Re: [Detnet] AD Review of draft-ietf-detnet-mpls-over-ip-preof-07

Balázs Varga A <balazs.a.varga@ericsson.com> Tue, 07 November 2023 14:11 UTC

Return-Path: <balazs.a.varga@ericsson.com>
X-Original-To: detnet@ietfa.amsl.com
Delivered-To: detnet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F40FC16F41D for <detnet@ietfa.amsl.com>; Tue, 7 Nov 2023 06:11:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.11
X-Spam-Level:
X-Spam-Status: No, score=-2.11 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id njBKwjmP5zU7 for <detnet@ietfa.amsl.com>; Tue, 7 Nov 2023 06:11:39 -0800 (PST)
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04on2052.outbound.protection.outlook.com [40.107.8.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B47AC17DBF7 for <detnet@ietf.org>; Tue, 7 Nov 2023 06:11:38 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Yr1Jyn4R4JBEfzQJB9HkeoNC4UyZEb5EqH3WaUJDBJWNotTqeKKEAPeroza8guY8Va/tuWVYA7XIwjskNQbvizgRPUv/NlxypKUay12cgek2NVb8zW3IsnArYbq6NgjO3oDQdFDJx772c3UYivotCu+14+zDTkyJPoAwqwpVI2fMn7dS9GKKgGmqNuX8FOkhVijPyeoVRWm3DR7CLzGB/imqClxh8s1iWul1QdqsWVqXYiZ3FFt6CSSUdRhxCab/AX5IIpAf7WwgILopog+HzPeIM4LXQ55eKYdYYpo1M/h3M4TuUEvMRBHs+FtCw3k4QihFe9yq4y2LEu66epZmFg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=x4qX13RNbIfazddvVEJN4aIA5x1COsKLXvET38VH0W0=; b=H0lT3i3tfN2Oj0mclfKVRUNw+k9aGV1ekimmJleGqQuRqhlUbb//erCnKWErYh3N8b5Fid0keiuWwO6t87gDuVLaWeq/5SCEKRno79Lt6bJw4WpOpiaWjJdXwQnKSnKItuNmTk+NAtAc4INZKazbmsNKCazo+fSnxcZIDBgLj7LkRUCt1EWryE7k1kvTQmWGfbsLlOf8AOA7SpNpe9yLDfx6doeREABR8wd41zIr2mGtiGEMuouyF3ABoknvxTF5nErPsw610HnYCqBDFzSBCDpeWWjy/lz/SsPOF7avuZPKiTHXqGn4/Q7iEjndR82eB+J5/onh84i1fcxiq1WNzQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=x4qX13RNbIfazddvVEJN4aIA5x1COsKLXvET38VH0W0=; b=GA5un54YzRuQfkPhD57vJ7Wi8X2WBnXm5F5E9YTVq853wTqSj2i4bQlW+X0BloVRL86vZaXo/CHRpgQ1fiJYTkrvjO+ZWkoOqilivp+q7oD/EAy/cRrGsBAjWig8de0S7RZBSJEaGm3GQ48JZNhOiKyLtDKMC1yYfK1dkWRZ312pRotdmHMJcN0uhVm7tOgrFD29tWU8qo6ZWlxkj+arIVNhh/Bky8LLh6jTCLmFmAF5muErudhkjMRrZQwijDTqDodN7Q4eVJFm8m1Yage9W24OEnid2Xktg31WnMlxNC/GiMtDEUZApSKmPkxASdf0XcVXuU9aKFhb/34Gwh5xPw==
Received: from AM0PR07MB5347.eurprd07.prod.outlook.com (2603:10a6:208:e7::31) by AM7PR07MB6897.eurprd07.prod.outlook.com (2603:10a6:20b:1b6::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6954.25; Tue, 7 Nov 2023 14:11:35 +0000
Received: from AM0PR07MB5347.eurprd07.prod.outlook.com ([fe80::a62d:d09d:94ab:2a3d]) by AM0PR07MB5347.eurprd07.prod.outlook.com ([fe80::a62d:d09d:94ab:2a3d%5]) with mapi id 15.20.6954.028; Tue, 7 Nov 2023 14:11:34 +0000
