Re: [Bier] BIER in IPv6 --- draft-zhang-bier-bierin6-04

Mark Smith <markzzzsmith@gmail.com> Mon, 23 March 2020 20:08 UTC

Return-Path: <markzzzsmith@gmail.com>
X-Original-To: bier@ietfa.amsl.com
Delivered-To: bier@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF0603A0E05; Mon, 23 Mar 2020 13:08:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.598
X-Spam-Level:
X-Spam-Status: No, score=-0.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.998, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zgOri3uUuVt9; Mon, 23 Mar 2020 13:08:30 -0700 (PDT)
Received: from mail-ot1-x32c.google.com (mail-ot1-x32c.google.com [IPv6:2607:f8b0:4864:20::32c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CE4C3A0D1E; Mon, 23 Mar 2020 13:08:29 -0700 (PDT)
Received: by mail-ot1-x32c.google.com with SMTP id j16so14828682otl.1; Mon, 23 Mar 2020 13:08:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=hfMUdxzj83atp+0dnC1WhQngS5PqSEoNsWkD0AR2o4o=; b=LkYV3axzaoIyn36crkrR3wNsx6jAdL+8MqSP5vapdhXK/O0vKyrsLxOfe0MNo3X4u1 O6mkDxzNpHqAqNhcLYxnVhxD7xx7UKvN0Q+LC6FrqknV7vpdvEsmDhjBIOxgSaL55x1E /JpHbzCDjucuKxlN7rMNcTTYHC+UG5jZgJEG8cDecW9BfVETHIGqElGpELX5SQGm2n56 wxFTKukvXZM6qWWppfYspxoPNomyDF0GwExCEolsBrL4AZhEPcWFwHgYfzN2Jn1+xp8h 45IYY49UJ1vGQTORP7ToUySi0o0x9lVnQWp2WoOPTfnJ0Km4jrxqsJx2SNg20LlZUC04 yWQA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=hfMUdxzj83atp+0dnC1WhQngS5PqSEoNsWkD0AR2o4o=; b=ArlNtEj/O2m0sFNIgZYP9SDX2V16f5j/SVsYXwN+SbjVF1mRmKj6BbpdhJKcTjEfV9 I7PFjy8rtYn0q6WsUy5eOhJzZOFAHdjxML3h31T1iXqKAnHX9/EjJYW7OmG9khzQMz40 fgRxMffWSOmv1YxXhyiA60xIjEtwCyC67qmBr5YZYHVkmBV+2eXrwPflz2BgzgkD7yfF GsoH/ugqCKOLw3Aw51l9fWXg++QwCFp8gfNfFJg3hHlHULoFJh/hho4X6DPeV+p3gV8Y 7wgV8VUnJ9QIs2rFFvnvjREpykEz93dlG0VjWNZOGhHNB3DFGp3h0BHHtEFcOYr8CsE7 f21w==
X-Gm-Message-State: ANhLgQ3LFpp698xkuyF1V0ou4OKEiU/jNMYM7UI5TfPBBuoQod+YHQY5 HgmaUK3oM37MYZZxz1G/716lzR6U9NdApLuWvs1VAQ==
X-Google-Smtp-Source: ADFU+vtFdcx9+C5T1+8tEjJVwN58NR0YOOlRi6ltik9E3IwQg1yY8zQFdzzYE88/nLbj9rvOOBXBr5S+IyDD/qnxlG8=
X-Received: by 2002:a9d:2004:: with SMTP id n4mr4594696ota.74.1584994109047; Mon, 23 Mar 2020 13:08:29 -0700 (PDT)
MIME-Version: 1.0
References: <0aaf9a4e017643af85cd246b04d1858c@huawei.com> <202003231114061611017@zte.com.cn> <CA+wi2hPF0rjn2M80PxspRLXYQWGLj7AhB0m1JJFQ6WN4GU0XLw@mail.gmail.com> <45db7d3141664b08a2832020829326c1@huawei.com> <24f852f6-80df-b16f-6c3d-24be30373923@gmail.com>
In-Reply-To: <24f852f6-80df-b16f-6c3d-24be30373923@gmail.com>
From: Mark Smith <markzzzsmith@gmail.com>
Date: Tue, 24 Mar 2020 07:08:17 +1100
Message-ID: <CAO42Z2zJ9UOy5uk4wsCPJ=f3S_=34w6PcFMDtOkaKU+r3hJL+Q@mail.gmail.com>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
Cc: "Gengxuesong (Geng Xuesong)" <gengxuesong@huawei.com>, Tony Przygienda <tonysietf@gmail.com>, "zhang.zheng" <zhang.zheng@zte.com.cn>, 6MAN <6man@ietf.org>, BIER WG <bier@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000d74f6f05a18b32bc"
Archived-At: <https://mailarchive.ietf.org/arch/msg/bier/QdY-QEZxNeXOh2dSoBI-z-xRSE0>
Subject: Re: [Bier] BIER in IPv6 --- draft-zhang-bier-bierin6-04
X-BeenThere: bier@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "\"Bit Indexed Explicit Replication discussion list\"" <bier.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bier>, <mailto:bier-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bier/>
List-Post: <mailto:bier@ietf.org>
List-Help: <mailto:bier-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bier>, <mailto:bier-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2020 20:08:58 -0000

