Re: [Idr] draft-dong-idr-node-target-ext-comm-05.txt - WG Adoption and IPR call (9/27 to 10/11/2022)

Robert Raszuk <robert@raszuk.net> Tue, 18 October 2022 10:00 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D6565C14F735 for <idr@ietfa.amsl.com>; Tue, 18 Oct 2022 03:00:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M6O3VAGDkicx for <idr@ietfa.amsl.com>; Tue, 18 Oct 2022 03:00:20 -0700 (PDT)
Received: from mail-ed1-x530.google.com (mail-ed1-x530.google.com [IPv6:2a00:1450:4864:20::530]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5C4AC14F749 for <idr@ietf.org>; Tue, 18 Oct 2022 03:00:20 -0700 (PDT)
Received: by mail-ed1-x530.google.com with SMTP id g27so19658714edf.11 for <idr@ietf.org>; Tue, 18 Oct 2022 03:00:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=OStU/Ztptwg+3UKmQi+5mfdEVA91IO3b2qXtOhIOZpo=; b=SIzpSnN8kkU+KFSpypqiLMjOb29ggpnfxy43Hm8KO70EACKzdpXyFOCE2ziY9j1NBF 11oRSvcE5vaxp13zlEwnyW5xWe5l96UkVVKT2YCGFxSV1nrOHKMfUtAHwHHphZ8Urwkq 5W0T/YNr84+BckxUpxfOkcKadmKS9Tl/JwAlLW9Nb8mL0RlqdSTXECGpwdIcPkaGA67x 3GdmmD22IFcwYjEwBFIbr2o9i6ZZU2cLQbn3/k1B7x6Szsbo90u3p1cU2+CtxUcGLbOz SwZRtwTEdryD+oEDcFHCes1/T0cKmpdoa+tj3tKVvvHlgwoYFeMdU7D89Czgh96/J0p4 2VnA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=OStU/Ztptwg+3UKmQi+5mfdEVA91IO3b2qXtOhIOZpo=; b=PFS/xftxlNBOPxLDsdSBbikpRypKRKdZH4p9b2GSIEZt48YnD96jkpnIjec0XqO8t1 x8dIu4rTe3H+KGFtx5jbVILgDY4AZsOgtcEBeO0QGaWH51Qp1qooPTfJjviG0wYodJbh h1Ng8sG0me/gqB6WI/UYFuD+zB4YObCDuUB3AZLjhT1FDllMK9LxFCuhP6cH0bQJu0Dg dQGvrbexFz22DumwZHR1fe7gVyn62XI0GPyUCv4YPOhmk/gt0ipMn67B9B3+30CBzZdh TvugC+YAuU3MqYw2hpXYsIfGR7UYKVOFztzmTOWuvh/X/dxsianD4Ls/CvyaSYAFs24P Wlkg==
X-Gm-Message-State: ACrzQf1rDIOOHGpwNxtTYT9pgjHcDPH6/SHN2Uf+O/VjRPC7Yn+KFo2p VG4WzN3G4aGEjF9Ddt9LtLtVPTdWfdLwReTDNuKEbA==
X-Google-Smtp-Source: AMsMyM6jCLfhwTApo+/UIGeiVBtETLYX+LxVPDYgTgeXtRTv3HB3J9fXQl0iRjmt5UXHLO02PXPCh/MqeSD7BQkeNE4=
X-Received: by 2002:a50:eb05:0:b0:457:c6f5:5f65 with SMTP id y5-20020a50eb05000000b00457c6f55f65mr1788783edp.311.1666087218147; Tue, 18 Oct 2022 03:00:18 -0700 (PDT)
MIME-Version: 1.0
References: <Y0mJ2CJQbUbf6pzO@Space.Net> <790B75F1-2EB1-49B5-93E3-28F7D26B75AB@gmail.com> <CAOj+MME7PNdjUPHmMuf=xk2ZP5N8Ltn55GVZSNXORbpeH0tnTQ@mail.gmail.com> <837e05e397814a29a30e9488517f0f4b@huawei.com> <CAOj+MMG+yjFYhQv_izjDSWeFvuv-Kcqmq3evx+hNK7KdASc8xw@mail.gmail.com> <735db8cb1f314bdaa6ab4a7359208ccb@huawei.com>
In-Reply-To: <735db8cb1f314bdaa6ab4a7359208ccb@huawei.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Tue, 18 Oct 2022 12:01:08 +0200
Message-ID: <CAOj+MMEUC8bL7HKOERPZ0C66660HYkg_Zamc6tiLWzYm=uQNsw@mail.gmail.com>
To: "Dongjie (Jimmy)" <jie.dong=40huawei.com@dmarc.ietf.org>
Cc: "idr@ietf.org" <idr@ietf.org>, Susan Hares <shares@ndzh.com>, "Van De Velde, Gunter \\(Nokia - BE/Antwerp\\)" <gunter.van_de_velde@nokia.com>
Content-Type: multipart/alternative; boundary="000000000000cd8c9005eb4c2843"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/8Wa8g_K-a9WMHxAOXJea4hFiJmc>
Subject: Re: [Idr] draft-dong-idr-node-target-ext-comm-05.txt - WG Adoption and IPR call (9/27 to 10/11/2022)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Oct 2022 10:00:24 -0000