From: Balázs Varga A <balazs.a.varga@ericsson.com>
To: Roman Danyliw <rdd@cert.org>, "detnet@ietf.org" <detnet@ietf.org>
Thread-Topic: [Detnet] AD Review of draft-ietf-detnet-mpls-over-ip-preof-07
Thread-Index: AdoJGDiIzzQbfm+URkyylkkxIPBmnwIYnB5A
Date: Tue, 07 Nov 2023 14:11:34 +0000
Message-ID: <AM0PR07MB53479D8B8606D6594FC18BBBACA9A@AM0PR07MB5347.eurprd07.prod.outlook.com>
References: <BN2P110MB1107404798D0C8B39A0F5B8ADCDCA@BN2P110MB1107.NAMP110.PROD.OUTLOOK.COM>
In-Reply-To: <BN2P110MB1107404798D0C8B39A0F5B8ADCDCA@BN2P110MB1107.NAMP110.PROD.OUTLOOK.COM>
Accept-Language: hu-HU, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ericsson.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AM0PR07MB5347:EE_|AM7PR07MB6897:EE_
x-ms-office365-filtering-correlation-id: 57522a87-9d1e-414b-937d-08dbdf9b7316
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR07MB5347.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(366004)(136003)(39860400002)(376002)(396003)(346002)(230922051799003)(186009)(451199024)(64100799003)(1800799009)(38070700009)(85202003)(55016003)(122000001)(64756008)(66446008)(66476007)(76116006)(66556008)(316002)(66946007)(38100700002)(86362001)(85182001)(478600001)(33656002)(71200400001)(110136005)(82960400001)(53546011)(83380400001)(9686003)(7696005)(6506007)(52536014)(8676002)(2906002)(966005)(26005)(41300700001)(8936002)(5660300002); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM0PR07MB5347.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 57522a87-9d1e-414b-937d-08dbdf9b7316
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2023 14:11:34.6271 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 05KnlD6GgC0wmiciU/vG4/VeUPvtC8tpnZj3qMdm1mzzLjx/bTjOa5wEoZ/z+le0qIvahzyWTC9EwDiqbgRE9Bg/T55xBf4EuNwFqdoAzzk=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR07MB6897
Archived-At: <https://mailarchive.ietf.org/arch/msg/detnet/-zFIOAxD2PPkZAcvekNTfcob-qI>
Subject: Re: [Detnet] AD Review of draft-ietf-detnet-mpls-over-ip-preof-07
X-BeenThere: detnet@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Discussions on Deterministic Networking BoF and Proposed WG <detnet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/detnet>, <mailto:detnet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/detnet/>
List-Post: <mailto:detnet@ietf.org>
List-Help: <mailto:detnet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/detnet>, <mailto:detnet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Nov 2023 14:11:43 -0000

