Re: [Idr] I-D Action: draft-ietf-idr-segment-routing-te-policy-08.txt

"Ketan Talaulikar (ketant)" <ketant@cisco.com> Wed, 20 November 2019 08:18 UTC

Return-Path: <ketant@cisco.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1457E120A65 for <idr@ietfa.amsl.com>; Wed, 20 Nov 2019 00:18:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.499
X-Spam-Level:
X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=ijJdXLUw; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=ETUh2uVg
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IUqNKq0a8NNB for <idr@ietfa.amsl.com>; Wed, 20 Nov 2019 00:18:52 -0800 (PST)
Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92B7A12099E for <idr@ietf.org>; Wed, 20 Nov 2019 00:18:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=34194; q=dns/txt; s=iport; t=1574237932; x=1575447532; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=RItw+hGHo57dzrM47rFLEN7SNIuoCEVqc9Z/lo9i8Wk=; b=ijJdXLUwhd5wUJtgTbeSDDN2AH4w5s3GTzxqVSJb9vzOnmHsglPoYYod kKvKTEOEE77Wqe5VrRkoCg1AxmgePyWKVUvLMkSTZKjh16nK8FqadXDkb hbx6T0ic6HkeNBuCrleolmeyvNpChMYWP/FWui7NSI85s5j0LuILzBxDc Y=;
IronPort-PHdr: 9a23:1Q7PfRCphoh0i2hSMv7VUyQJPHJ1sqjoPgMT9pssgq5PdaLm5Zn5IUjD/qg83kTRU9Dd7PRJw6rNvqbsVHZIwK7JsWtKMfkuHwQAld1QmgUhBMCfDkiuL/P2ZiomNM9DT1RiuXq8NBsdFQ==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BMAABj9tRd/4cNJK1lHAEBAQEBBwEBEQEEBAEBgWoHAQELAYEbLyQFJwVsWCAECyqEKoNGA4RahhqCXn+XAYEuFIEQA1QJAQEBDAEBGAEMCAIBAYRAAheCDyQ0CQ4CAw0BAQQBAQECAQUEbYU3DIVRAQEBAQMBARARChMBASwLAQsEAgEIEQQBASEHAwICAiULFAkIAgQOBQgMDoMBgXlNAy4BDqUmAoE4iGB1gTKCfgEBBYE4Ag5BgwQYghcJgTYBjBQYgUA/gRFGghc1PoJiAQECAQEWgS8BGSsJCIJSMoIsjSWCboVHiUaPDQqCK4cahSaJKoI+c4Z1j2uQCYZ3kVACBAIEBQIOAQEFgT8TOYFYcBUaIYJsCUcRFJEagScBCYJChRSFP3SBKI4RAQE
X-IronPort-AV: E=Sophos;i="5.69,221,1571702400"; d="scan'208,217";a="666560704"
Received: from alln-core-2.cisco.com ([173.36.13.135]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 20 Nov 2019 08:18:51 +0000
Received: from XCH-RCD-007.cisco.com (xch-rcd-007.cisco.com [173.37.102.17]) by alln-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id xAK8IpVj025855 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 20 Nov 2019 08:18:51 GMT
Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-RCD-007.cisco.com (173.37.102.17) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 20 Nov 2019 02:18:50 -0600
Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 20 Nov 2019 02:18:50 -0600
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 20 Nov 2019 02:18:49 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FJvSWj6CdS9xi7WhVhHGEO6orUH5J8HBggONup4JFNOUqYVPCJFX3tb4eNY6ipznWTREZJTTbEaXzGost/RId/1z2zOYClbNPyU6aBuczkwp+rtwIdmLffHc4BFAuEORPH0mXIq3BxBN7zBG4luY2jguHvzyA8a6i3SH8qIS+PDkiHAHLmEbwkJOj7ucvP08nWFAZgQ/3yzq5nzAV58t6ZA4v2OBxfXlccZI4umKruiyv9kiEZ+H9TQfkkEsKR3kEe9JKjwoCGcszgcEztmGiWY6FVlMb2FrUx6lOkkOetKCGZAQEMFA7HViiU7wH1VSBZAUfuAY3zkhEataRtF8ew==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RItw+hGHo57dzrM47rFLEN7SNIuoCEVqc9Z/lo9i8Wk=; b=XV0Qmwamo2rpTu+NwERC5FCnf4iSLsebNOhT8Q0kEAsEITYLkQB0vA4g2CVSEHHchvFJIOnokd0kLPvTR/uHXseT2NeIPAKTEhF6AgMNghoKot3l3gnz5Rm3l9n7+eHrql96YPoGQChHQ0o1UadOHYtecIyqQ18RKnLmLD+NHRsSt4xd8k7lCJ/+HFLfleOA1vsKkxydOiIaVVqokAcBnlScLndKJ5INwDRN4R8S83XPRXLt4glgEl/vOXAXmbQg2CR9/u/+/8odvNO80zxQwa+6ThBxxX+rR5i6pMd/HHhAlMYkylgNbrqHXghxvPxlXSDEyyHbuwrLDhUeFkTBDQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RItw+hGHo57dzrM47rFLEN7SNIuoCEVqc9Z/lo9i8Wk=; b=ETUh2uVgJq3y8Smz0GUyK2kJdaBvpSmWZZz0Q3tWR2HPD5OXwJCTsncmTKi1E3mWG0sYGBVvdalXlRhtWbyG9vZH2OiHENbCFsDWkiYQ2pxE8cq8YMyK4Sb+xZ1oFyd1b/kVhz1VIohyXsobO3JRcCOzYR8f6xYT/y6htGEDvV4=
Received: from CY4PR11MB1541.namprd11.prod.outlook.com (10.172.68.150) by CY4PR11MB1959.namprd11.prod.outlook.com (10.175.63.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.16; Wed, 20 Nov 2019 08:18:48 +0000
