Re: [Bier] New Version Notification for draft-pfister-bier-over-ipv6-00.txt

Eric C Rosen <erosen@juniper.net> Thu, 22 September 2016 19:22 UTC

Return-Path: <erosen@juniper.net>
X-Original-To: bier@ietfa.amsl.com
Delivered-To: bier@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 900CF12D9DB for <bier@ietfa.amsl.com>; Thu, 22 Sep 2016 12:22:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.922
X-Spam-Level:
X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VY7DZlxLTD1m for <bier@ietfa.amsl.com>; Thu, 22 Sep 2016 12:22:50 -0700 (PDT)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0099.outbound.protection.outlook.com [104.47.34.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE20512D9D2 for <bier@ietf.org>; Thu, 22 Sep 2016 12:22:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=b6sSgv2dV6FclNCg7zU7g4TBbNwVI4EL1U/RXMSrlcA=; b=gknJBe1+hCJ/ygOCjsjBkIAKTxO8zX8VXYoHharkGRCZr7ArVCJA6xYbl+kmKLdjBZXamZmlw6xpYcRsBIbSrEULB6vtEikM0QcSrRlmabkkXCbIs9DNRpKtnnco5wVkveDIwV5pBcYOW/Jbd6iiG9alb/kBxiM1wJdIlTK68nU=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=erosen@juniper.net;
Received: from [172.29.33.234] (66.129.241.13) by SN1PR05MB2191.namprd05.prod.outlook.com (10.169.124.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.639.2; Thu, 22 Sep 2016 19:22:38 +0000
To: Toerless Eckert <tte@cs.fau.de>, IJsbrand Wijnands <ice@cisco.com>
References: <147280131368.24750.2582129788572723864.idtracker@ietfa.amsl.com> <3C470D17-363E-4F7D-B943-19FC52052C67@darou.fr> <d891b2b1-1419-3fdb-be95-034d91305a30@juniper.net> <10B5F14B-8A1B-4DFC-B21E-A314B1605213@darou.fr> <08b8ac29-459a-d5e5-524d-7b84d744b020@juniper.net> <F67EEC5D-FDE5-4549-9FAE-84B17B303235@darou.fr> <a79919e0-e067-8222-28b7-cf621522a5fe@juniper.net> <1828FBD8-E44C-4DD6-8DEB-1A9766C6328E@cisco.com> <1FEE3F8F5CCDE64C9A8E8F4AD27C19EE2BB1D115@NKGEML515-MBX.china.huawei.com> <D667DF77-BB73-449F-A2F4-947ED3D0C6CE@cisco.com> <20160921194356.GB29177@faui40p.informatik.uni-erlangen.de>
From: Eric C Rosen <erosen@juniper.net>
Message-ID: <fcdf9c11-a613-5e14-dcf2-da8945c35534@juniper.net>
Date: Thu, 22 Sep 2016 15:22:35 -0400
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0
MIME-Version: 1.0
In-Reply-To: <20160921194356.GB29177@faui40p.informatik.uni-erlangen.de>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Originating-IP: [66.129.241.13]
