Re: [Idr] WG Adoption call for draft-wang-idr-rd-orf-05.txt (2/4/2021 to 2/18/2021)

"Wanghaibo (Rainsword)" <rainsword.wang@huawei.com> Fri, 12 February 2021 15:04 UTC

Return-Path: <rainsword.wang@huawei.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5BA03A1719 for <idr@ietfa.amsl.com>; Fri, 12 Feb 2021 07:04:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.917
X-Spam-Level:
X-Spam-Status: No, score=-1.917 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_IMAGE_RATIO_04=0.001, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aqjoUrxoeSnM for <idr@ietfa.amsl.com>; Fri, 12 Feb 2021 07:04:27 -0800 (PST)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A6043A1689 for <idr@ietf.org>; Fri, 12 Feb 2021 07:04:25 -0800 (PST)
Received: from fraeml745-chm.china.huawei.com (unknown [172.18.147.226]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4Dcc6r0GS2z67VVD for <idr@ietf.org>; Fri, 12 Feb 2021 22:57:40 +0800 (CST)
Received: from nkgeml708-chm.china.huawei.com (10.98.57.160) by fraeml745-chm.china.huawei.com (10.206.15.226) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Fri, 12 Feb 2021 16:04:20 +0100
Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by nkgeml708-chm.china.huawei.com (10.98.57.160) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Fri, 12 Feb 2021 23:04:18 +0800
Received: from nkgeml705-chm.china.huawei.com ([10.98.57.154]) by nkgeml705-chm.china.huawei.com ([10.98.57.154]) with mapi id 15.01.2106.006; Fri, 12 Feb 2021 23:04:18 +0800
From: "Wanghaibo (Rainsword)" <rainsword.wang@huawei.com>
To: Robert Raszuk <robert@raszuk.net>
CC: "idr@ietf. org" <idr@ietf.org>, Susan Hares <shares@ndzh.com>
Thread-Topic: [Idr] WG Adoption call for draft-wang-idr-rd-orf-05.txt (2/4/2021 to 2/18/2021)
Thread-Index: Adb7C8Tapzr6LUQXS7CFnBh8kC9NpgErJwcA///mJoCAADsLAIAAFHsAgACBZQCAACgLgIAADQIAgAAwdwCAAAT+AIAACK+AgABFMgCAAAM3gIAAOs6AgAAERoCAAAQLgIAADoIAgAALRwCAAA7ZgIAADoqAgABGJwCAADrwgP//Pj3A
Date: Fri, 12 Feb 2021 15:04:18 +0000
Message-ID: <283a4847d02a444c9cfdbd31cf313485@huawei.com>
References: <BYAPR11MB3207FC61ECA7467CD19E5E82C08B9@BYAPR11MB3207.namprd11.prod.outlook.com> <22103C76-7D0B-4452-B6D3-914AC63E828B@tsinghua.org.cn> <CABNhwV2ktDHWJ7=--bdejdKuzL3CYNfP1YNtyofHeO-3cH3APA@mail.gmail.com> <CAOj+MMFUk8OXkt-gL1bOxEwqh0e2Da4K-jiMOzZ76iN8cpgQkw@mail.gmail.com>
In-Reply-To: <CAOj+MMFUk8OXkt-gL1bOxEwqh0e2Da4K-jiMOzZ76iN8cpgQkw@mail.gmail.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [10.45.160.242]
Content-Type: multipart/related; boundary="_005_283a4847d02a444c9cfdbd31cf313485huaweicom_"; type="multipart/alternative"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/9S611Mkb90iXxzksbNjn9RJ5TWw>
Subject: Re: [Idr] WG Adoption call for draft-wang-idr-rd-orf-05.txt (2/4/2021 to 2/18/2021)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Feb 2021 15:04:30 -0000

Hi Robert,

ORF is used for reduce the pressure on the receiver.
The receiver device, such as the access router, may have weak performance, while the sender device, such as the RR, may have strong performance.
Therefore, it is sometimes not enough to filter packets at the receiver.

The ORF is a tool and does not exist independently. The deployment problem described here occurs only when the RD-ORF mode is used.
Actually, the ORF can be used together with other ORFs, such as Prefixed ORF.
RD-ORF provides a more efficient filtering method, making solution deployment more flexible.

In fact, most vendors' devices support rd-filter, but only support the configuration.

In addition, if the RR decides to push the RD-ORF to its route source only when PE1 and PE3 do not want that RD.

Regards,
Haibo


From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Robert Raszuk
Sent: Friday, February 12, 2021 7:30 PM
To: Gyan Mishra <hayabusagsm@gmail.com>
Cc: idr@ietf. org <idr@ietf.org>; Susan Hares <shares@ndzh.com>
Subject: Re: [Idr] WG Adoption call for draft-wang-idr-rd-orf-05.txt (2/4/2021 to 2/18/2021)

Aijun & Gyan,

Let me try one more (hopefully last time) to explain to both of you - and for that matter to anyone how supported this adoption.

Let's consider very typical Hub and Spoke scenario as illustrated below:

[image.png]

HQ1 is advertising two routes:

- one default with RDX1 with RT TO_SPOKE
- one or more specifics with RDX1 to the other HUBs

Now imagine HQ1 bought a new BGP "Optimizer" and suddenly is starting to advertise 100000 /32 routes just to the other HUB with RT: TO_HUB.

[image.png]


So PE2 detects this as VRF with RDX2 on it got overwhelmed during import with RT TO_HUB and starts pushing RDX1 (original RD) to RR to stop getting those routes.

Well all great except now you are throwing baby with the water as all spokes attached to PE2 which just import default route to HUB HQ1 also can no longer reach their hub site as their default route will be removed. Therefor they will have nothing to import with RT:TO_SPOKE

Further if RR "independently" decided ... oh let's push this ORF to PE1 then all of the spokes attached to perhaps even much more powerful PE3 can also no longer reach their headquarters.

- - -

Summary:

The above clearly illustrates why the proposed solution to use RD for filtering is in fact harmful.

See when you design new protocol extensions the difficulty is to not break any existing protocols and deployments.

Hope this puts this long thread to rest now.


Thx,
Robert