Received: from CY4PR11MB1541.namprd11.prod.outlook.com ([fe80::d3a:84a6:be65:e33f]) by CY4PR11MB1541.namprd11.prod.outlook.com ([fe80::d3a:84a6:be65:e33f%11]) with mapi id 15.20.2451.031; Wed, 20 Nov 2019 08:18:48 +0000
From: "Ketan Talaulikar (ketant)" <ketant@cisco.com>
To: Nandan Saha <nandan@arista.com>
CC: "idr@ietf.org" <idr@ietf.org>, Prakash Badrinarayanan <prakash@arista.com>, Manoharan Sundaramoorthy <manoharan@arista.com>
Thread-Topic: [Idr] I-D Action: draft-ietf-idr-segment-routing-te-policy-08.txt
Thread-Index: AQHVnqIyRXgT11tsQk2IdX+1xczyjKeSIKDggACT7gCAAHQ9cIAAN5aAgABWUZA=
Date: Wed, 20 Nov 2019 08:18:48 +0000
Message-ID: <CY4PR11MB1541256505A4B3A17B858BB4C14F0@CY4PR11MB1541.namprd11.prod.outlook.com>
References: <157414471256.14003.6244444687150312939@ietfa.amsl.com> <CY4PR11MB1541D63781E529E2B2613F05C14C0@CY4PR11MB1541.namprd11.prod.outlook.com> <CAE+itjeJzygag3K4bA=KpDQgNie7shG8Z47YpMjfjMFF7aq=Tg@mail.gmail.com> <CY4PR11MB15414543EC96BB90BC1167D8C14C0@CY4PR11MB1541.namprd11.prod.outlook.com> <CAE+itjcjNM+adLS_7ej4m=LFPixRo4OaWLondFzdngP_jCsW1g@mail.gmail.com>
In-Reply-To: <CAE+itjcjNM+adLS_7ej4m=LFPixRo4OaWLondFzdngP_jCsW1g@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=ketant@cisco.com;
x-originating-ip: [2001:420:c0d4:1002::1f]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: e5dfafbc-dfb5-4d29-9056-08d76d924506
x-ms-traffictypediagnostic: CY4PR11MB1959:
x-ms-exchange-purlcount: 8
x-microsoft-antispam-prvs: <CY4PR11MB19592D68AC8BB53CDB81F9EAC14F0@CY4PR11MB1959.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 02272225C5
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(346002)(396003)(376002)(136003)(366004)(39860400002)(13464003)(52084003)(53754006)(199004)(189003)(186003)(446003)(2906002)(7736002)(14454004)(11346002)(486006)(66574012)(46003)(6506007)(5660300002)(53546011)(71200400001)(99286004)(71190400001)(256004)(316002)(14444005)(790700001)(6116002)(25786009)(54906003)(74316002)(6436002)(478600001)(229853002)(966005)(6246003)(236005)(9686003)(55016002)(33656002)(54896002)(6306002)(8936002)(9326002)(4326008)(8676002)(81166006)(81156014)(606006)(76176011)(64756008)(66476007)(7696005)(66446008)(66946007)(66556008)(76116006)(6916009)(4001150100001)(86362001)(476003)(102836004)(52536014); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR11MB1959; H:CY4PR11MB1541.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: UW3JBdAgeiRnUPiwpFVRN2spNif26jE000SfzFCYXsyQaRHNuIm42ohTxYdMP3HyAW6hFQbTaIjWVbc5QHIbBvO9LOYeroPPhPJ9VAxhXwfkch85WtDOx5e4V3PpKOy75XdP7ZKo/1Es8Xr4VfueZx4ey+PKRn9nXfUcPTwlFGqjf1dJOyvotNdzHgNry2GQ6xF0+Lji7oXO5X6FZhD9SQmQ4Cpg1xk4T885RRy2p7iDnqIvDzUKUMXGJhRTZVS5SdnIDyzsRQDzix1RGp6Cdt6EYz2POGfervgbvjvMfWpppD3TQzKldBK0YU+nn5ngws93C//iVQzpPm1PVVL0ZgsnOVLJdsLYbQbbk+phS1+AlULQaZ4rfoO6U04RLEhTDCwe6kod3qbVoRnKlhigvfcyfgduFQJNqf58u742gaU5N9AAhmfoMuFVRR7W4rOYJzCmA1yp1Mw4ui8Xcx8n6+nuqwEtGOJOdb5HSHAQ0uc=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_CY4PR11MB1541256505A4B3A17B858BB4C14F0CY4PR11MB1541namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: e5dfafbc-dfb5-4d29-9056-08d76d924506
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Nov 2019 08:18:48.5386 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: LLPVjXBuaOTRoljV187QSh5VGHUf0oBj/cqZhEdEb1U9rq4iksRGl6izqTJxRQHRatZE/oz31KV3/b+Y2zwBNw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR11MB1959
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.17, xch-rcd-007.cisco.com
X-Outbound-Node: alln-core-2.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/01TjW-YcM-yWJdKQV4rSqrCQYTM>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-segment-routing-te-policy-08.txt
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Nov 2019 08:18:57 -0000