X-ClientProxiedBy: SN2PR10CA0035.namprd10.prod.outlook.com (10.160.12.173) To SN1PR05MB2191.namprd05.prod.outlook.com (10.169.124.139)
X-MS-Office365-Filtering-Correlation-Id: 166d0087-486d-44e5-deca-08d3e31dd157
X-Microsoft-Exchange-Diagnostics: 1; SN1PR05MB2191; 2:6aXjYcIGBgr6SjGcSp/wbxHGq6E9M1x+6fkxl+JvffGOzJxDjREzH5yVIt7Mwoeg0w6dJQUz/Rm0u44DYxk7TjnAFsY+HjIgCj/ZU7noOin87pfPd2Z79XOyVtao8wgfofRFD+A6Pr8jDZhdo1QSl/L6IYoe6api1MyznDLfXncMrogz/szxW6JxBFdkGqrt; 3:SCvvZh7y+GbGYS9E6xTKxye4d/GxVIKx9agoe82WQF3OlaAMFunOzxxOKtU0XaCpSEOz3FNWsJBg+l1RkKmP0S5/WBnCBXXS3ccyoAWdLKSDWxVnnXmqlkBZeWofr7JN; 25:RRhaIZCtUlzRBfjHVhrL5tGxcLg+orDm6liThKsINjeSFO9TWa5J2kIhzED14W3KTDlYUH7L9il3dx29e+3By73pjki9eQbwYWCRh4xME5IDhnJ3bjHJoZ3fJ2JlHWKC65pqv0YRqUTFXdmvRKHo9g/Y1Hqx0eQab1QexO/NwbugJsC4vjazBnInH7hvRaNHpzNa+IWKiRakug/5eYyhzwk2bcgJ2lk6zQ1Z/BHOib4TRH/A9+eeFuJ/bILf6gEhLfVup9rrU8IkuDJ98NmrIqoXnnYtxGCos0YrDmfQDg2HkGVJU7xaQiLJsO2lBcBO/GMwp80cacRrR3YFck5G6IFpS/VXWcpOri9t1u/EWoFpB9MzP6Wmpc/SDqjBkS/Ccq2MQxOdkRYIIgY7piDBN9ffC5nt6zxpyxDhSagDUnA=
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR05MB2191;
X-Microsoft-Exchange-Diagnostics: 1; SN1PR05MB2191; 31:1EC2SDG0KCkgpYWyqPWjqorXcjdvouD0CTlFuiOxdlUGISnsrZIr6lWssOLyCvYU4DObAdA2kH9IG0lpz3YruaxSFJRmt+DoSv4ykIN5kvW6XwFkfKfi1l8ujQq0apAl1r8v95pRgAj5Y0zPuGzDng2YlCF3H/YeQbGwTZkPNezJF3pfKhvYQCsxlpbeS3f6/FE2btnGOD8CYTmWcvSdY7hpbYHYUiwTbOFALqTOOBU=; 20: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
X-Microsoft-Antispam-PRVS: <SN1PR05MB2191E536865F5B5C08DF1DDED4C90@SN1PR05MB2191.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:SN1PR05MB2191; BCL:0; PCL:0; RULEID:; SRVR:SN1PR05MB2191;
X-Microsoft-Exchange-Diagnostics: 1; SN1PR05MB2191; 4:IyCIauie28qPwbrw1ntr4xq3MvjE0AjCV3fZbhSME4TwdwxF0N2rN3rdSyspsDl07ylEFKkd2n44Mq9hS3dbUPoE1wGns1Q5Icvs83JfKPWmUC3l76cH2L4OlQS3MhidaEi2/i6u/tXwhiITW6butZcn2J2HhadSs410oRgtzap8Ni0/Nuvln49IX5mLU+3AUEcsvQoXCU5LDOoETaqwSb350CXYOfw9TWCML4iWdkwsZ1dg4xVhDGR2xPggULxqUcx598Gv3rFqrBqGY6xjTGqZcyAWktStEscvAZt6Rbes27GnedICHvloIUAtJ0Cvp1tkFFFHWc6ok/UBu5J0uUimBo7Q5NRt8uEVXFaOfekNBXmcCLDvv2wE+LWaJUURxKSBrrrTCtwzfq9XZ20Grg==
X-Forefront-PRVS: 0073BFEF03