On Tue, 24 Mar 2020, 06:43 Brian E Carpenter, <brian.e.carpenter@gmail.com>
wrote:

> Hi Xuesong,
>
> >  link-local forwarding concerns
>
> What are those concerns? Link-local forwarding is forbidden by RFC4291 and
> any router that performs it is completely faulty and should be thrown away.
>


Actually, forwarding is allowed by RFC 4007, but only back onto the same
link.


> For the BIER scenario, link-local seems very suitable.
>

Sounds like I'd agree, just haven't read the ID.

Packets with ULA or GUA DAs and LL SAs have been seen to leak off link.
Those implementations a missing an RPF like check on LL SAs. The sending
hosts shouldn't really be sending those packets in the first place.

There's always a risk of bugs or non-compliant implementations, which is
why Postel's law exists.

(Wouldn't it be great if a "Implementations MUST be bug free." statement in
an RFC was complied with 100%!)

Regards,
Mark.



> Regards
>    Brian Carpenter
>
> On 23-Mar-20 19:27, Gengxuesong (Geng Xuesong) wrote:
> > Hi,
> >
> >
> >
> > Thank you for your prompt response, and giving your considerations about
> these two methods.
> >
> > I notice that you mentioned:
> >
> >>>this has a nice side effect of allowing to "jump over non-BIER routers"
> if addressed to bier prefix
> >
> > So would this method be the preferred one to cover more scenarios ?
> >
> > It seems to me that 2 different methods may need more technical
> considerations for both of them, such as , link-local forwarding concerns
> for option 1 and global-address security concerns for option 2.
> >
> >
> >
> > Best Regards
> >
> > Xuesong
> >
> >
> >
> > *From:*Tony Przygienda [mailto:tonysietf@gmail.com]
> > *Sent:* Monday, March 23, 2020 11:21 AM
> > *To:* zhang.zheng <zhang.zheng@zte.com.cn>
> > *Cc:* Gengxuesong (Geng Xuesong) <gengxuesong@huawei.com>; 6MAN <
> 6man@ietf.org>; BIER WG <bier@ietf.org>
> > *Subject:* Re: BIER in IPv6 --- draft-zhang-bier-bierin6-04
> >
> >
> >
> > That's a currently ongoing discussions between the auhtors (cc:'ing bier
> as well)
> >
> >
> >
> > LL has advantages
> >
> > * the packet cannot "escape" even if it has TTL > 1
> >
> > * such a scheme can work purely with ND
> >
> > * it's hard to "send out the wrong interface" albeit v6 allows AFAIR to
> have same link local on multiple interfaces
> >
> >
> >
> > Originally the draft did not even allow for global addressing (since we
> want to use v6 as L2-substitute here just like MPLS & non-MPLS
> encapsulations are used in BIER) but this has a nice side effect of
> allowing to "jump over non-BIER routers" if addressed to bier prefix (which
> I personally think should be the only allowed global v6 used, otherwise we
> may end up with BIER frames in funky places and possible "holes" in the
> replication fabric). Obviously strictly speaking it's not necessary since
> BIER can be carried in plethora of normal unicast tunnels  but bunch of
> co-auhtors joined and the consensus was to allow it
> >
> >
> >
> > --- tony
> >
> >
> >
> >
> >
> >
> >
> > On Sun, Mar 22, 2020 at 8:15 PM <zhang.zheng@zte.com.cn <mailto:
> zhang.zheng@zte.com.cn>> wrote:
> >
> >     Hi Xuesong,
> >
> >
> >
> >     Thank you for your question!
> >
