Re: [Idr] Opsdir early review of draft-ietf-idr-sr-policy-safi-01

Nagendra Kumar <nagendrakumar.nainar@gmail.com> Thu, 21 March 2024 21:05 UTC

Return-Path: <nagendrakumar.nainar@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4592C14F6B0; Thu, 21 Mar 2024 14:05:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.104
X-Spam-Level:
X-Spam-Status: No, score=-7.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xMDzhEmg-WfB; Thu, 21 Mar 2024 14:05:39 -0700 (PDT)
Received: from mail-yb1-xb2c.google.com (mail-yb1-xb2c.google.com [IPv6:2607:f8b0:4864:20::b2c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8867C14F680; Thu, 21 Mar 2024 14:05:39 -0700 (PDT)
Received: by mail-yb1-xb2c.google.com with SMTP id 3f1490d57ef6-dc6d8bd618eso1351868276.3; Thu, 21 Mar 2024 14:05:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1711055139; x=1711659939; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=KjQmGNbHQ8z80rDQCwE8GOuAkwT0Zst7g+EPhiyosis=; b=TOzRmz8SGbJP/3cxp40JS3UexiQ4QSUml9BczbctnF7huYmr6mJMh6pjRisheBhVcd 2of53NbsUnI/0hB9smxeU0/vbs6AEJMq+nkMdQM2P1EXET42yUWvItcApUE1NhrpS+y9 F0oUSKFAh26xpEgQyB/tJ0nFbv3g1lTpci9AgozJOuHeqS7jUceL891sRfnWNnloju82 R+77YWFrQ48ommNPjIKWek2JgrpmSASVAwfxB/IaYocpQM9xunQq8EGhSELYrC2Ar6EM ztcjerOohh/MjmEBZxvI/DrWjOlPzF8kKaNwMEki+8Qb1byD4WdhNpxgIpI8vPvKiW3w 5cbw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1711055139; x=1711659939; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=KjQmGNbHQ8z80rDQCwE8GOuAkwT0Zst7g+EPhiyosis=; b=Yocujl/tS5QSMI5C98lu0TpkPGrIMqH//Wtck7Z4LdQ9kKN1KjzFmZZ7tPDO9Mfe3Z pq056zx7WFGK76D6nq8jQf1xq2UQaNMLqkqt1MDCTXn3Ehia5oOOOrFoRWaLL1UVTukc MAn+yHlrLEGgcNdAhDFYGFXm9HRGM8ozYo6y4CqCsJ/Wq8LyztbRzfJ9fbMcej+QK/HH IbLDobcBM8+2e4T2elLerb/tRXVng+e2w9mhnuLFT/rAGXMst3i5Lg417IPVAE3CW/mT Vm4p29vEmgGO5e3f3ygrETXnE0G3w4Y7oiD27QcRBoeCc7tDIbD+vZGUIHxRhMxX792k 9b4w==
X-Forwarded-Encrypted: i=1; AJvYcCVAQ0FwXtvF5/4FvCX1cobjanf1QIDa5WwKlUGErj9jKrt9MFdBidBKYWRCO4I5SwJllTUP/DA0G22ClEqpPy1QsQDoX77vhsajaFduUHapzxTIQYcNj/JGjduBq1BhgHm3njpo/jMuNw==
X-Gm-Message-State: AOJu0Yy3adBHVZLuVc7WrkXTshbHWs/EKBwS4wl6QIUUDjAcpGHJirtf K6EPcPInPaeYx2CsIPyDB1Tujoavikqx7TwyGPqKeMle8XFnCNSi1qg7aQr+T7IDpo3CR1vWc7Y KA3WYTAM4+7fCQ05bii3vfxLGswg=
X-Google-Smtp-Source: AGHT+IEwt/YifQ0YIDN4jmuHkz4CC8eOIgSYVhq8xbe8suta4pJc5KDa1NDYo2SlpwIsq6i8ewTjM4VcBIixP5cHzHY=
X-Received: by 2002:a25:ad9a:0:b0:dc2:2e01:4ff0 with SMTP id z26-20020a25ad9a000000b00dc22e014ff0mr295704ybi.45.1711055138782; Thu, 21 Mar 2024 14:05:38 -0700 (PDT)
MIME-Version: 1.0
References: <170960681488.65165.9225914629737365319@ietfa.amsl.com> <CAH6gdPziPNiOpBDASvPwZJJ7=dpc-W+zD5g78+4Cd5aqruPiiA@mail.gmail.com>
In-Reply-To: <CAH6gdPziPNiOpBDASvPwZJJ7=dpc-W+zD5g78+4Cd5aqruPiiA@mail.gmail.com>
From: Nagendra Kumar <nagendrakumar.nainar@gmail.com>
Date: Thu, 21 Mar 2024 17:05:27 -0400
Message-ID: <CAAHCKi-Ks=U=WrWNSiEcMzRPUiGTuiWg5WoiDBbkkTLmp9Ek+w@mail.gmail.com>
To: Ketan Talaulikar <ketant.ietf@gmail.com>
Cc: ops-dir@ietf.org, draft-ietf-idr-sr-policy-safi.all@ietf.org, idr@ietf.org
Content-Type: multipart/alternative; boundary="000000000000bd08d5061432113b"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/C4jsVd7rHPb_JYO3xQZBCqG_so0>
Subject: Re: [Idr] Opsdir early review of draft-ietf-idr-sr-policy-safi-01
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Mar 2024 21:05:43 -0000

HI Ketan,

Thanks a lot for your response and clarifying most of the queries. I just
have one follow up query based on the response.

KT> This is covered in RFC9256 in section 2 and more specifically the
tiebreaker in section 2.9.