Hi Roman,

Many thanks for your detailed review and good suggestions. 
Please, find replies and resolutions as follows:

1, Section 4.2, Encapsulation clarifications.
Right, there are many references used to define the encapsulation. We intended to avoid repeating text from those RFCs.
The concept is based on UDP tunnels between nodes implementing DetNet service sub-layer functionalities (=PREOF). 
Within the UDP tunnel DetNet MPLS PseudoWire encapsulation is used. So the UDP payload starts with a standard 
"MPLS label stack". (32 bits label(s) followed by a d-CW followed by a payload). You know the UDP payload format 
from the UDP destination port (=6635). As defined in RFC7510: UDP destination port number (6635) indicating MPLS. 
It has been allocated by IANA.

2, Section 4.4, Aggregation
OK, PREOF requires per DetNet flow state information. In order cope with scalability aggregation was introduced, where 
state for PREOF is needed only for the aggregate. Nodes doing aggregation/de-aggregation know the "aggregation flavor"
from their configuration.  
-- How do I know the header in UDP is “S-Label + dCW” vs. “A-Label + dCW + S-Label + dCW”?
This is known from explicit configuration of the node. Clarification added as follows:

NEW TEXT (added to the end of the section)
   The option used for aggregation is known by configuration of the aggregation/de-aggregation nodes. 
END

3, Section 5. Specifying App-flow identification information.
-- How do I specify that?
-- *  PREOF + related Service-ID(s). Does that mean to have PREOF “information” for configuration? Does that mean choosing the algorithms?
Right, all these information are specified by the configuration of the node. PREOF functionality is configured 
in detail (flow parameters, function parameters, algorithms, etc.)
I intend to add reference to "RFC9016: DetNet Flow and Service Information Model".

NEW TEXT (added to the end of the section)
   These parameters are defined in the DetNet Flow and Service information model [RFC9016] 
   and the DetNet YANG model.
END

4, Section 6., Please cite by reference which security considerations apply.
OK, Security consideration of DetNet MPLS [RFC8964] and DetNet MPLS over UDP/IP [RFC9025] applies.

OLD TEXT
   There are no new DetNet related security considerations introduced by
   this solution.
NEW TEXT
   There are no new DetNet related security considerations introduced by
   this solution. Security considerations of DetNet MPLS [RFC8964] and 
   DetNet MPLS over UDP/IP [RFC9025] apply.
END

5, Idnits reports: unused references.
OK, they are removed.

Above changes will be posted in v08 (today).
Please, let us know if You think further changes are needed.

Thanks
Bala’zs


-----Original Message-----
From: detnet <detnet-bounces@ietf.org> On Behalf Of Roman Danyliw
Sent: Friday, October 27, 2023 11:05 PM
To: detnet@ietf.org
Subject: [Detnet] AD Review of draft-ietf-detnet-mpls-over-ip-preof-07

Hi!

I performed an AD review of draft-ietf-detnet-mpls-over-ip-preof-07 stepping in as the responsible AD to help load-balance the PubReq queue.  Thanks for the document.

Begging your patience not being a RTG AD, I have difficulty understanding the basic encapsulation semantics being proposed.  I tried following the references, but wasn’t able to understand how to construct the basic encapsulation.  See below:

** Section 4.2.  Figure 3 is describing an encapsulation header built on fields and processes based on [RFC8964] and [RFC9025].  The UDP payload appears to be an S-Label + dCW + Detnet payload.  Section 4.2.1 of RFC8964 describes the d-CW format and semantics. Section 4.2.2 of RFC8964 has significant text describing S-Labels, but where is the very basic description: how many bits is it?  What are the semantics?

** Section 4.4. 
-- No objection to this text.  However, this behavior seems like an expansion of the PREOF scope I understand the document be.  Is there narrative text that can bridge how aggregation is a building block for replication, elimination and ordering?  I could perhaps speculate on replication and elimination. Less so on ordering.

-- I’m missing a basic understanding of layering.  How do I know the header in UDP is “S-Label + dCW” vs. “A-Label + dCW + S-Label + dCW”?

** Section 5.
   The minimum set of information for the configuration of the DetNet
   service sub-layer is summarized as follows:

   *  App-flow identification information.

How do I specify that?

...
   *  PREOF + related Service-ID(s).

Does that mean to have PREOF “information” for configuration?  Does that mean choosing the algorithms?

** Section 6.
   There are no new DetNet related security considerations introduced by
   this solution.

Please cite by reference which security considerations apply.

** Idnits reports:

  == Unused Reference: 'RFC2119' is defined on line 427, but no explicit
     reference was found in the text

  == Unused Reference: 'RFC8174' is defined on line 432, but no explicit
     reference was found in the text

Regards,
Roman
_______________________________________________
detnet mailing list
detnet@ietf.org
https://www.ietf.org/mailman/listinfo/detnet