Hi Jie,

Thank you for uncovering corner of one potential use case. We need more
real use cases.

In the draft I do not see anywhere statement that node target extended
community must be automatically more important then route target extended
community.

Since such text is missing I presume it will be subject to operator's local
policy configuration.

And if so there is nothing - neither on sender nor on the receiver - to
prevent one from using RT value X (RT1 in yr example) as an absolute
drop/accept filtering criteria.

- - -

As far as your IANA allocation I do recommend calling things much more
clearly. Currently you asked and IANA allocated sub-type name "Node Target
Extended Community" - it is good for the draft, but in the registry it
should be "BGP Router ID" or "BGP Identifier" which makes it very clear
what is being encoded.

Many thx,
R.

On Tue, Oct 18, 2022 at 5:53 AM Dongjie (Jimmy) <jie.dong=
40huawei.com@dmarc.ietf.org> wrote:

> Hi Robert,
>
>
>
> Please note that the use case is to distribute the information to a VRF on
> specific set of nodes, which are a subset of nodes which are provisioned
> with that VPN.
>
>
>
> A route with both RT-A and RT1 will be imported into the VRFs of all PE
> nodes of that VPN. Clearly this is not the expected result.
>
>
>
> I agree that for non-VPN cases using RT-A only would be OK, while it is
> not a generic solution to cover the VPN related cases.
>
>
>
> Best regards,
>
> Jie
>
>
>
> *From:* Robert Raszuk [mailto:robert@raszuk.net]
> *Sent:* Tuesday, October 18, 2022 12:04 AM
> *To:* Dongjie (Jimmy) <jie.dong@huawei.com>
> *Cc:* Jeff Tantsura <jefftant.ietf@gmail.com>; idr@ietf.org; Susan Hares <
> shares@ndzh.com>; Van De Velde, Gunter \(Nokia - BE/Antwerp\) <
> gunter.van_de_velde@nokia.com>
> *Subject:* Re: [Idr] draft-dong-idr-node-target-ext-comm-05.txt - WG
> Adoption and IPR call (9/27 to 10/11/2022)
>
>
>
> Hi Jie,
>
>
>
> To your example clearly if you insert both RT2 and RT1 either will cause
> the import to PE global table. In addition RT2 will also result in import
> to a VRF.
>
>
>
> However if you are to distribute information which is not targetted to a
> VRF you do not need to insert this extended community (here RT2) to an
> UPDATE message. Then RT1 alone will result in exactly what you need. I
> honestly do not see a problem here.
>
>
>
> Filtering on a fixed Router_IDs is not flexible enough IMHO even
> considering targetted information distribution.
>
>
>
> Kind regards,
>
> R.
>
>
>
> On Mon, Oct 17, 2022 at 5:45 PM Dongjie (Jimmy) <jie.dong=
> 40huawei.com@dmarc.ietf.org> wrote:
>
> Hi Robert,
>
>
>
> As described in the introduction section of this draft, RT and the RTC
> mechanism applies to the filtering of routes to all nodes with specific
> VRFs. One cannot use RTs for both node filtering and VRF filtering, because
> the matching rule for RTs is “match-any”.
>
>
>
> Here is a simple example: Assume you want to use RT-A to specify the
> target node (say node A), and RT-2 is used to specify the target VRF, then
> BGP routes carrying both RT-A and RT-2 will be imported by all PE nodes
> (not just node A) which has RT2 as the import RT of their VRFs, clearly
> this does not meet the requirement on targeted node distribution.
>
>
>
> That’s why this document proposes a new extended community type:  to
> distinguish its semantics and operation logic with the current RT. Whether
> we need to use wide community or large community depends on how much
> information needs to be carried.
>
>
>
> Best regards,
>
> Jie
>
>
>
> *From:* Robert Raszuk <robert@raszuk.net>
> *Sent:* Sunday, October 16, 2022 6:00 AM
> *To:* Jeff Tantsura <jefftant.ietf@gmail.com>
> *Cc:* Gert Doering <gert@space.net>; Dongjie (Jimmy) <jie.dong@huawei.com>;
> idr@ietf.org; Susan Hares <shares@ndzh.com>; Van De Velde, Gunter \(Nokia