> >     The LL address is used by direct connected neighbor.
> >
> >     For the neighbor which is not direct connected, the wider range
> address should be used.
> >
> >
> >
> >     Thanks,
> >
> >     Sandy
> >
> >
> >
> >     原始邮件
> >
> >     *发件人:*Gengxuesong(GengXuesong) <gengxuesong@huawei.com <mailto:
> gengxuesong@huawei.com>>
> >
> >     *收件人:*张征00007940;6man@ietf.org <mailto:6man@ietf.org> <6man@ietf.org
> <mailto:6man@ietf.org>>;
> >
> >     *日 期 :*2020年03月23日11:03
> >
> >     *主 题 :RE: Re:BIER in IPv6 --- draft-zhang-bier-bierin6-04*
> >
> >     Hi Sandy and authors of draft-zhang-bier-bierin6:
> >
> >
> >
> >     I have some questions about the section 2 when reading the draft. It
> is mentioned that:
> >
> >     “If... The destination address in IPv6 header SHOULD be the
> neighbor's link-local address.
> >
> >     Otherwise... the destination address SHOULD be the BIER prefix of
> the BFR neighbor.”
> >
> >     Seems like the draft proposes 2 methods of IPv6 header encapsulation.
> >
> >     Could these 2 methods be combined ? If not, what's the use case and
> design consideration for each method?
> >
> >
> >
> >     Best Regards
> >
> >     Xuesong
> >
> >
> >
> >
> >
> >
> >
> >     *From:*ipv6 [mailto:ipv6-bounces@ietf.org <mailto:
> ipv6-bounces@ietf.org>]*On Behalf Of *zhang.zheng@zte.com.cn <mailto:
> zhang.zheng@zte.com.cn>
> >     *Sent:* Saturday, March 21, 2020 1:43 PM
> >     *To:* 6man@ietf.org <mailto:6man@ietf.org>
> >     *Subject:* Re:BIER in IPv6 --- draft-zhang-bier-bierin6-04
> >
> >
> >
> >     Hi,
> >
> >     As co-author of BIERin6 (draft-zhang-bier-bierin6-04), before you
> read the draft, please let me introduce BIER technology to you at first:
> >
> >     BIER technology, as defined in RFC8279, it's a new multicast
> technology. The principle is achieving multicast forwarding by hop-by-hop
> execution.
> >
> >     BIER is a transport protocol, not just a function. As defined in
> RFC8296, BIER has it's own ethernet encapsulation with ethernet type
> 0xAB37, and also it can be travelled by MPLS encapsulation.
> >
> >     BIER has it's own OAM function, ECMP function and traceability. etc.
> through BIER header defined in RFC8296.
> >
> >
> >
> >     For travelling through IPv6 only enviroment, we'd like to travel
> BIER packet by IPv6 encapsulation.
> >
> >     In draft-zhang-bier-bierin6-04, we want to just use a new Next
> Header type for BIER header carrying.
> >
> >     We want to bring the minimum impact on IPv6 existed execution, and
> the maximum flexibility for header interoperability.
> >
> >     So if you have any question about draft-zhang-bier-bierin6-04, or
> about BIER technology itself, please tell me. I'am glad to explain them to
> you.
> >
> >
> >
> >     Thanks,
> >
> >     Sandy
> >
> >
> >
> >     原始邮件
> >
> >     *发件人:*TonyPrzygienda <tonysietf@gmail.com <mailto:
> tonysietf@gmail.com>>
> >
> >     *收件人:*Michael McBride <michael.mcbride@futurewei.com <mailto:
> michael.mcbride@futurewei.com>>;
> >
> >     *抄送人:*6man@ietf.org <mailto:6man@ietf.org> <6man@ietf.org <mailto:
> 6man@ietf.org>>;
> >
> >     *日 期 :*2020年03月19日01:12
> >
> >     *主 题 :Re: BIER in IPv6*
> >
> >     --------------------------------------------------------------------
