Re: [Bier] Comments on draft-hfa-bier-pim-tunneling

"Dolganow, Andrew (Nokia - SG/Singapore)" <andrew.dolganow@nokia.com> Tue, 18 July 2017 09:18 UTC

Return-Path: <andrew.dolganow@nokia.com>
X-Original-To: bier@ietfa.amsl.com
Delivered-To: bier@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31120131A93 for <bier@ietfa.amsl.com>; Tue, 18 Jul 2017 02:18:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.921
X-Spam-Level:
X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w59rZOZv6pLG for <bier@ietfa.amsl.com>; Tue, 18 Jul 2017 02:18:07 -0700 (PDT)
Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10112.outbound.protection.outlook.com [40.107.1.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29E11131945 for <bier@ietf.org>; Tue, 18 Jul 2017 02:18:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=wnHoI5wFhb1RmAPdajSaGRCBzhxYPj2CWj3ze2zeY04=; b=aWkpPGy1OhDeOMkXcVEDvALGyIn3ymcbnu+FBulVQNaALr7I6GsR2ctBnUQesuVoTXmrHFSVs23eExY+f/d9BH3E6wcnVgt+sDmIEYQLxxZ/ztyE7+Egw6GpRvQAC6EiiEStDKdxKnfUEEzdIUfrr6aaS00ekS0TRYK7yTIabdk=
Received: from HE1PR0701MB2058.eurprd07.prod.outlook.com (10.167.190.10) by HE1PR0701MB2426.eurprd07.prod.outlook.com (10.168.128.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1282.4; Tue, 18 Jul 2017 09:18:04 +0000
Received: from HE1PR0701MB2058.eurprd07.prod.outlook.com ([fe80::bd82:d804:3db6:62a3]) by HE1PR0701MB2058.eurprd07.prod.outlook.com ([fe80::bd82:d804:3db6:62a3%13]) with mapi id 15.01.1282.008; Tue, 18 Jul 2017 09:18:04 +0000
From: "Dolganow, Andrew (Nokia - SG/Singapore)" <andrew.dolganow@nokia.com>
To: Antoni Przygienda <prz@juniper.net>
CC: "bier@ietf.org" <bier@ietf.org>
Thread-Topic: [Bier] Comments on draft-hfa-bier-pim-tunneling
Thread-Index: AQHS/XAwmu5yjNkcLUehC6Fnhg/YZKJZUqQ7
Date: Tue, 18 Jul 2017 09:18:04 +0000
Message-ID: <B681B2B4-3518-4F8A-A83A-7AEBED2F7CE7@nokia.com>
References: <2F5AA4AB-E5E7-453E-963C-DF9679DDE2D8@juniper.net>
In-Reply-To: <2F5AA4AB-E5E7-453E-963C-DF9679DDE2D8@juniper.net>
Accept-Language: en-US
Content-Language: en-CA
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=nokia.com;
x-originating-ip: [2001:67c:370:128:bd0d:2c88:4818:f3a7]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; HE1PR0701MB2426; 7:FFYpADhUUTOLp4Y9he5FaHIAJ3MluFEUTuwZaLfdVgZkgiGysPHBuFPCJdUfHy+mn40Ge+5vT88+04yWEPGnqS1iSEVRP6v+eSG4pY65+PLhOnPZQgQf7la8T2ybdlVa23bsS2jEnz3hyfWuLzkvDPSY7uYeJY/X2a/d4euJVBHU19eOHe/tTteufYuSgtVciT6gi+1WVzEm5nzZV1y3e2w8XWuzd8uDMKGqGM83/GtDgtNPv3un15NMIgKgO0SJA5980JBXrY839WurhJ0Z+9xf1UhX75m77P84YaVPGAADGxNcKZnU19dxv5tkTde6lXY7ZvJAeGktHNTH4TlgXN/Da9nmklss3rmplXnVicwHpT+DQ3r7XL1nwScc3VYe0rjnMwbFA3kX0Q6ndDKxVbPr9nKL0vR/7pxG8/ihlT4MMLVcPBFkCRjSHR0dsBpbmBvSGkwgbcgCmW3eru/o/Xoe64TDZjqfjCFJ4pITZf7Ux+9JWqs1qXvdvFolPy42fy7VDKRvQYG0Z7SSv1W5rv/lEDbPzjoS/zBOlMBq2lBM+0K/OGQ2APkNLq4/7UlR7FaBVffZjMHFs6ObWcWzPinhrm/ZT4IZOemfOUTh1JZbQIAwTjE5ttLsXF6RKKp7a57v61zKq+r5NFdaI0tMe21OxLcHWFdq2Msx3HcGoNB+BGTTr2o5Rah1EuzRrIZl/bMvtSKaQ6qduEUjMcxqFJhQSLLPB8jeXPaZrCuhxudFo5wxBgQYMJ0+OnnRTd231tZY5yAGPS4XC7NA5WCwHInV20+nl8+1HA2cbiNcdjY=
x-ms-office365-filtering-correlation-id: 7d4af38e-2410-4b40-aef7-08d4cdbde535
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254075)(48565401081)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:HE1PR0701MB2426;
x-ms-traffictypediagnostic: HE1PR0701MB2426:
x-exchange-antispam-report-test: UriScan:(190756311086443)(26388249023172)(236129657087228)(138986009662008)(148574349560750)(50300203121483)(247924648384137);
x-microsoft-antispam-prvs: <HE1PR0701MB2426942AFCE50B3EC3752DD3E5A10@HE1PR0701MB2426.eurprd07.prod.outlook.com>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(5005006)(8121501046)(2017060910075)(10201501046)(93006095)(93001095)(3002001)(100000703101)(100105400095)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123555025)(20161123562025)(20161123564025)(20161123558100)(20161123560025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:HE1PR0701MB2426; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:HE1PR0701MB2426;
x-forefront-prvs: 037291602B
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(39450400003)(39840400002)(39850400002)(39400400002)(39410400002)(24454002)(377454003)(6506006)(229853002)(81166006)(8936002)(2950100002)(6916009)(102836003)(6486002)(606006)(6116002)(82746002)(478600001)(36756003)(54356999)(76176999)(50986999)(7736002)(83716003)(5250100002)(14454004)(8676002)(5003630100001)(3660700001)(3280700002)(966005)(6436002)(2900100001)(53936002)(230783001)(8666007)(99286003)(86362001)(38730400002)(110136004)(189998001)(6246003)(2906002)(4326008)(53546010)(25786009)(6306002)(33656002)(236005)(54896002)(6512007)(5660300001)(9886003); DIR:OUT; SFP:1102; SCL:1; SRVR:HE1PR0701MB2426; H:HE1PR0701MB2058.eurprd07.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_B681B2B435184F8AA83A7AEBED2F7CE7nokiacom_"
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2017 09:18:04.2689 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2426
Archived-At: <https://mailarchive.ietf.org/arch/msg/bier/IPnLcDcYht6UbuZlHrLoUYnp9oE>
Subject: Re: [Bier] Comments on draft-hfa-bier-pim-tunneling
X-BeenThere: bier@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "\"Bit Indexed Explicit Replication discussion list\"" <bier.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bier>, <mailto:bier-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bier/>
List-Post: <mailto:bier@ietf.org>
List-Help: <mailto:bier-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bier>, <mailto:bier-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Jul 2017 09:18:10 -0000