Hi Nandan,

Will adding the following text in Sec 5 address your concern?

An SR Policy update that is determined to be not acceptable, and therefore malformed, based on rules described in section 4.2.1 MUST be handled by the "treat-as-withdraw" strategy.

Thanks,
Ketan

From: Nandan Saha <nandan@arista.com>
Sent: 20 November 2019 11:02
To: Ketan Talaulikar (ketant) <ketant@cisco.com>
Cc: idr@ietf.org; Prakash Badrinarayanan <prakash@arista.com>; Manoharan Sundaramoorthy <manoharan@arista.com>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-segment-routing-te-policy-08.txt

Hi Ketan,
 Please see inline, [nandan]

On Wed, Nov 20, 2019 at 5:21 AM Ketan Talaulikar (ketant) <ketant@cisco.com<mailto:ketant@cisco.com>> wrote:
Hi Nandan,

When the acceptance criteria fails, the update is considered malformed and the TAW or AFI/SAFI disable or session reset would be the error handling based on what the specific error is as described in sec 5.

In Sec 4.2.1 we have the following text.

A router that receives an SR Policy update that is not valid
   according to these criteria MUST treat the update as malformed and
   the SR Policy candidate path MUST NOT be passed to the SRPM.

Then in the Sec 5 for error handling we specify the treatment for errors in the NLRI part, the Tunnel Encap Attribute (it’s existing TLVs) and then the new ones introduced in this document. E.g. for the TLV/sub-TLVs in the Tunnel Encap attribute (new and old)


In case of any error detected, either

   at the attribute or its TLV/sub-TLV level, the "treat-as-withdraw"

   strategy of [RFC7606<https://tools.ietf.org/html/rfc7606>] MUST be applied.
I don't think this is sufficient, since the acceptance can fail even if the RT_TGT and NO_ADV communities aren't present. These are not part of Tunnel Encap Attribute nor NLRI.

Hope that clarifies.