> >     IETF IPv6 working group mailing list
> >     ipv6@ietf.org <mailto:ipv6@ietf.org>
> >     Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> >     --------------------------------------------------------------------
> >
> >     <BIER WG chair hat on>
> >
> >
> >
> >     The specific ask here is for the 6man to look over both drafts, i.e.
> >
> >
> >
> >     draft-zhang-bier-bierin6
> >
> >
> >
> >     and
> >
> >
> >
> >     draft-xie-bier-ipv6-encapsulation
> >
> >
> >
> >     and verify whether they conform to published IPv6 standards or raise
> objections/concerns.
> >
> >
> >
> >     The requirements document is currently under active work/comments
> and does not represent any final or wide-consensus state so an opinion on
> its state is appreciated but it should not be used as any final or binding
> list of requirements as to the targeted solution in BIER WG
> >
> >
> >
> >     thanks
> >
> >
> >
> >     --- tony
> >
> >
> >
> >     On Tue, Mar 17, 2020 at 9:20 PM Michael McBride <
> michael.mcbride@futurewei.com <mailto:michael.mcbride@futurewei.com>>
> wrote:
> >
> >         Hello,
> >
> >
> >
> >         The bier wg could use your ipv6 recommendations. We’ve worked on
> various solutions to transport a bier header in ipv6. We decided to pause
> and create a requirements document (draft-ietf-bier-ipv6-requirements) to
> help steer us towards the right solution(s). In that drafts appendix we
> have a fairly good summary of the various solutions.
> >
> >
> >
> >         We’ve started to rally behind two solutions which meet the
> majority of the requirements: draft-xie-bier-ipv6-encapsulation (bier
> header in ipv6 EH) and draft-zhang-bier-bierin6 (bier header as payload
> using ipv6 NH). The bier chairs today asked to punt the bierv6 topic to
> 6man for advice before adopting any of these solutions.
> >
> >
> >
> >         So here we are seeking your advice. The most simple approach
> would probably be to give
> https://datatracker.ietf.org/doc/draft-ietf-bier-ipv6-requirements/ a
> look and scroll down to the appendix to see a summary of the various
> solutions we’ve been considering.
> >
> >
> >
> >         thanks!
> >
> >         mike
> >
> >
> >
> >
> >
> >
> >
> >
>  --------------------------------------------------------------------
> >         IETF IPv6 working group mailing list
> >         ipv6@ietf.org <mailto:ipv6@ietf.org>
> >         Administrative Requests:
> https://www.ietf.org/mailman/listinfo/ipv6
> >
>  --------------------------------------------------------------------
> >
> >
> >
> >
> >
> >     --------------------------------------------------------------------
> >     IETF IPv6 working group mailing list
> >     ipv6@ietf.org <mailto:ipv6@ietf.org>
> >     Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> >     --------------------------------------------------------------------
> >
> >
> > --------------------------------------------------------------------
> > IETF IPv6 working group mailing list
> > ipv6@ietf.org
> > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> > --------------------------------------------------------------------
> >
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>