Re: [DMM] SRv6 for Mobile User-Plane

"Pablo Camarillo (pcamaril)" <pcamaril@cisco.com> Wed, 28 February 2018 16:04 UTC

Return-Path: <pcamaril@cisco.com>
X-Original-To: dmm@ietfa.amsl.com
Delivered-To: dmm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3E5D12D960 for <dmm@ietfa.amsl.com>; Wed, 28 Feb 2018 08:04:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.53
X-Spam-Level:
X-Spam-Status: No, score=-14.53 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VBgPnmVOLCHB for <dmm@ietfa.amsl.com>; Wed, 28 Feb 2018 08:03:58 -0800 (PST)
Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D4E112EB22 for <dmm@ietf.org>; Wed, 28 Feb 2018 08:03:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=50916; q=dns/txt; s=iport; t=1519833825; x=1521043425; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=drhXvDFfRm/3VMBs3amjNCIZNF4Nd++CMb0fIU/IDGE=; b=FGEbVMdbX/jP/bM1XVChnH05GXgdPZDcBbhhUEIfe1g8cuwmusokEDah sMA6EhXhnEyfiysyOQkSH8UXhjyk2IKxSlIOxiPvZaMbC0OihEOPB36Yc L2Hf4mUUumUoLWChM4LSCJ9m5b5YiadYFjrvIy4SLvcn2k+cvfkziCFpr I=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AYAQDJ0ZZa/4wNJK1dGQEBAQEBAQEBAQEBAQcBAQEBAYJadmZwKAqDSooijXGCAoEWhyGNCoIVCiOBXIMxAhqCPFQYAQIBAQEBAQECayiFJAEEASMEUgULAgEIOAEJAgICHxElAgQOBRuEHUwDDQgQqn2BbTqEcoJFDYEwghYBAQEBAQEBAQEBAQEBAQEBAQEBAQEYBYUjgieBV4FlASmDBIJqRASBSD4hglUwgjIFiCCFUoVHhmkwCQKGToMOgyE8gzmBZhyEGYc0gSaJezmGcgIRGQGBLQEeOIFScBU6KgGCGIJDHIF7d4l0gTGBFwEBAQ
X-IronPort-AV: E=Sophos;i="5.47,406,1515456000"; d="scan'208,217";a="360096191"
Received: from alln-core-7.cisco.com ([173.36.13.140]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Feb 2018 16:03:43 +0000
Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id w1SG3hQu003032 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 28 Feb 2018 16:03:43 GMT
Received: from xch-rcd-004.cisco.com (173.37.102.14) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 28 Feb 2018 10:03:42 -0600
Received: from xch-rcd-004.cisco.com ([173.37.102.14]) by XCH-RCD-004.cisco.com ([173.37.102.14]) with mapi id 15.00.1320.000; Wed, 28 Feb 2018 10:03:42 -0600
From: "Pablo Camarillo (pcamaril)" <pcamaril@cisco.com>
To: Satoru Matsushima <satoru.matsushima@gmail.com>
CC: "dmm@ietf.org" <dmm@ietf.org>
Thread-Topic: [DMM] SRv6 for Mobile User-Plane
Thread-Index: AQHTrz2EkdlUTEgOZkOyFoFQp4mIrKO4EfuAgAJgSAA=
Date: Wed, 28 Feb 2018 16:03:42 +0000
Message-ID: <FD779A0B-6AAE-4E25-BD29-E8B3DD9BF77D@cisco.com>
References: <BE09C12C-4301-441A-BD7E-C5E803F0EB43@cisco.com> <EF698DC0-96E4-42FD-80D2-02B94333C8A0@gmail.com>
In-Reply-To: <EF698DC0-96E4-42FD-80D2-02B94333C8A0@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.55.164.4]
Content-Type: multipart/alternative; boundary="_000_FD779A0B6AAE4E25BD29E8B3DD9BF77Dciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmm/7WxBzjemMKxAV0c2OpKkfwbm050>
Subject: Re: [DMM] SRv6 for Mobile User-Plane
X-BeenThere: dmm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Distributed Mobility Management Working Group <dmm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmm>, <mailto:dmm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmm/>
List-Post: <mailto:dmm@ietf.org>
List-Help: <mailto:dmm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmm>, <mailto:dmm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Feb 2018 16:04:02 -0000

Hi Satoru,



Thank you for your detailed comments. Replies inline [PC].



Cheers,

Pablo.



On 27/02/2018, 05:46, "Satoru Matsushima" <satoru.matsushima@gmail.com> wrote:

    Pablo,



    First of all, thank you for your thorough review on the draft, and concrete proposal to improve it.

    I think I agree almost on the three proposals. Let me comment on some of your points.





    > [...snip...]



    >

    > I believe its straightforward to support IPv4 UE traffic by doing SRv6 with T.Encaps behavior. Hence, I think this should be documented in the draft.