Thanks,
Ketan

From: Nandan Saha <nandan@arista.com<mailto:nandan@arista.com>>
Sent: 20 November 2019 00:47
To: Ketan Talaulikar (ketant) <ketant@cisco.com<mailto:ketant@cisco.com>>
Cc: idr@ietf.org<mailto:idr@ietf.org>; Prakash Badrinarayanan <prakash@arista.com<mailto:prakash@arista.com>>; Manoharan Sundaramoorthy <manoharan@arista.com<mailto:manoharan@arista.com>>
Subject: Re: [Idr] I-D Action: draft-ietf-idr-segment-routing-te-policy-08.txt

Hi Ketan,
 Thank you for the updated version. I'm still reviewing it, but spotted something I wanted to quickly clarify.

ver-7 of section "4.2.1. Acceptance of an SR Policy NLRI" had text mandating RFC7606 TAW if acceptance criteria fail. In ver-8 this has been removed, and I can't quite tell what text in section "5 Error Handling" covers this? I'm assuming we still want to do TAW if acceptance criteria fail.
Please clarify.

Thanks,
Nandan


On Tue, Nov 19, 2019 at 1:39 PM Ketan Talaulikar (ketant) <ketant@cisco.com<mailto:ketant@cisco.com>> wrote:
Hi All,

This update of the draft is to get it ready for the WG to review towards WGLC .

The following is the high level overview of the changes:

1) Introduced Error Handling section where all these aspects have been consolidated.

2) Added the request for IANA registry for Color Extended Community reserved field. Changed the process to Specification Required and added DE guidelines since the flags and other space is too small for FCFS.

3) Added security consideration section.

4) Add the clarification for handling of route target during propagation as per the request and discussions on the mailer and also clarified the matching with BGP Router ID part.

5) Changed the segment type naming from numbers to alphabets to align with upcoming update in the draft-ietf-segment-routing-policy to remove confusion between the segment types and the protocol code-points as discussed on the Spring and IDR lists recently.

Besides this, there are other minor and editorial changes to prepare for WGLC.

We are also trying to capture all the implementation reports at the wiki below and would request WG members to help update the same as there are multiple shipping implementations of this specification:

https://trac.ietf.org/trac/idr/wiki/draft-ietf-idr-segment-routing-te-policy%20implementations%20

Also note that the draft is on IDR agenda for presentation on Thu in Singapore.

Thanks,
Ketan (on behalf of co-authors)

-----Original Message-----
From: Idr <idr-bounces@ietf.org<mailto:idr-bounces@ietf.org>> On Behalf Of internet-drafts@ietf.org<mailto:internet-drafts@ietf.org>
Sent: 19 November 2019 14:25
To: i-d-announce@ietf.org<mailto:i-d-announce@ietf.org>
Cc: idr@ietf.org<mailto:idr@ietf.org>
Subject: [Idr] I-D Action: draft-ietf-idr-segment-routing-te-policy-08.txt


A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Inter-Domain Routing WG of the IETF.

        Title           : Advertising Segment
    Routing Policies in BGP
        Authors         : Stefano Previdi
                          Clarence Filsfils
                          Ketan Talaulikar
                          Paul Mattes
                          Eric Rosen
                          Dhanendra Jain
                          Steven Lin
        Filename        : draft-ietf-idr-segment-routing-te-policy-08.txt
        Pages           : 38
        Date            : 2019-11-18

Abstract:
   This document defines a new BGP SAFI with a new NLRI in order to
   advertise a candidate path of a Segment Routing (SR) Policy.  An SR
   Policy is a set of candidate paths, each consisting of one or more
   segment lists.  The headend of an SR Policy may learn multiple
   candidate paths for an SR Policy.  Candidate paths may be learned via
   a number of different mechanisms, e.g., CLI, NetConf, PCEP, or BGP.
   This document specifies the way in which BGP may be used to
   distribute SR Policy candidate paths.  New sub-TLVs for the Tunnel
   Encapsulation Attribute are defined for signaling information about
   these candidate paths.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-idr-segment-routing-te-policy/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-idr-segment-routing-te-policy-08
https://datatracker.ietf.org/doc/html/draft-ietf-idr-segment-routing-te-policy-08

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-idr-segment-routing-te-policy-08


Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org<http://tools.ietf.org>.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
Idr mailing list
Idr@ietf.org<mailto:Idr@ietf.org>
https://www.ietf.org/mailman/listinfo/idr

_______________________________________________
Idr mailing list
Idr@ietf.org<mailto:Idr@ietf.org>
https://www.ietf.org/mailman/listinfo/idr