Re: [Bier] Comments on draft-chen-bier-egress-protect

Huaimo Chen <huaimo.chen@futurewei.com> Mon, 16 November 2020 04:35 UTC

Return-Path: <huaimo.chen@futurewei.com>
X-Original-To: bier@ietfa.amsl.com
Delivered-To: bier@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2BD263A12BB; Sun, 15 Nov 2020 20:35:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.989
X-Spam-Level:
X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H2=-0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=futurewei.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UWSaPJkalUtg; Sun, 15 Nov 2020 20:35:01 -0800 (PST)
Received: from NAM12-DM6-obe.outbound.protection.outlook.com (mail-dm6nam12on2119.outbound.protection.outlook.com [40.107.243.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C0673A12B8; Sun, 15 Nov 2020 20:35:00 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=OvEvUdPya4ci3vhXuA8rlzAi3DL8c7aeu9U5DvYVzb/xPnIGhroAkte8LZcEw+1+V7z26TmzmdSBhZkRikC57vg9G4IBmVxxFTCh/t6/bMbC9PoyK20UNfBTyg4HDsJ6rgQa8gHCW6i+xkmEL1WooZSf3ShsdPblp/4nhbWts718+4tPlsilk5hhtk7pVklJYDHnDVpBMrtWtDA9ngIEWaOQ54sMjnBtJknWnhtPtErthDSCr0d8erFgTAM9+ajzbzUOqrJ1o+tWXrocqkZwZA+IlsFmEITfxOKvlGamTPxl1NE+jvyRMmCDISvX773+ybqDIR7LclZkY0zSscWYsA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mRUCePBkgRT0lnXrrwH15voaYog73x99evkJFGbB+FQ=; b=N0VtW0NNuZByxy9MBXQ/FwWBjmt3VYpeWu/BR/Dtol88eWnfyckDuAsRxGAU9RUnYn/nhTYqHkk2rMll6X+5MykrsUsa90HovwtPS51PIQf/2YR/xPbl+giddCmCVp2D8XlpcDOchHAyA2oHXcWWQcjj6P4n26JQjHLKNWFNbd+sa1qWLaP7W3VHAvqb29qCZCIuClIzXPtdBbiqXxWGbytsUZkZ0l9I9ZWIHnUYVQDwvO4axxSXvZUJzBUd9KoiDhICzPWDdcPWFgzcsYqM0e52Sx9KCVQ3PBa1GEb4bAowAyBjEM+l9W/gC+uJxFvMcGRk/Mq5rpclxaM+cJ6l2w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=futurewei.com; dmarc=pass action=none header.from=futurewei.com; dkim=pass header.d=futurewei.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Futurewei.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mRUCePBkgRT0lnXrrwH15voaYog73x99evkJFGbB+FQ=; b=Kc0DEIu/a+woonQPb71bV50pR/SMC1Mxhzy39FvNPKQVaFV4nAtgNYwL/GcdXkmT93DEZ2XFJLIN7TCH2YnKPMygQnW8+1YStgyQtSSeExFd7gEWorTVeDM7tim+BSd5wdmVOdCYu/cT+Lym3kR+RGJjCZZeyflvAoLgLBvkUvQ=
Received: from MN2PR13MB4087.namprd13.prod.outlook.com (2603:10b6:208:263::16) by MN2PR13MB3311.namprd13.prod.outlook.com (2603:10b6:208:163::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3589.16; Mon, 16 Nov 2020 04:34:57 +0000
Received: from MN2PR13MB4087.namprd13.prod.outlook.com ([fe80::f87c:c7c8:590d:a631]) by MN2PR13MB4087.namprd13.prod.outlook.com ([fe80::f87c:c7c8:590d:a631%8]) with mapi id 15.20.3589.016; Mon, 16 Nov 2020 04:34:57 +0000
From: Huaimo Chen <huaimo.chen@futurewei.com>
To: "Jeffrey (Zhaohui) Zhang" <zzhang@juniper.net>, "bier@ietf.org" <bier@ietf.org>, "draft-chen-bier-egress-protect@ietf.org" <draft-chen-bier-egress-protect@ietf.org>
Thread-Topic: Comments on draft-chen-bier-egress-protect
Thread-Index: Ada5vvMvFeacYzjXQ6aWuJUER57JuwCEmtDd
Date: Mon, 16 Nov 2020 04:34:57 +0000
Message-ID: <MN2PR13MB4087E426ADAB14E193617804F2E30@MN2PR13MB4087.namprd13.prod.outlook.com>
References: <BN8PR05MB597033A86ABD95CB10357BDFD4E60@BN8PR05MB5970.namprd05.prod.outlook.com>
In-Reply-To: <BN8PR05MB597033A86ABD95CB10357BDFD4E60@BN8PR05MB5970.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=0e9d712d-7ae5-4565-b32d-6ab049d0216a; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=0; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-11-13T13:14:25Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4;
authentication-results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=futurewei.com;