> - BE/Antwerp\) <gunter.van_de_velde@nokia.com>
> *Subject:* Re: [Idr] draft-dong-idr-node-target-ext-comm-05.txt - WG
> Adoption and IPR call (9/27 to 10/11/2022)
>
>
>
> Jeff,
>
>
>
> > Imagine a 1000s devices in 9-11-13 stages multi-planar leaf-spine block
>
> > with eBGP (next-hop rewrite) between them
>
>
>
> So because you bended BGP to be used in such topologies you now want to
> load it with features specific to accommodate such topologies ? And where
> is the rest of the world in this picture ? Where is the Internet in this
> picture ?
>
>
>
> > (requires some planning of how router-ids are allocated)
>
>
>
> Why are Router_IDs now an optimal filtering parameter ?
>
>
>
> If you have such topology running BGP as IGP just allocate RT and use RT
> based filtering (perhaps even with RTC) instead of reinventing the wheel.
> If you are already using RT and for any reason prefer not to touch it,
> allocate a std, extended, large or wide community and use it for filtering.
>
>
>
> Cheers,
>
> Robert
>
>
>
>
>
>
>
> On Sat, Oct 15, 2022 at 11:47 PM Jeff Tantsura <jefftant.ietf@gmail.com>
> wrote:
>
> Hey Gert (long time ;-)),
>
> We are much beyond the time when an AS was bunch of ASBRs with RR and iBGP
> in between only.
> /* fictional
> Imagine a 1000s devices in 9-11-13 stages multi-planar leaf-spine block
> with eBGP (next-hop rewrite) between them, policies are horizontally
> consistent (based on a position of a device in the block). When everything
> is up and running, stage interconnection is highly consistent (equidistant
> end-points)and works just great with consistent distribution of
> reachability (p2mp).
> Single or even double failures are easily mitigated by wide ECMP (with
> fast rehash, easily below 100ms).
> When an optical span fails however, it is a very different story, so you
> need to update either all relevant receivers (could be just a subset of
> routes, could be some additional meta-data(metrics/BW/etc) or sender(s) (or
> a controller that injects said subset m). In many cases, being able to
> target a specific set of BGP speakers is the only solution (temp
> mitigation).
>
> As you rightfully said - all of this can be done with 0 changes to the
> protocol (through management plane), however has a number of its own issues
> (trade-offs).
>
> I agree that 1:1 mapping doesn’t really scale, we could think a a more
> efficient distribution through wildcarding (requires some planning of how
> router-ids are allocated). Would be somewhat similar to “passive BGP” in
> some implementations - accept all peers that come from 10/8.
>
> I have a mixed feeling about this, BGP person in me is saying (throw this
> over the board to management), operating this stuff at scale one is seeing
> some opportunities  ;-)
> Hence my support.
>
> Cheers,
> Jeff
>
> > On Oct 14, 2022, at 09:10, Gert Doering <gert@space.net> wrote:
> >
> > Hi,
> >
> >> On Thu, Oct 13, 2022 at 08:30:45AM -0700, Jeff Tantsura wrote:
> >> Looking at my toolset (sometimes i need to move GWs of capacity from
> one region to another) - this would be a very useful addition.
> >
> > If you need a mechanism to actually control routing propagation, this
> > can all be built today with route-policies and communities, without
> > protocol changes.  Exactly the way an AS needs.
> >
> > If you want this to propagate something else, I am yet to be convinced
> > BGP is what we should burden with it.
> >
> > Gert Doering
> >        -- NetMaster
> > --
> > have you enabled IPv6 on something today...?
> >
> > SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael
> Emmer
> > Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
> > D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
> > Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>