    Yes.

[PC]: I have proposed some text with the packet workflow in the github repository for this draft. Please review it.



    > The encapsulation behavior should be the default one, both for IPv4 and IPv6 UE traffic. However, a specific provider is allowed to do SRH insertion within a controlled domain [draft-voyer-6man-extension-header-insertion-02] for UE IPv6 traffic.

    > Also, in order to reduce overhead at the UPFs when using encapsulation, I would replace the End.B6 function for a new End.MAP function.

    > For example, if we consider the following topology:

    > UE----gNB----UPF1----UPF2

    >

    > Then the uplink packet flow for the basic mode would look like this:

    > UE_out: (A, Z)

    > gNB_out: (gNB, U1::1) (A, Z) -> T.Encaps  <U1::1>

    > UPF1_out:  (gNB, U2::1) (A, Z) -> End.MAP

    > UPF2_out:  (A, Z) -> End.DT

    >

    > The End.MAP function is simply replacing the UPF1 SID for the UPF2 SID.





    So ‘End.MAP’ function you proposed looks that the dest address in outer header works as last SID in SRH but just one SID doesn’t require SRH in the packet over the wire. If it corrects, I think it’s a good idea. I’d appreciate if you can contribute text and pseudo code for End.MAP to the draft. I tend to replace basic mode with it.

[PC]: Your understanding is correct. I have added the pseudocode of this function in the github repository for this document.



    >

    > Notice that using encapsulation, if you compare it with today user-plane using IPv6/GTP, the result is that SRv6 is just adding 40B of overhead (IPv6 header), while GTP over IPv6 is using 56B (IPv6, UDP, GTP).



    That sounds make sense. I’ve studied and shared a comparison of total overhead size for various deployment cases. That study shows it as well.

[PC]: Yes. Your study is very complete and indeed it was showing the lower overhead of SRv6. Thank you for taking the time to elaborate it. I think it’s worth keeping your study.



    >

    > =======

    >

    > With respect to the aggregation mode, aside from using the encapsulation mode as described before, I would also like to add a note on the I-D on the fact that we can support the aggregation mode without changes in the N2 interface:

    > The current I-D for aggregation mode assumes that the gNB (uplink) has knowledge of an SR policy that contains all the SIDs belonging to TE, NFV and so on. Even though the I-D does not describe how the gNB is retrieving this information, I would like to make a statement on the fact that there are two alternatives:

    > A. The N2 interface is modified in order to signal a SID list to the gNB.

    > B. The N2 interface is not modified. In this case, we signal through the N2 interface an SRv6 BindingSID, that the gNB is going to resolve into a SID list via an SDN controller either using PCEP, reverse DNS lookup or LISP.





    Maybe you have seen End.B6 defined as L2-anchor function in the section of aggregate mode. I think that the current draft doesn’t cover the case of N2 no-change. But I have to admit that the text need to be more clear to mention for that. Any text for it would be really welcome.

[PC]: Indeed, you are right. The current text is ambiguous. I have proposed some text clarifying this in the github repository for this draft.





    >

    > I’m aware that the I-D focuses on the user-plane, however I believe it’s important to state this alternatives since it simplifies the adoption and reduces impact in the existing mobile architectures (without going into the details on the mechanisms for each one of the alternatives of LISP, PCEP, reverse DNS-lookup).



    I think that we are on the same page. Deploying srv6 for mobile user-plane provides programmability of data-path for not only existing style of mobility management, but also any other type of optimization logics from various aspects, such as ID-LOC, ETSUN for example.



[PC]: We are in the same page. SRv6 is providing the flexibility and scalability in the data-path. Then many other techniques as ID-LOC for example might leverage it in the future to build even more interesting stuff.



    >

    > =======

    >

    > On the other hand, the current I-D proposes a mechanism for stateless interworking with legacy access networks that doesn’t support SRv6 (SGW and/or eNB). This mechanism presented in the I-D is limited to IPv4/GTP legacy networks. I would like to propose a mechanism to support interworking with legacy gNBs that does not support SRv6 but do support IPv6/GTP.

    > The main benefit comes from the fact that we can leverage an SRv6 BindingSID to have remote classification and steering of the UE traffic over an SR policy [draft-filsfils-spring-segment-routing-policy].



    Yes indeed. IPv6/GTP case should be supported in addition to the IPv4/GTP case.







    >

    > In this scenario, I propose that we add the notion of an SR GW -as the current stateless interworking node in the I-D-. This SR GW can be either a software based platform -e.g. VPP- or any existing router -the mechanism is simple and can be supported in existing HW-. This SR GW receives through the control plane the SR policies and installs the required Binding SIDs.

