Re: [Gen-art] Gen-ART Last Call review of draft-ietf-l3sm-l3vpn-service-model-16

Brian E Carpenter <brian.e.carpenter@gmail.com> Thu, 06 October 2016 19:58 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: gen-art@ietfa.amsl.com
Delivered-To: gen-art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D333129778; Thu, 6 Oct 2016 12:58:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Fu2gGOc3IUO; Thu, 6 Oct 2016 12:58:09 -0700 (PDT)
Received: from mail-pa0-x229.google.com (mail-pa0-x229.google.com [IPv6:2607:f8b0:400e:c03::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56687129446; Thu, 6 Oct 2016 12:58:09 -0700 (PDT)
Received: by mail-pa0-x229.google.com with SMTP id cd13so13209907pac.0; Thu, 06 Oct 2016 12:58:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:from:organization:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding; bh=QJws4NCPcq3Ge0mR3DtXmYLG57lgpP1hF6EC0p8PA7w=; b=pyEratwX9Nk9Kj/k5BYVEBwCioUXnpj1KGXdCoHWRvodbIEbbP1XYdQOof6yuqZ7P6 XLo6x8OyLKCxhUNxAI5OYe/as74svcDU2s/iDQ9PxtjH3/9u3NTOM0C1B9jqY/qDpZeP FzfleVSqIPAIqvJD1U3lg5RESCp9J5pkudIhsdTEVoqDt2teLs5owzglC45S8/8xCA+U 6BYnB8iKP9ljQYjDKkzXgJsdkuHQ1B3p2P3itZ/rZpKI0gt/SAhAfFkdxHS8gem6xOCN AM5v+laStYWgqZKkGgnhB1RQJSfSssKK8iu2GocVxyakGWZsazBDfPiMrQpTT0tsc96x fuDg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=QJws4NCPcq3Ge0mR3DtXmYLG57lgpP1hF6EC0p8PA7w=; b=XsMJPSY0anPrOW/9Zw6LhuFHFPgAdfmShos3TrbB7kiFRvNi5y5uOMbfTqDkDo/8ET YJhi6FLEumqDWRZFL1PBkJG/Js0aXx4Q/ponUo8fFNn7VzI+PeYc21H47XG7k7XkVl0s 6qIkwahC8Jj+PwGX0RPpNpSRyAZIJ4Hgd37JuBCZSqIgDdkrS3LdQ2FX2ad/Lk0YGfIe CIluC+6yklnW6+ziK6FVNaLNPt2dzkXpGsaZVCFCxWKPwHTE44+5WewZChYXg2gaYQyd dV9TEZHa9/Lb4joAXtzJL8HnUvTILx3NjhPp9jT/2JTDZGAwx5j9UWcP7hQ5D4aKuE2W A1OA==
X-Gm-Message-State: AA6/9RnHRhyXUOWISUHrFhjKKa5/BPvfrsUCZDHgNP7HzxR9LNuV5YX8XEknJRNWDtjZTQ==
X-Received: by 10.66.138.40 with SMTP id qn8mr24182278pab.33.1475783888945; Thu, 06 Oct 2016 12:58:08 -0700 (PDT)
Received: from [192.168.178.23] ([118.148.127.90]) by smtp.gmail.com with ESMTPSA id b123sm7813531pfa.96.2016.10.06.12.58.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 06 Oct 2016 12:58:08 -0700 (PDT)
To: stephane.litkowski@orange.com, "draft-ietf-l3sm-l3vpn-service-model.all@ietf.org" <draft-ietf-l3sm-l3vpn-service-model.all@ietf.org>, General Area Review Team <gen-art@ietf.org>
References: <434b44e6-7168-81ce-beed-cc435d56e516@gmail.com> <29695_1475743607_57F60F77_29695_1285_2_9E32478DFA9976438E7A22F69B08FF921BDB44F5@OPEXCLILMA4.corporate.adroot.infra.ftgroup>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <370b441b-6584-e4e3-837d-7c61cccdb4a3@gmail.com>
Date: Fri, 07 Oct 2016 08:58:13 +1300
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <29695_1475743607_57F60F77_29695_1285_2_9E32478DFA9976438E7A22F69B08FF921BDB44F5@OPEXCLILMA4.corporate.adroot.infra.ftgroup>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/gen-art/04ZTvB30GwdjLvQJpSV6JmA452E>
Subject: Re: [Gen-art] Gen-ART Last Call review of draft-ietf-l3sm-l3vpn-service-model-16
X-BeenThere: gen-art@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gen-art>, <mailto:gen-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art/>
List-Post: <mailto:gen-art@ietf.org>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gen-art>, <mailto:gen-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Oct 2016 19:58:11 -0000