x-originating-ip: [2601:199:4300:8e5a:fd15:3724:a0c3:37b8]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: da874d9e-8ccd-4a86-e3c2-08d889e8f8f9
x-ms-traffictypediagnostic: MN2PR13MB3311:
x-microsoft-antispam-prvs: <MN2PR13MB3311169FBE42313A08847955F2E30@MN2PR13MB3311.namprd13.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: pQdUDSCzUkRSUrTbUO3DHgq/AdX2KxVjnePzabPPJ5x6KFbarKe4QOsn1KcQEIL5r6ObOq9TBZBlX0zGlEhvJB8oUHKGwk9YSk8XnF9lY2UuMi8bcgfGtMnFOHAiOOF+Azw+XjBHhlb4ht1x3UsetgYOog2Wo9/xZjbDD3pmCBCu9bOW45royP4+c6DpWkOEBYXaIEF+z1Mbkpuk0XRQWVrvn+OIjJGt9fuAA7dpEJL/D0IY9A1lNt0Gfa/W7Dt19YCjAG+JbpTAZfsZzlVC49+fAaUZLf5vofuz5t6eina9FgNQYWB+5U+72XLYURCVUqHspUK89oDOGTMggebTQQzcktu2ZlYiTlsLn9tZFQjFdWKZdPTOLI6pGVrgHWbA2ZXulMjVtLJrCjahz4MF4g==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR13MB4087.namprd13.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(366004)(346002)(136003)(396003)(39830400003)(166002)(71200400001)(83380400001)(8676002)(5660300002)(8936002)(19627405001)(2906002)(55016002)(7696005)(9686003)(86362001)(66556008)(66446008)(64756008)(66476007)(6506007)(76116006)(66946007)(186003)(53546011)(33656002)(52536014)(478600001)(316002)(110136005)(966005)(44832011); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata: KTU9WXGb2WjjzRGa5w2peIKIDquONOub01My9HP0UPoelLliUtR1cX63HRwd/mVTqUKhhAll1/Teo+Du2JTtiqVjk3PgdKdBGl9qaE7rykwNlEM5/6Vw/JkrfeVgqW86GlOsmeLrzq4yH5xiJ2i5Goh/5YJwQSzrhDbMEcAKv7sDzcXpyCNg+JlvnUtoq51z0w3C6gWGbFiYejRzOhpVKAvjL5IPwzO93kcpyk0nUmX6L0ZpgkU2h7TtDdHi05pSYZfC17ysDj2om70puwTFSZ6YpzVliXaRgamfidWMDe8d5Y2+oCQChcwuUVANYHGBSXnAoB4pkSqknFWgA3xLg8glGX4PC5IEcpp0/XRfBOrLDzCcALgGEvCuoBX8ShPKQpMTWXQPvKn/RasHqlnKSay24p3foNGf8qjVsrNx/oeDXJGb4FIq5YFzjBt8gs8R6b+kAxO38n571RtNLiA7hg5DRCSoZoHTGXAepcdjd66NJ1RkWErMLbw+dpKfiniNFJY5xnsOaEHYMZUDg3qpvAifNnx8Myk5v2umnF5b+dqlR5I/VME/zyQGw18Ow0PYe9Ue93lGWmYsNYJ7uyuMPLTfTfLk6eeyq0njm8Mhihx5RlaVl4lr0klEfMtxJabzqj+x/3jbIQgjFA6Pwny8adRiLahsXUPMNTU5BJJXgKRi1NBTP0He57MyBQUJ4q+WpvEC2G5VT65Ca/Qlm9kWCOBC9EjpJs2uYBk9Grba7xjrCCp57/jmCggNzfMptkWFHekqyolY+PiIxZnmXLuQQegL/qoz1LCcn+BmvCKvJcNsKtpkN2FeQepZYsGFDkqK6DWtifczx5OiCmHcO6gLBt+i6PZKQpkLhNHmTEUwe6PGS3rMcJ7v8G5Nt45UMs6KEu2PNRJJgsLJB/+FCqgwVab0uMTLyWdnp1r+Mt19MPPIijaq0/NOouLrSVn3aDEuFWED0bAw0HtpJj+WUCN1hQ==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_MN2PR13MB4087E426ADAB14E193617804F2E30MN2PR13MB4087namp_"
MIME-Version: 1.0
X-OriginatorOrg: Futurewei.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR13MB4087.namprd13.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: da874d9e-8ccd-4a86-e3c2-08d889e8f8f9
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Nov 2020 04:34:57.4304 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 0fee8ff2-a3b2-4018-9c75-3a1d5591fedc
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: priMcRSl1jXMsOlJ9BysYeRmdZH78DKzZxc1bYqZLM7LDHV024YxLFBGFYjWiIOBoJCfYXB5hD1aA2ZdgdBdeA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR13MB3311
Archived-At: <https://mailarchive.ietf.org/arch/msg/bier/7o8JOJH5AfdYBqmNTBRM7iFrOkk>
Subject: Re: [Bier] Comments on draft-chen-bier-egress-protect
X-BeenThere: bier@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "\"Bit Indexed Explicit Replication discussion list\"" <bier.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bier>, <mailto:bier-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bier/>
List-Post: <mailto:bier@ietf.org>
List-Help: <mailto:bier-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bier>, <mailto:bier-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Nov 2020 04:35:03 -0000

