Re: [Idr] Adoption and IPR call for draft-wang-idr-vpn-prefix-orf-03.txt (8/16 to 8/30)

"winy86@foxmail.com" <winy86@foxmail.com> Wed, 24 August 2022 02:30 UTC

Return-Path: <winy86@foxmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB99EC1522DA for <idr@ietfa.amsl.com>; Tue, 23 Aug 2022 19:30:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.078
X-Spam-Level: *
X-Spam-Status: No, score=1.078 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HELO_DYNAMIC_IPADDR=1.951, HTML_MESSAGE=0.001, RDNS_DYNAMIC=0.982, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=foxmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TtJoQ9rbwYO9 for <idr@ietfa.amsl.com>; Tue, 23 Aug 2022 19:30:40 -0700 (PDT)
Received: from out203-205-221-239.mail.qq.com (out203-205-221-239.mail.qq.com [203.205.221.239]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 421DAC1522D8 for <idr@ietf.org>; Tue, 23 Aug 2022 19:30:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=foxmail.com; s=s201512; t=1661308235; bh=sOjthefEFiBJTr21Yv8oTnYowZcqB1Z0967EU+15WZI=; h=Date:From:To:Cc:Subject:References; b=uJ1LoVpMIj/KPCXaWEHnx33BOgA5lgeC7hwOgWzxtEkd5FPeT3LbiPUoDh/4FpKvp qnOIh8OPSe3Dq1ckSd8strXbb35gf26e9oggORLRrq/uH//f8n0lmS2M8F7nSgsKEB 5Wy1QXOUp2dCB6LPidMUZk3UHx2EcwqnBamlNK9M=
Received: from ctbri-wangyue ([219.142.69.75]) by newxmesmtplogicsvrszc13.qq.com (NewEsmtp) with SMTP id 7A11EE1F; Wed, 24 Aug 2022 10:30:33 +0800
X-QQ-mid: xmsmtpt1661308233tm6min0u8
Message-ID: <tencent_FA47C22B76440835FFBDDCB851A83682EA08@qq.com>
X-QQ-XMAILINFO: MFWpArBVhhGTAWuZO+j+zeJOXMSAbyT/rj6L3wzYD6FtUENvePajQVLaY/vI+A 0jsKVeDo8Zl0l5GUYs77WLttm/ylomLFaTW3BKWqu9yMXh02ZIi/OU7ko2/D6+rGJSDkqi32RfY7 fwizReoPPddv1V9uUZ+nGaP5pkCAfNWKy+3l8/q9akxv6v+5HX8BreMkce6wHZ/XLvW9z4UPjtrQ fzmWQsgC0svbK5er/HfW61/AWV+IyTbKbuvKfoXtVQ7t8cHaxZf4JOodzLSYkp1kem/D29qEiUKi fWNfcYx5l3q6os39QdzEPk7C+5Qlpp2tdB7kzY7xT0rBSp0jT/Rw7IXLqqpaLYbJKrkvBam7DqWQ D68kpdoNc4xAUloVdbGFnYTBYVH8FM6vQD3MiL+4dGNT16iloRGDHihNMCMJJw2bnUu5VzrwHpOE SijK+CwlV5cCYIQ2OQGjrN93FFs7oK8XCsBdG+lb77cvXWSTykf+HgVWHGIb1TEgWiBRoJbeRNu6 joXBpGsRORCqWjItjhkF2ccP4ioqwGYHwyKhdETm0rsP2HHyUsfDH8Bt2PJqX3IUbmaeBNUEHVIQ +Gd9qh4NGw68XhRiZFFpqCisRmAD5FTetFk9T/Viq58yGq0MpAFEPx65Y4RTBAP95uYiVk9bGTJJ 8jCTIGa2JKeTGKZ/tWUDtpTO9rUoJKhFEEJVhgh2bjTQUxSISLIBko+DEV5riL8cBa/Eldh8ruFL /rHyuokBGynH7lVTio3gtGbU5Q2cZn8mwdVn/q1VSk1SCiHZH/oJBgyMV1kbEvZ9eArCYGMxsj5y KjlHo/QK8jz5bDKCxftGMrvB8YfkuJIlcKaPWrEnuj0v00PQWtWFvuK2/6QotavIRvBlwHGpSRJV izDi+v8b9GeuUJAMKY1fwLyN3kwGM2KtmMeh1BS6LySpzWrOfxFUMhsmnDKyWgSlnvLgi4XLgWbD OnK+kT6uCPh9Ir2QY/qdtt6p/4u28VDlmKvzbTMM8TLZ2s/6nBOquZJp5EMetMSbD4xwvX01I=
Date: Wed, 24 Aug 2022 10:32:40 +0800
From: "winy86@foxmail.com" <winy86@foxmail.com>
To: Robert Raszuk <robert@raszuk.net>, Jeffrey Haas <jhaas@pfrc.org>
Cc: "idr@ietf. org" <idr@ietf.org>, Sue Hares <shares@ndzh.com>
References: <517EF247-76AF-4981-B33B-8A1707E0103B@tsinghua.org.cn>, <CAOj+MMGvBKBL__Pk2AuAYWoiBkMeLW3eZkyp_GD-aXjEtZkJkw@mail.gmail.com>, <007b01d8b693$92387190$b6a954b0$@tsinghua.org.cn>, <CAOj+MMHmeSUuFy7zKBsDUECje6i-g+9e9qD2=oUkgGdcwL2fpw@mail.gmail.com>, <tencent_D185B6FFEBB1CDC5CE17B30965D645B5B40A@qq.com>, <CAOj+MMEQYcKoTqZKK1UpK9O11+Pm5J6Bq16KGUnkDHKtz5=OuA@mail.gmail.com>, <BDFC32E1-1C79-4DAD-99E7-6C5086A681F8@pfrc.org>, <CAOj+MMHW+jqHYe6qj-UOOmi0ytbcdffMzcqWiVaTTn9+a5=-QA@mail.gmail.com>
X-Priority: 3
X-Has-Attach: no
X-Mailer: Foxmail 7.2.16.188[cn]
Mime-Version: 1.0
X-OQ-MSGID: <202208241032400895745@foxmail.com>
Content-Type: multipart/alternative; boundary="----=_001_NextPart033547468564_=----"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/4D001Y5ZajXJRytkvvw5KrkN8qE>
Subject: Re: [Idr] Adoption and IPR call for draft-wang-idr-vpn-prefix-orf-03.txt (8/16 to 8/30)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Aug 2022 02:30:44 -0000

