Re: [Idr] Can one Destination Address appear in both Tunnel Encap Attribute and in MP_REACH_NLRI ?

Robert Raszuk <robert@raszuk.net> Fri, 18 October 2019 09:00 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC55A120895 for <idr@ietfa.amsl.com>; Fri, 18 Oct 2019 02:00:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nz02yk477GKV for <idr@ietfa.amsl.com>; Fri, 18 Oct 2019 02:00:43 -0700 (PDT)
Received: from mail-qt1-x830.google.com (mail-qt1-x830.google.com [IPv6:2607:f8b0:4864:20::830]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC60912018D for <idr@ietf.org>; Fri, 18 Oct 2019 02:00:42 -0700 (PDT)
Received: by mail-qt1-x830.google.com with SMTP id o49so194684qta.7 for <idr@ietf.org>; Fri, 18 Oct 2019 02:00:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=27ymMSAjmJMCNCCdwZMfXLJnIAi39XY6T/G2PJmMaNg=; b=SJTEtFa+Vjar7IRmFl5G/DdVTVhwzPQxD8lif0M0XYXPFzUXDmle2XZnCiH4R4qpEG xGdpjqYLu3Es02m9WOfWoCjYfNQCGSupFjJ73pWHN8FIMt39+XLZ8m0id3WjOuyrBEMP noBdic5JEfz7oY+xKqKpU27XWEyhGylnyklXJByhPs5X+P3cnVtrVUM6onkYVHWCniN7 gGKcnRTEivMjOHALO6bX2KjthV8VOpTaHPuNBzWyK1KEQrTLFPpXXRedfceuSSjiQPKL Jyj8Q+jHH5zxERND3MhXjM/7HGkL8OVo62SNrPT4Q+GTJgbFr75uzY42guGW5UWHbpCq Lfdg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=27ymMSAjmJMCNCCdwZMfXLJnIAi39XY6T/G2PJmMaNg=; b=bc0juyRU8psZ+tmuO+sRDxEjlaCaPy8ODn/RBZe/ORKaXMIr4nOEsf5BcKZObws59h VTKQZAyoPKwx0jVS42SNdxUMlT9PI9ENenoDX7jbSn4btIAg4B0uiogkwkoThf46NjjF pY+iq4fG1IKOlUoysIcZwPu9X7eWlKN4FscUvU1Kp5545mO8FrJEASkFlcFN7cU5MRrk gX9BBwinQeF7czX1IoH0y5fQrqgF9LloWwbG/EXHi2yNJ/zqomL6jWhiCEofjTFGzEyO 7D96/VJchmCrbqknKQMGjax0j/MQDnMwWTrDCpzj1omvByWR2PRQa3L03bRhP1XctnFa urIw==
X-Gm-Message-State: APjAAAV0h2XPxesZhLoVI8eycwBrRNaCUbBR17CfkXWgj4/qjw7jztY4 hSOhstLpjuZJnaqRTQoOgQ2xssOi3do8nLF5PUbhQQ==
X-Google-Smtp-Source: APXvYqxLagtOVFMuegtIuXsy7DyMDjXGduPlNq/mf85bQ+TlKEMkOnW5HFyNHUj5Cy/AC2olGneRocnmjVEdq6xEth0=
X-Received: by 2002:a0c:94af:: with SMTP id j44mr8457030qvj.230.1571389241700; Fri, 18 Oct 2019 02:00:41 -0700 (PDT)
MIME-Version: 1.0
References: <MN2PR13MB3582A1E1FE3441CDD54A101985950@MN2PR13MB3582.namprd13.prod.outlook.com> <78F7A474-6F86-4EA3-93A3-001B4E2C2116@juniper.net> <CAOj+MMGqKj=zKbws92ni1fL2O-So=dbcW-mb02uRnQ+G55xm_w@mail.gmail.com> <0B48E5E7-3A1F-45C0-ACF9-B9A0FA323ED4@juniper.net> <CAOj+MMHs91BoMpgrN2-qtMAgVtiUE_e2bm=BG=+xVnfU9-6Aaw@mail.gmail.com> <20191017093308.GB2427@feanor.crfreenet.org> <CAOj+MMFs=StpLvK1dZO+ChBUN5i2AYq+CrhHMfMxifpxqegwiw@mail.gmail.com> <2A6A8F0A-82B2-4016-9148-10B4FC75FC03@cisco.com> <CAOj+MMECVbe-VOP2D5mB+zZWjLh_igOefeFYbK-OMtJ+bY9EGA@mail.gmail.com> <A55F4BE5-9AD7-4776-9FE1-8A9A47E4F468@arrcus.com>
In-Reply-To: <A55F4BE5-9AD7-4776-9FE1-8A9A47E4F468@arrcus.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 18 Oct 2019 11:00:33 +0200
Message-ID: <CAOj+MMF3FhCDjXQYtaS1PNZ6z79o41dcxkLE2Fbyaq8+yCCS_Q@mail.gmail.com>
To: Keyur Patel <keyur@arrcus.com>
Cc: "Rajiv Asati (rajiva)" <rajiva@cisco.com>, Ondrej Zajicek <santiago@crfreenet.org>, "idr@ietf.org" <idr@ietf.org>, Linda Dunbar <linda.dunbar@futurewei.com>, Srihari Sangli <ssangli=40juniper.net@dmarc.ietf.org>, "draft-ietf-idr-tunnel-encaps@ietf.org" <draft-ietf-idr-tunnel-encaps@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000008e494b05952b91c8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/7Fhy-6DpWFntWrSGS89iJPV4N2M>
Subject: Re: [Idr] Can one Destination Address appear in both Tunnel Encap Attribute and in MP_REACH_NLRI ?
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Oct 2019 09:00:45 -0000

Hey Keyur,


> Why don't we use basic BGP recursion (in any AFI/SAFI required) and simply
> advertise within each applicable SAFI an NLRI = NH of endpoint/customer
> routes with NH = Tunnel Endpoint while attaching to such
> UPDATE  Encapsulation Extended Community indicating type of tunnels and
> parameters required ?
>
>
>
> #Keyur: You can still announce the tunnel endpoint (underlay) route using
> tunnel endpoint attribute. The attribute gives you a common placeholder to
> carry tunnel parameters (including endpoint) and specifically as and when
> parameters grow beyond size of community/ext community/large community.
>

Size is a fair point .. while type of the encap will easily fit in
communities some other associated info may not.

But in the case I described there is no need to put tunnel endpoint address
in the tunnel attribute. How about you update the draft and make tunnel
endpoint address TLV optional - and if not present next hop is used as
tunnel endpoint ?

Of course most if not all of other observations still apply :)  And the
point here is that to get consistent implementations draft should add
perhaps even a new paragraph on how to handle difference in next hop
validation vs tunnel endpoint validation. Is in the case of presence of
reachable (or poor man's check existing in the RIB) tunnel endpoint address
BGP next hop validation and tracking still making sense ? Then how to
address similar "collisions" with Origin Validation results ?

Thx,
r.