[Idr] 答复: Solicit feedback to BGP UPDATE encoding options for SDWAN WAN port properties propagation among SDWAN edges (pros & cons to draft-dunbar-idr-sdwan-port-safi and alternatives)

["Aijun Wang" <[e-mail]>]

Hi, Linda:

 

Thanks for your analysis on this topic.

Would you like to make more clarifications for the following questions?

1.  What extra work will the RR do in Option 1? In my understanding, RR just
send these updates to other ends. Only the other end needs to process these
extended updates.

2.  NAT transverse procedures for the communication between CPEs is complex,
considering there are many different type NAT devices located within the
network.  There is no easy way to detect the NAT type between them(It’s
maybe easier to infer such information between CPE and RR). Then is it
necessary to transfer the NAT related information in Option 2?

3. Is it more flexible to make the IPsec encapsulation information
associated with other tunnel types that defined in https://datatracker.ietf.
org/doc/draft-ietf-idr-tunnel-encaps/?, which is under the existing
AFI/SAFI.  If so, option 1 seems more acceptable?

 

 

Best Regards.

 

Aijun Wang

China Telecom 

 

发件人: [e-mail] [mailto:[e-mail]] 代表 Linda Dunbar
发送时间: 2019年8月13日 6:19
收件人: [e-mail]
主题: [Idr] Solicit feedback to BGP UPDATE encoding options for SDWAN WAN
port properties propagation among SDWAN edges (pros & cons to
draft-dunbar-idr-sdwan-port-safi and alternatives)

 

IDR participants:

 

Many thanks to the feedback from IETF105 discussion on
draft-dunbar-idr-sdwan-port-safi, especially the hallway discussions with
Ali Sajassi, John Drake, Keyur Patel and Sue Hares on other possible
encoding options. I put together an analysis of multiple BGP UPDATE encoding
options to achieve SDWAN WAN port properties propagation among SDWAN edges.
Please see the slides in the IDR WIKI page:
<https://trac.ietf.org/trac/idr/attachment/wiki/WikiStart/>
https://trac.ietf.org/trac/idr/attachment/wiki/WikiStart/

 

The Goal is for WAN Ports Property Propagation across SDWAN nodes in
different domains
cid:image001.png@01D55131.F341A2B0

 

 

The constraints are those SDWAN edges can be spread across different
geographical locations, their connection to RR can be over untrusted
networks, and they might not know the reachable addresses for the peers they
need to communicate (therefore needing RR to propagate). 

 

There are many ways to skin the cat… different encoding for BGP Update
Messages

Option 1: Extending Tunnel-Encap with existing IP’s SAFI to achieve WAN
port registration. 

cid:image002.png@01D55131.F341A2B0

 

*	Pros:

*	no new SAFI introduced, the update messages can traverse existing
routers

*	Cons:

*	Same IPv4/IPv6 SAFI NLRI carries the WAN port information that is
very different from clients’ routes attached to the C-PEs. 
*	The receivers (RR) has to do extra processing to differentiate the
UPDATE messages  from the attached routes UPDATE messages. 

 

Option 2: Tunnel-Encap with SDWAN NLRI for SDWAN WAN Ports Prosperities &
Policies described by draft-dunbar-idr-sdwan-port-safi-02

cid:image003.png@01D55131.F341A2B0

 

*	Pros:

*	Clean design and processing on the receivers (RRs). Simpler
processing to differentiate the UPDATE messages  from the attached routes
UPDATE messages. 

*	Cons:

*	New NLRI is introduced, the update messages can’t traverse existing
routers

*	Since the the Tunnel UPDATE message with the new SDWAN NLRI/SAFI is
strictly between SDWAN edge nodes and their respective RR(s) via a secure
tunnel, the SDWAN UPDATE messages are not going to traverse existing
routers. Therefore, it doesn’t cause any issues. 

 

Option 3: Using the new SAFI introduced for BGP labeled Colored Unicast
described by draft-szarecki-idr-bgp-lcu-traffic-steering

 

cid:image004.png@01D55131.F341A2B0

 

*	Pros:

*	leverage the newly proposed NLRI for carrying Traffic Color across
domains
*	Similar goal as SDWAN needing to propagating WAN port properties
across domain/geolocations 

*	Cons:

*	Need to attach the attributes which haven’t been specified by the
draft yet. 

 

Need to ask merging the content from draft-dunbar-idr-sdwan-port-safi-02.. 

 

 

We are looking for feedback to those analysis and options. 

 

Thank you very much 

Linda Dunbar