > WGLC of 1-week to gather any additional comment before we move forward with > the draft. > > > > The WGLC poll starts today and will end on 2/3. > > > > Similarly, as the last IPR poll was done a long time back. We are also > polling for knowledge of any undisclosed IPR that applies to this document > (see RFCs 3979, 4879, 3669 and 5378 for more details). > > > > > > Thank you > > > > Brgds, > > > > > > Stephane, Matthew, Jeffrey (BESS chairs) > > > > > > > > _______________________________________________ > BESS mailing list -- bess@ietf.org > To unsubscribe send an email to bess-leave@ietf.org > >
- [bess] Short new WGLC and IPR poll for draft-ietf… Stephane Litkowski (slitkows)
- [bess] Re: Short new WGLC and IPR poll for draft-… Gyan Mishra
- [bess] Re: Short new WGLC and IPR poll for draft-… Jorge Rabadan (Nokia)
- [bess] Re: Short new WGLC and IPR poll for draft-… Gyan Mishra
- [bess] Re: Short new WGLC and IPR poll for draft-… Jorge Rabadan (Nokia)
- [bess] Re: Short new WGLC and IPR poll for draft-… Gyan Mishra
- [bess] Re: Short new WGLC and IPR poll for draft-… Jorge Rabadan (Nokia)
- [bess] Re: Short new WGLC and IPR poll for draft-… Gyan Mishra
- [bess] Re: Short new WGLC and IPR poll for draft-… Gyan Mishra
- [bess] Re: Short new WGLC and IPR poll for draft-… Jorge Rabadan (Nokia)
- [bess] Re: Short new WGLC and IPR poll for draft-… Gyan Mishra
- [bess] Re: Short new WGLC and IPR poll for draft-… slitkows.ietf
- [bess] Re: Short new WGLC and IPR poll for draft-… Jorge Rabadan (Nokia)
- [bess] Re: Short new WGLC and IPR poll for draft-… Stephane Litkowski (slitkows)
- [bess] FW: Short new WGLC and IPR poll for draft-… Stephane Litkowski (slitkows)