Hi Jeffrey,

    Thank you very much for your comments.
    My responses are inline below with prefix [HC].

Best Regards,
Huaimo

________________________________
From: Jeffrey (Zhaohui) Zhang <zzhang@juniper.net>
Sent: Friday, November 13, 2020 8:52 AM
To: bier@ietf.org <bier@ietf.org>; draft-chen-bier-egress-protect@ietf.org <draft-chen-bier-egress-protect@ietf.org>
Subject: Comments on draft-chen-bier-egress-protect

Hi,

Similar to my comments about draft-chen-bier-frr, you don't need a separate EP-BIFT. But that's not my main concern.

[HC]: Using a separate EP-BIFT may be simpler.


Consider the following situation:

     BFIR1  ----- BFR  ------ BFER1  ----- ce1
            \                           /
             ---------------------- BFER2
                                         \
                                         ce2

Both ce1 and ce2 receive traffic from BFER1 and BFER2 respectively in normal conditions, and BFIR1 sets two bits in the bitstring. Now if BFER1 fails and the BFR flips on BFER2’s bit for in-flight packets targeted at BFER1, ce2 will receive duplicates.

[HC]: My understanding is that in this case, ce1 receives traffic
from both BFER1 and BFER2 in the same multicast path/tree,
it seems that there is no need to provide protection for either of
them (BFER1 and BFER2) since ce1 (dual homed to BFER1 and BFER2)
will receive the multicast traffic from one of them when any one
of BFER1 and BFER2 fails. Thus, ce2 will not receive duplicates.


While one can argue that the targeted scenario does not have ce2, BIER egress protection design should not be based on that. There are two problems to solve at different layers.

At the overlay, BFER2 should not deliver to ce2 the traffic that is supposed to be via BFER1. This applies to both BIER and other transport means (e.g. p2mp tunnels).

To facilitate that, the transport must make sure that BFER2 knows the FRR’ed traffic was supposed to be via BFER1. In BIER case, the bit for BFER1 must not be flipped to the BFER2 bit.

The BIER tethering solution https://datatracker.ietf.org/doc/draft-ietf-bier-tether/<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-ietf-bier-tether%2F&data=04%7C01%7Chuaimo.chen%40futurewei.com%7Cc10ed6adadec4d2ef57808d887db659b%7C0fee8ff2a3b240189c753a1d5591fedc%7C1%7C1%7C637408723668119037%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=ITrup6Oup09WdQs%2FXx3Pe9haFnqMGUuwWy1LahHFUHs%3D&reserved=0> can be easily extended to solve the second problem. BFER2 can signal that it is the helper for BFER1 (but only for egress protection). This can be done by adding an Egress Protection sub-sub-tlv to the “BIER Helped Node” sub-tlv defined in the tethering draft.

Then, upon failure the BFR will tunnel in-flight packets to BFER2. When BFER2 gets the packet, it sees the BFER1 bit, notices BFER1 is unreachable and it is the helper node so it will send the packet to overlay for proper forwarding.

[HC]: We will consider the extension and suggestions you proposed
in more details and incorporate them into the draft accordingly.



Jeffrey


Juniper Business Use Only