    >

    > Then, for any UE connecting to a gNB, the N2 interface is going to signal an IPv6 address and a TEID. However, the difference is that with this new mechanism the IPv6 address that we are going to signal is going to be an SRv6 BindingSID instantiated at the SR GW.

    >

    > The overall workflow is the following:



    That looks good. Can you propose texts, pseudo code and diagram for that?

[PC]: I have proposed some text, pseudocode and diagram in your github repository. Please review it. Thank you





    >

    > Uplink

    > Note: S1, S2 represent service functions and C1 represents a node for TE purposes

    > UE sends its packet (A, Z) on a specific wireless bearer to its gNB

    > gNB’s CP associates the session from the UE (A) with IPv6 address B and TEID T (N2 interface unchanged)

    > gNB_out: (gNB, B) (GTP: TEID T) (A, Z)                       ;; Interface N3 is unchanged

    > SR_GW_out: (SRGW, S1) (U2::1, C1; SL=2)(A, Z)       ;; new End.GTP.UP

    > S1_out: (SRGW, C1) (U2::1, C1; SL=1)(A, Z)

    > C1_out: (SRGW, U2::1) (A, Z)                                      ;; assuming PSP

    > UPF2_out:  (A, Z)                                                        ;; End.DT

    >



    Don’t you need to care about TEID at SRGW in aggregate mode?

    I think it is okay for uplink in basic mode since it allocates SID per tunnel.

[PC]: For the basic mode, yes it is ok. For the aggregate mode, we can ignore the TEID since we don’t have scaling issues on the BSID. A BSID is an indirecton to an SR policy, and hence we can have many BSIDs pointing to the same SR policy. Hence I would not expect any scalability issue here.



    > Downlink

    > UPF2_in: (Z, A)                                                                       ;; UPF2 maps the flow with SID list <C1, S1, SRGW::TEID, gNB>

    > UPF2_out:  (U2::1, C1) (gNB, SRGW::TEID, S1, SL=3) (Z, A)   ;;  T.Encaps

    > C1_out: (U2::1, S1) (gNB, SRGW::T, S1, SL=2) (Z, A)

    > S1_out: (U2::1, SRGW::TEID) (gNB, SRGW::T, S1, SL=1) (Z, A)

    > SR_GW: (SRGW, gNB)(GTP: TEID=T)(Z, A)                             ;; End.GTP.DN

    > gNB_out: (Z, A)



    That looks it works.





    >

    > The key points are:

    > - gNB is unchanged and encaps into GTP (N3 interface is not modified). gNB only needs to support IPv6 which is currently common in existing deployments.

    > - 5G Control-Plane (N2 interface) is unchanged: 1! IPv6 address (i.e. a BSID at the SR GW)

    > - SR GW removes GTP, finds SID list related to IPv6 DA (BSID), add SRH with SID list

    > - Same TE, NFV and scale properties as Aggregation mode

    > - There is NO state for the downlink at the SR gateway

    > - There is simple state in the uplink at the SR gateway (notice that since we are leveraging the aggregation mode, we expect few SR policies on this node. SR policies are shared across UEs)

    > - As soon as the packet leaves the gNB (uplink), the traffic is SR-routed. This simplifies considerably network slicing. [draft-hegdeppsenak-isis-sr-flex-algo].

    > - Traffic is already classified and steered into an SR policy when it arrives to the SR GW.



    Yes, it enables legacy networks can be integrated into flexible/programmable platform.

    BTW do you think that it could also be applicable for basic mode? I think your intention that applying SRGW to such case might not motivate operators to do that since no additional value out there. But It would make user plane transition easy from GTP-U to SRv6. Even you can keep N2 as it is to support aggregate mode, N4 need to be aware for it. Keeping N4 or previous generation’s c-plane as it is makes the hurdle much lower for the transition.

[PC]: Yes, I agree with you. Both this mechanism, as well as the already interworking solution documented in the I-D, can work both for the basic mode as well as the aggregate one. I have proposed some text in the github repo for this I-D to clarify it.





    >

    > Finally, I believe that this mechanism is so simple, that it would be trivial to implement it in VPP [https://wiki.fd.io/view/VPP/What_is_VPP%3F] . Hence if the working group believes that this is interesting work and we add it to the I-D, I will analyse how to implement it in this platform.



    BTW, do you have any ideas for naming of the functions?

    Some SRv6 guys suggest to reserve namespace of End.M** for mobile specific SRv6 functions.



[PC]As co-author of the SRv6 Network Programming draft I support that initiative. All the functions which are only to be used for mobility should indeed be End.M.*****.

However, this does not apply to all of your functions. For example, the rate limiting function it’s necessary in the use-case of mobility but it might also be used in different contexts. For this one I would not name it under End.M.***.

For the rest of the functions indeed they should be End.M.**. I have proposed some of this renaming in the github repository for this draft. Please check it out.



    Cheers,

    --satoru