Re: [dc] 答复: Re: Requirement for a method to manage mac address in DC

Andy Dockerty <andyd@juniper.net> Fri, 03 February 2012 07:24 UTC

Return-Path: <andyd@juniper.net>
X-Original-To: dc@ietfa.amsl.com
Delivered-To: dc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6746821F84F1 for <dc@ietfa.amsl.com>; Thu, 2 Feb 2012 23:24:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.524
X-Spam-Level:
X-Spam-Status: No, score=-5.524 tagged_above=-999 required=5 tests=[AWL=0.622, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4, SARE_SUB_ENC_UTF8=0.152]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3vsXiS01FC8I for <dc@ietfa.amsl.com>; Thu, 2 Feb 2012 23:24:25 -0800 (PST)
Received: from exprod7og101.obsmtp.com (exprod7og101.obsmtp.com [64.18.2.155]) by ietfa.amsl.com (Postfix) with ESMTP id 5A02C21F84EF for <dc@ietf.org>; Thu, 2 Feb 2012 23:24:18 -0800 (PST)
Received: from P-EMHUB01-HQ.jnpr.net ([66.129.224.36]) (using TLSv1) by exprod7ob101.postini.com ([64.18.6.12]) with SMTP ID DSNKTyuLmJmTqlaBO+xkuCQ/L81ey/DeKAJD@postini.com; Thu, 02 Feb 2012 23:24:19 PST
Received: from emailfehk1.jnpr.net (172.27.128.44) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.3.213.0; Thu, 2 Feb 2012 23:23:19 -0800
Received: from emailhk3.jnpr.net ([172.27.128.45]) by emailfehk1.jnpr.net with Microsoft SMTPSVC(6.0.3790.4675); Fri, 3 Feb 2012 15:23:17 +0800
Received: from 172.27.128.44 ([172.27.128.44]) by emailhk3.jnpr.net ([172.27.128.45]) with Microsoft Exchange Server HTTP-DAV ; Fri, 3 Feb 2012 07:23:16 +0000
References: <1495751257.716820.1328253325254.JavaMail.root@zimbra-prod-mbox-3.vmware.com>
Thread-Topic: [dc] ??: Re: Requirement for a method to manage mac address in DC
Thread-Index: AcziRLKbLdnuXkArQbSmgjlyqFv7AQ==
Content-Transfer-Encoding: 7bit
From: Andy Dockerty <andyd@juniper.net>
Content-Type: multipart/alternative; boundary="Apple-Mail-03F7CCCF-C0CF-410B-876D-91975BE0F6FF"; charset="utf-8"
In-Reply-To: <1495751257.716820.1328253325254.JavaMail.root@zimbra-prod-mbox-3.vmware.com>
Message-ID: <008A37CB-C9B0-46FD-8190-C5C8BA6BD6BC@juniper.net>
Date: Fri, 03 Feb 2012 18:26:23 +1100
To: Mallik Mahalingam <mallik@vmware.com>
MIME-Version: 1.0 (1.0)
X-OriginalArrivalTime: 03 Feb 2012 07:23:17.0628 (UTC) FILETIME=[B30933C0:01CCE244]
X-EXCLAIMER-MD-CONFIG: e4081efb-6d29-443c-8708-750833aec629
Cc: Thomas Narten <narten@us.ibm.com>, yu jinghai <yu.jinghai@zte.com.cn>, Truman Boyes <tboyes@gmail.com>, dc@ietf.org, Lizhong Jin <lizho.jin@gmail.com>
Subject: Re: [dc] 答复: Re: Requirement for a method to manage mac address in DC
X-BeenThere: dc@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF Data Center Mailing List <dc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dc>, <mailto:dc-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dc>
List-Post: <mailto:dc@ietf.org>
List-Help: <mailto:dc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dc>, <mailto:dc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Feb 2012 07:24:26 -0000

Mallik,

I like the idea of extending the use of OUIs beyond his. If the future holds true "grid" computing, with providers offering cycle competitively, a unique organizational identity at layer 2 could be useful.

 I  am aware that there are concerns about "OUI address space", that not withstanding, the creation of an OUI space analogous with RFC1918 address space, coupled with the extension of OUI registration may offer an option to ensure organizational or locally significant MAC uniqueness....