<Nagendra> Thanks. I think I read RFC9256 before crafting my previous query
and re-read the highlighted section again. I am not sure if that clarifies
(or if I am confused) :).

Section 2.9 appears to discuss the tie breaker from SRPM point of view
between different paths received from heterogeneous sources/protocols (BGP,
PCEP, manual, etc).

As per Section 2.4 of RFC9256, When BGP is the signaling protocol, BGP will
provide ASN-ID and Node-ID for the candidate paths. Once the candidates
paths are with the BGP process, this draft suggests the below:

It has to be noted that if several candidate paths of the same SR Policy
(endpoint, color) are signaled via BGP to a headend, then it is RECOMMENDED
that each NLRI uses a different distinguisher.

The above statement (from sender perspective) is followed by the processing
procedure (receiver perspective) details when receiving multiple candidate
paths with different distinguishers.

If BGP has installed into the BGP table two advertisements whose respective
NLRIs have the same color and endpoint, but different distinguishers, both
advertisements are passed to the SRPM as different candidate paths along
with their respective originator information (i.e., ASN and BGP Router-ID)
as described in section 2.4 of [RFC9256
<https://www.rfc-editor.org/info/rfc9256>].

So it appears to assume that different candidate paths with the same
<Color, Endpoint> will always be received with different distinguishers. I
am wondering what is the action when it is not the case. When the headend
receives the BGP update with the same <Color, Endpoint> and same
distinguisher in the NLRI with different candidate paths, how will the
headend treat the same?.

Once again, thanks a lot for the response and clarifying the queries.

Thanks,
Nagendra




On Mon, Mar 4, 2024 at 11:47 PM Ketan Talaulikar <ketant.ietf@gmail.com>
wrote:

> Hi Nagendra,
>
> Thanks for your review and please check inline below for responses.
>
>
> On Tue, Mar 5, 2024 at 8:16 AM Nagendra Nainar via Datatracker <
> noreply@ietf.org> wrote:
>
>> Reviewer: Nagendra Nainar
>> Review result: Has Issues
>>
>> Hi,
>>
>> I have reviewed this document as part of the Operational directorate's
>> ongoing
>> effort to review all IETF documents being processed by the IESG.  These
>> comments were written with the intent of improving the operational
>> aspects of
>> the IETF drafts per guidelines in RFC5706.
>>
>> Comments that are not addressed in last call may be included
>> in AD reviews during the IESG review.  Document editors and WG chairs
>> should
>> treat these comments just like any other last call comments.
>>
>> Overall Summary:
>>
>> This draft is a standard track proposing SR Policy NLRI and the relevant
>> TLVs
>> along with the handling procedures. Overall this is a well written
>> document and
>> addresses all potential operational aspects. I am marking it as "Has
>> issues"
>> only to get some clarification on the below as I could not get any clarity
>> based on my reading.
>>
>> More details below:
>>
>> An SR Policy intended only for the receiver will, in most cases, not
>>    traverse any Route Reflector (RR, [RFC4456]).
>>
>> --> Normally, it is expected to have BGP session between the PEs and the
>> RRs.
>>
>
> KT> That is for BGP VPN services. This is a different SAFI.
>
>
>> The above statement appears to give an impression that - in addition to
>> the
>> PE-RR session(s), does this machinery require additional/adhoc sessions
>> between
>> the PEs?. Or is this statement only applicable for the PCE-PE scenario?.
>> Can
>> you clarify the same?
>>
>
> KT> Yes, there is further text in the section that describes the same.
> Since this is a BGP spec, the term "controller" is used as opposed to PCE
> which is construed by many as a PCEP construct.
>
>
>>
>> It has to be noted that if several candidate paths of the same SR
>>    Policy (endpoint, color) are signaled via BGP to a headend, then it
>>    is RECOMMENDED that each NLRI uses a different distinguisher.  If BGP
>>    has installed into the BGP table two advertisements whose respective
>>    NLRIs have the same color and endpoint, but different distinguishers,
>>    both advertisements are passed to the SRPM as different candidate
>>    paths along with their respective originator information (i.e., ASN
>>    and BGP Router-ID) as described in section 2.4 of [RFC9256].
>>
>> --> What happens when the BGP receives several candidate paths for the
>> <Color,
>> Endpoint> but with the same distinguisher?. Will it override or the
>> preference
>> sub-TLV will handle it?. I was looking into the related drafts/RFCs but I
>> am
>> not sure if this is handled properly and would like to add here to
>> clarify as
>> required.
>>
>
> KT> This is covered in RFC9256 in section 2 and more specifically the
> tiebreaker in section 2.9.
>
>
>>
>> --> What happens if a node receives the SR Policy NLRI with the length
>> field of
>> the Binding SID Sub-TLV set to 6 and the label value from the reserved
>> range
>> (0-15 may be)?
>>
>
> KT> That is handled by the SRPM and outside the scope of BGP. In this
> specific case, the specified BSID is not usable/available and the behavior
> is covered by section 6.2 of RFC9256.
>
>
>>
>> --> Section 2.4.3 describes the Sub-TLV for SRv6 BSID. Any reason why
>> section
>> 2.4.2 includes a length field and describes another way to represent SRv6
>> BSID?
>>
>
> KT> Section 2.4.2 specifies the SR BSID sub-TLV that was used for both
> SR-MPLS and SRv6. But it was defined during the early stages of SR
> evolution and did not cover the SRv6 aspects fully and hence the SRv6 BSID
> sub-TLV was introduced in section 2.4.3. For backward compatibility with
> existing implementations, the use of SR BSID sub-TLV for SRv6 was retained
> (with a reduced functionality).
>
> Thanks,
> Ketan
>
>
>>
>> Thanks,
>> Nagendra
>>
>>
>>
>>