Stephane,

Thanks for the response and the proposed updates. Some follow-up on a few points:

On 06/10/2016 21:46, stephane.litkowski@orange.com wrote:
...
>> 5.3.2.2.1.  IP addressing
> ...
>>    o  slaac : enables stateless address autoconfiguration ([RFC4862]).
>>      This is applicable only for IPv6.
> 
> You can't stop there. Within SLAAC, privacy addresses (RFC4941) may or may not be allowed by an operator, and opaque addresses (RFC7217) may be required. So two more Boolean properties are needed.
> 
> Also, DHCPv6, SLAAC and static addresses may coexist; they are not mutually exclusive. I'm not sure if your model allows that.
> 
> [SLI] We did not wanted to add all the possible options, but the most current ones. New scenarios can always been added through augmentations.

OK. I think a general note in the Introduction saying that would be very useful.

> 
> 
>> 5.12.2.1.  QoS classification
> 
> This is too simple. At least, it needs to be able to handle a port range, not just a single port number.
> 
> [SLI] What we need to identify is a particular application running on a specific port, we are not defining a router configuration framework here.

No, but there are applications that run on multiple ports and it's a bit clumsy
to require a separate classifier for each port.

> 
> 
>> 5.12.2.2.  QoS profile
> 
> rate-limit, priority-level, and guaranteed-bw-percent may be OK for MPLS, but they do not capture the needed parameters for differentiated services. I could write an essay here, but I think the best starting point is draft-ietf-tsvwg-diffserv-intercon.
> [SLI] Again, we captured the most used parameters by service providers. The goal is not to provide all. But If you see a specific parameter that is widely used and not implemented here, feel free to point it.

Diffserv DSCP values are widely used. I suggested diffserv-intercon because it proposes
a specific subset useful at network boundaries, but there is also RFC 5127 and related
work for WebRTC (https://tools.ietf.org/html/draft-ietf-tsvwg-rtcweb-qos).

> 
> Also, I don't understand how you can separate this issue from Section 5.13.2. Transport constraints, where you do discuss parameters relevant to diffserv. The whole point about diffserv-intercon is to quantify and standardise the constraints at interconnections.
> [SLI] We discussed this point when we designed the model, and it was simpler to express the transport constraint at vpn level than trying to implement them per site. That's why it was decoupled.

OK, but you still need a rich set of QoS parameters at that level, and shouldn't
it be the same set?

> I recommend having TSVWG review sections 5.12 and 5.13.
> 
> 
> Minor Issues:
> -------------
> 
>> 5.2.2.  Cloud access
> ...
>>   If NAT is required to access to the cloud, the nat-enabled leaf MUST
>>   be set to true.
> ...
> Although NAT is mentioned, I saw no support for NPTv6 (RFC6296). I also saw no mention of private or shared address space (RFC1918, RFC4193 or RFC6598).
> 
> [SLI] NAT is a generic term, it only mentions that address translation is needed but does not tell what technology will be used. Nothing prevents SP to implement NPTv6.

No, but the IETF strongly recommends against NAT66, while having specs for NAT44, NAT64 and NPTv6.
Hiding these distinctions under the buzzword "NAT" is misleading.

> The non working point is that the customer-nat-address is an IPv4 type which is a mistake ... it could be IPv6 also.

But it's not a NAT address, it's an NPTv6 prefix. A different animal.

...

Regards
    Brian