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(7916002)(199003)(189002)(189998001)(23746002)(68736007)(93886004)(92566002)(5890100001)(66066001)(36756003)(230783001)(230700001)(305945005)(31696002)(86362001)(5660300001)(4001350100001)(77096005)(33646002)(8676002)(2950100001)(65826007)(7846002)(4326007)(5001770100001)(42186005)(105586002)(101416001)(83506001)(47776003)(81156014)(65806001)(2906002)(54356999)(64126003)(97736004)(50986999)(31686004)(7736002)(81166006)(6116002)(50466002)(586003)(76176999)(3846002)(106356001)(65956001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN1PR05MB2191; H:[172.29.33.234]; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
Received-SPF: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1; SN1PR05MB2191; 23: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
X-Microsoft-Exchange-Diagnostics: 1; SN1PR05MB2191; 6:qQa+6tYjs0LgVYr31jd2EWgfdZiEwWhauyGHXyfbt/Wzq3nZin1SCjZGO58s+6W16k4qvKQhjwBLOtwHQoxZb2KeMTSrXOtUiLQTMdP6263LzQ4edK15302rAOIcsrZ+S/P5GZCwJdVInXtmH8iNRZJq0tdP5pgEOMmeamzwSlQFXI6xXBrxCc1i6lvkkNq6FfYwBrhQLpTIdRSOy+IjjNge2SB5VYSo2oltZSHvaMFTP9IaDhTjmJtK8PFNPGq5zgrIybpjHglH8Rv0wc7/kewAw086Bn9fI5PqhhG2vxAe8kD5HdrBn83EKY5H1U/8C0RBrO4DFey7Zv4u2UatYw==; 5:tgQUZMwKzekggEVGt+7GNr3x9c6WGkqhU9EKOt87cRSdJSswv7w/Le3BGyU3jNRLCgzjqqd+0wKGNVf0DGCVJRXhCGF7Ggv+0E314CoEe3Di0V9syOVGP4YBpTMe6G+qlE7ki1WvyW/+A33IiG5syQ==; 24:DzMm/XH68B1tmLzHAWwJ9dME3QbNotDWNNj/xFq7UR4aSMtrYMQm7s5eEXkiyF4RKnAyPsGM9Wyre3Q7x/o7l/7sCeG8PDgLfrt+IpFM934=; 7:MataJYFDinVaa/Savatjg54k4hFXizQ0KWJR0mzSjbI9n7qCXeaikVg55wddCg4Cn6mhf9D1Q9HJ0Vo1G458JSVjHGsjirVPeOC6CSqOJPzRQwWRg9cfDJPSA2mNNL2IyJnlQoHr3sJef37xQaUjDWdL8Opha9kRg3vXlSFIZoUhc3aZ8oOEuQ48qsmJYOenrafiVuGkwBrueKK90N3oMdVneRVLjQciqtbNzgwqNya9wIioTdtIRmNzEYlyaNHalss7o0hAjNgS3eb0XqgNw/aAOrd4pIz+0+EaaXi2f3aXjWtxHmlcZ51vJJW3OW7/
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 2016 19:22:38.7799 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR05MB2191
Archived-At: <https://mailarchive.ietf.org/arch/msg/bier/TNiHn_sVndFKM0GZeoVzmfS6PGM>
Cc: Xuxiaohu <xuxiaohu@huawei.com>, "bier@ietf.org" <bier@ietf.org>, Pierre Pfister <pierre.pfister@darou.fr>
Subject: Re: [Bier] New Version Notification for draft-pfister-bier-over-ipv6-00.txt
X-BeenThere: bier@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "\"Bit Indexed Explicit Replication discussion list\"" <bier.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bier>, <mailto:bier-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bier/>
List-Post: <mailto:bier@ietf.org>
List-Help: <mailto:bier-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bier>, <mailto:bier-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 22 Sep 2016 19:22:52 -0000