Hi, All:
I support the adoption of this draft.
The updated contents have addressed main concerns raised during the previous discussions. Some remained comments can be addressed after its adoption via the efforts of WG and the implementation experiences of this mechanism.

This mechanaim is one kind of control plane protection. The influences of the forwarding plane will be limited on the offending routes. Doing so can certainly protect the routes receiving, processing and forwarding of other VPNs from being influenced.



Yue Wang
China Telecom Research Institute
 
From: Robert Raszuk
Date: 2022-08-24 01:32
To: Jeffrey Haas
CC: idr@ietf. org; Zhuangshunwan; Sue Hares
Subject: Re: [Idr] Adoption and IPR call for draft-wang-idr-vpn-prefix-orf-03.txt (8/16 to 8/30)
Hi Jeff,
 
> First when BGP max prefix used session should get terminated with a peer. 

That's not their intent.

Of course. This was just along the lines of their comparison to max prefix limit. 
 
They're doing this on VPN routes, not iBGP distributed IPv4 unicast routes.

Of course. 

But as you know for VPNs there are few different types of demux VPN labels. One of them is per vrf label where before any forwarding IPv4 unicast lookup is done at the VRF's FIB. 

If you have scenarios where you think dropping the VPN routes that would be used in a L3VPN VRF context is harmful, I'm sure the authors would appreciate explicit examples.

Few examples:

*  EIBGP load balancing will not work for multihomed site and per VRF label. 
* PE-CE protection will not work. 
* Active-Backup multihomed site breaks if we start dropping say more specific routes and suddenly large volume of traffic will be taking different then planned forwarding path 
etc ... 

Many thx,
R.