Inline

Andrew

Sent from my iPhone

On Jul 18, 2017, at 10:56 AM, Antoni Przygienda <prz@juniper.net<mailto:prz@juniper.net>> wrote:

Read the draft on the plane trying to figure out what’s that about. Observations


a)       First, the draft seems to indicate that it’s draft-rosen (6037) and I assume it’s talking about the P-G PIM which is generated by the PE and then first P is acting as BER. And it seems to concern mostly SSM. Just verifying …

The solution we are targeting runs Rosen MVPN in the core. And yes SSM is our main target.

b)       I’m suspicious of the 256bits argument somehow. Is the idea that running a single-SI BIER is somehow massively simpler than multiple-SI-s? The packet WILL split @ replication points & replication is necessary in any case (unless we have ingress rep for which BIER is not needed) so I don’t see how single-SI makes much of a difference.

There are two goals:
- Stay with a single SI to avoid packet duplication in a core due to a scale.
- Intro BIER in the core without a need to touch access domains - evolutionary intro of BIER.


c)       We do not need to burn a protocol bit for PIM albeit yes, it would be tad more efficient. PIM must be carried in either v4 or v6 frame which is its normal encoding and already fully supported by BIER encaps. Additionally, if PIM is stripped of v4/v6 encaps considerations would have to be made to all the PIM RPF & correct source/destination addresses checks in the spec AFAIR. Yes, the BER needs to look into v4/v6 packets to  see PIM being tunneled but if we try to accommodate every IP protocol with a bit, we’ll run out fast. Accomodating a protocol makes most sense when we talk heavy-volume dataplane such as maybe VxLAN if we can save headers for processing speed but PIM is a low volume control protocol and the check is trivial since it’s a well known next-protocol offset position.

Let's discuss in Prague.

d)       I think the moniker BRT is ill chosen. BIER does not do RPF and using “RPF” here to describe tracking of G-membership of P-BFRs is overloading the term in a confusing way IMO. Basically in overlay we should have a G to BFM mapping (and if necessary S to BFR-id derived from BIER packets) and nothing else. There is no “RPF” lookup per packet or anything like this which the moniker suggests (yes, one would say we do a “RPF” per “PIM join” but that somehow implies that such “RPF” can “fail and drop” which it cannot).

e)       The whole “RPF SPF lookup” in 3.1 for (S,G) joins will not work in general case AFAIS. Observe that BIER may NOT be IGP signaled (but e.g. controller based) or run subdomain over a MT sub-setting links or construct a different tree than SPF so this “PIM tunneled (S,G) overlay” seems to violate the separation of layers completely as proposed assuming that it can draw conclusions from IGP state (i.e. it considers the tunnel path somehow “backwards-computable” by the overlay making it not a tunnel but an encapsulation only).

This is bot trying to be a general solution that will work with every BIER deployment. It intends to solve brown-deployment use caee in some pretty typical architecture deployed today.

If the whole (S,G) join architecture hinges on assumption that a “future” BIER packet’s source can be “figured out by computing SPF” then it is very restricted and those assumptions have to be spelled out very clearly. In general case an (S,G) join would have to be sent to all BERs that participate in the P-G IMO make is de-facto ASM is my impression.


Maybe I somehow miss the whole point completely given that the text is jumping between tons of technologies and seems to not state assumptions taken every time clearly …


Let's go over confusing parts tony so we can clarify and avoid those in the text.

Andrew
--- tony

_______________________________________________
BIER mailing list
BIER@ietf.org<mailto:BIER@ietf.org>
https://www.ietf.org/mailman/listinfo/bier