Andy 
 

On 03/02/2012, at 18:15, "Mallik Mahalingam" <mallik@vmware.com> wrote:

> Virtual Center [VMware management software] uses combination of one of the OUI assigned to VMware and Virtual Center ID  [which can be configured] to generate  MAC address with in a range for VM's use. It ensures that MAC address assigned to VMs that are managed by it gets non overlapping MAC address.
> 
> Mallik
> 
> From: "yu jinghai" <yu.jinghai@zte.com.cn>
> To: "Mallik Mahalingam" <mallik@vmware.com>
> Cc: "Thomas Narten" <narten@us.ibm.com>, "Truman Boyes" <tboyes@gmail.com>, dc@ietf.org, "Lizhong Jin" <lizho.jin@gmail.com>
> Sent: Thursday, February 2, 2012 10:08:39 PM
> Subject: [dc] 答复: Re:  Requirement for a method to manage mac address in DC
> 
> 
> Hi Mallik: 
>         I learned about that Xen generate MAC address by an algorithm base the timestamp. 
> I don't know well about other virtualization platform. 
>         As you say that:   
> > There is some notion of Management-Entity(s)/controller(s) allocating the 
> > MAC addresses for VMs and ensures that it does not assign the same MAC 
> > address to two different VMs and this work only within the scope of that 
> > management/controller administration. 
>         
> why does it work only within the scope of that management/controller administration? 
> How do VMs get the MAC addresses? 
> Could you please elaborate? 
> 
> 
> >-----------------------------------------<
> ╭⌒╮¤          Innovation change 
>                          the world  
> ╭╭ ⌒╮        ●╭○╮   
> ╰ ----╯       /█∨█\  
> ~~~~~~~~~~~~~~~~~∏~~∏~~~~~~~~~~~~~~~~~
>           My nickname: Fisher Yu
> >----------------------------------------< 
> 
> Mallik Mahalingam <mallik@vmware.com> 写于 2012-02-03 03:21:56:
> 
> > In a virtualized environment MAC addresses are not totally random generated. 
> > There is some notion of Management-Entity(s)/controller(s) allocating the 
> > MAC addresses for VMs and ensures that it does not assign the same MAC 
> > address to two different VMs and this work only within the scope of that 
> > management/controller administration. There are some exceptions of course 
> > (a) MAC address exhaustion under a given OUI category  (b) manual 
> > copy/cloning of VMs and powering on them using standalone management 
> > entities (c) VMs that use MAC address override for legitimate reasons 
> > [because else things like licensing software breaks].  There are some 
> > mechanisms in place to address (a), but (b) and (c) requires co-operation at 
> > the management-entity/controllers.
> > 
> > Mallik
> > 
> 
> > From: "Truman Boyes" <tboyes@gmail.com>
> > To: "Thomas Narten" <narten@us.ibm.com>
> > Cc: "yu jinghai" <yu.jinghai@zte.com.cn>, dc@ietf.org, "Lizhong Jin"
> > <lizho.jin@gmail.com>
> > Sent: Thursday, February 2, 2012 10:20:07 AM
> > Subject: Re: [dc] Requirement for a method to manage mac address in DC
> > 
> > 
> 
> > On Thu, Feb 2, 2012 at 10:55 AM, Thomas Narten <narten@us.ibm.com> wrote: 
> > Truman Boyes <tboyes@gmail.com> writes:
> > 
> > > The L2 separation between multiple tenants is true in most circumstances in
> > > DCs, but in commodity computing (ie. VPS, low cost dedicated servers, or
> > > co-location) there is a concern on IPv4 address exhaustion or waste, so
> > > machines/instances are grouped on single L2 segments. It is possible to
> > > have virtual MAC overlaps on these segments. Is this something that this
> > > group wishes to evaluate options to solve?
> 
> > IMO, this is putting the cart before the horse.
> > 
> > Can we first get a sense for how big a problem this is in practice and
> > whether existing mitigation approaches are not sufficient?
> > 
> > I.e., is this a real problem causing significant pain today, or are
> > their other bigger "pain points" that we should be looking at?
> > 
> > Thomas
> 
> > 
> > In the VPS/VM world,  I would say it's not a significant issue 
> > because there are single entities (Organizations) that manage the 
> > MAC addresses. Typically software would just increment the virtual 
> > MACs, and this does not require external protocols to ensure 
> > uniqueness. If there are many provisioning systems that manage VMs 
> > on the same network segment then they will need to keep their 
> > database in sync. 
> > 
> > -- 
> > --truman
> > 
> > 
> > _______________________________________________
> > dc mailing list
> > dc@ietf.org
> > https://www.ietf.org/mailman/listinfo/dc 
> _______________________________________________
> dc mailing list
> dc@ietf.org
> https://www.ietf.org/mailman/listinfo/dc
> 
> _______________________________________________
> dc mailing list
> dc@ietf.org
> https://www.ietf.org/mailman/listinfo/dc