Toerless, nice example.  But let's look at it more closely.

>                                          |-- Rcv1
>                              --- BFER1 --|
>                             /            |-- Rcv2
>        Src ---- Rtr --- BFIR
>                             \            |-- Rcv3
>                              --- BFER2 --|
>                                          |-- Rcv4
> 					|
> 					|-- Rtr2  ---- Rcv5
>
> Src sends one IPv6 unicast packet indicating (Rcv1,Rcv3,Rcv4). It will have a prefix
> owned by BFIR.
Actually, in this example, I think Src is the BFIR, what you call BFIR 
is actually just a BFR at the border of a BIER domain.

What does "owned by BFIR" mean?  Is the prefix jointly "owned" by all 
the BFRs bordering the BIER domain?  What about non-BFRs bordering the 
BIER domain?  What keeps the packet from going to them instead?

If Src thinks that the prefix is on the local network, it won't send the 
packet to Rtr, it will instead try to figure out the unicast MAC DA 
corresponding to the IP destination address.  This DA doesn't exist, so 
the packet will get dropped.  But if Src doesn't think that the prefix 
is on the local network connecting it to Rtr, it may send the BIER 
packet out a different interface.  Where will the packet end up then?

What if Src is doing load balancing among the default routers on the 
LAN, or among its interfaces?  For a given flow, the "IPv6 destination 
address" will change from time to time, which means the load balancing 
hash for that flow will change from time to time. This is the 
"non-deterministic ECMP" problem discussed in the architecture.  But 
since Src doesn't actually support BIER, it cannot use the solution 
described in the architecture draft.

What if there are receivers on the same LAN as the Src?  How will those 
receivers get the BIER packets sent by the Src?  Since Src thinks the 
BIER packet is a unicast packet, it will encapsulate it in a unicast 
ethernet frame whose MAC DA is a MAC address of Rtr. Since Rtr is not a 
BFR, Rtr will remove the ethernet header and forward the IPv6-BIER 
packet towards (let's say, for the sake of argument) the node you call 
BFIR.  How will BFIR get any copies of that packet back to the receivers 
that are on Src's subnet?  Sending the BIER packet (with modified 
BitString) back to Rtr will cause a loop.

> There it will be replicated by BIER. Copies arriving
> at BFER1,BFER2 will be converted back to IP unicast packets, one copy to Rcv2 from
> BFER1, one from BFER2 to Rcv3, one from BFER2 to Rcv4.

Suppose Src had an IP multicast packet to send, and encapsulated it in 
an IPv6-BIER header.  In that case, a BFER needs to decapsulate the 
packet and multicast the payload to the LAN on which the receivers 
reside.  How does a BFER know whether to (a) decapsulate and multicast 
or (b) whether to replicate, overwrite the destination address, and 
unicast?   I hope the answer isn't that the BFER needs to inspect the 
payload and guess what the hosts are expecting.

BFER2 needs to know which BFR-ids represent hosts on any particular LAN 
to which it is attached.  A BFR-id is just a shorthand for a BFR-prefix, 
i.e., for an IP address.   If BFER2 wants to use unicast replication to 
transmit on the last hop, why not just use the actual IP addresses of 
the receivers?

I don't see how BFER2 can get a BIER packet to Rcv5.  Rtr2 will at best 
loop the packet back to BFER2, and at worst the packet will get 
forwarded (through a route not necessarily shown in the above picture) 
all the way back to "BFIR", which "owns the prefix".

> How about supporting remote receivers like Rcv5 ? Sources can be remote so
> it would make sense to allow bidirectional support. Might need some signaling
> to BFER2 to map a remote IP address to a bit.
>
Each BFR and non-BFR can have a host route for every possible receiver, 
and some magic can be used to associate a BFR-id with each host route.  
That would eliminate some of the routing and looping issues.    There 
might be a few scaling issues though.

BTW, if one wants the BFR-ids to represent receiver hosts, one is going 
to need a lot more BFR-ids than if the BFR-ids represent BFERs.  So one 
would certainly  want to use an encapsulation that allows more than a 
64-bit BitString.  One could try to compensate for the very short 
BitString by having lots of sub-domains.  Then for each application (or 
perhaps each flow) one could try to assign the BFR-ids densely.   But 
we've heard that sub-domains aren't necessary for this encapsulation.  
More importantly, if a short BitString leads to more sub-domains, we 
will see an increase in the operational complexity and signaling load of 
the scheme.