Re: [Idr] Opsdir early review of draft-ietf-idr-sr-policy-safi-01

Ketan Talaulikar <ketant.ietf@gmail.com> Thu, 21 March 2024 23:36 UTC

Return-Path: <ketant.ietf@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C544C14F6BC; Thu, 21 Mar 2024 16:36:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xg2skI94Ye80; Thu, 21 Mar 2024 16:36:11 -0700 (PDT)
Received: from mail-ej1-x635.google.com (mail-ej1-x635.google.com [IPv6:2a00:1450:4864:20::635]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C44CC14F68C; Thu, 21 Mar 2024 16:36:11 -0700 (PDT)
Received: by mail-ej1-x635.google.com with SMTP id a640c23a62f3a-a46cc947929so219518166b.1; Thu, 21 Mar 2024 16:36:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1711064169; x=1711668969; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=+VTJy6JZkft7jFaQ0vglbyMXGfsa2BtTk7CQAiiI2Sk=; b=Qdk9O7EKgdLzdNmGZ+E14CKzQPue/Q5UQHnr8979uAAZjShsi5Xbmu4haLj1E4Q0sW DUjiKMffv/CEcFjs/bM2MZ8Vpj5s3myRaUTBAaTW8FaPDdfqjT5f/IWsoQtinU/1tuz7 t5hnkzV73VZpOiuMGeDrPq2maR6O0BMfdg6brevKOPlbhmzGvMPN5TVDxhpWyZeJM1b3 APT/PJdFaQOOmWnbtXS56izZcy7wYxLE7uWIVyUZGbF5w9k0KB4djJnZAd+IHP+r/r82 orXJtuz3/qD57Mp7PYSjObyOBBA8yID0z7A7fpStKtrVQGIdPniuYIG9DukHyOAdzB+O xbAw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1711064169; x=1711668969; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=+VTJy6JZkft7jFaQ0vglbyMXGfsa2BtTk7CQAiiI2Sk=; b=Vc2CT3Mj90DjbVjpHD6ioV5j0dXiofBbaM9zLoimI3BNpgJFBUaCg/bHR8HhQIWLkN krYSV0LTA9cWidYEan+Yik24Valr+QxF8ZoZFtonwtavljfKamGC4hylMChfrktIqa7y NMl2jDLY1mRcmvV77m+RjN5MJzvoi587NGHIRoohufVEsmm3Y41MfzhvBeq3UtZZLk29 wt2dS3L+gvOhZ3bB/YFWInsecdYmPhD8rwmdmMMg1xpEO2CqUTnjJlCXfb0JosFK04vf VamWi0ltibahYzg88IlzioFA1o2UBk/DD3DNLFuFyp++8XTNw4AIT6VmErq9kgLfSz0p LO0g==
X-Forwarded-Encrypted: i=1; AJvYcCVyp64kOyUTTDDOBL93k7tfam2JgPUNn2BISzOmUwvXoJX9bGdEYKW7i40brCJT4hniJOlAH0nzN2h01UuVhV7lahkMaAoOLSAWLeHjSZd0XqBV54vaHsUTpfsW5btKcwLeJm+a8wgUZA==
X-Gm-Message-State: AOJu0Yw4ic6UovushBLBDGUbWEIO4Hed9+RYiz64f+n8RKpVlV384GAj qbpDxJku+3Db3d3qLNYp2kMvVOP81GIi0+wZ+T+IldheYcTXYOF4yrf5DU+P/PX4xrR6okdoJ24 pnEsZDCWULd6NDZH8deYSIfko5u+gHuhu
X-Google-Smtp-Source: AGHT+IEYDSMl/rqVFrMHvKkParjtCk5mJILpQFAiT6iMVlbwodHFqWyO4xINIYg20Dad1j6iecl6mzp3QGdkToYchLA=
X-Received: by 2002:a17:906:5d7:b0:a46:be0b:eeca with SMTP id t23-20020a17090605d700b00a46be0beecamr475149ejt.62.1711064169046; Thu, 21 Mar 2024 16:36:09 -0700 (PDT)
MIME-Version: 1.0
References: <170960681488.65165.9225914629737365319@ietfa.amsl.com> <CAH6gdPziPNiOpBDASvPwZJJ7=dpc-W+zD5g78+4Cd5aqruPiiA@mail.gmail.com> <CAAHCKi-Ks=U=WrWNSiEcMzRPUiGTuiWg5WoiDBbkkTLmp9Ek+w@mail.gmail.com>
In-Reply-To: <CAAHCKi-Ks=U=WrWNSiEcMzRPUiGTuiWg5WoiDBbkkTLmp9Ek+w@mail.gmail.com>
From: Ketan Talaulikar <ketant.ietf@gmail.com>
Date: Fri, 22 Mar 2024 05:05:57 +0530
Message-ID: <CAH6gdPxva8FCsXDGT_ReFe1dU6ZxNWNw6wvTMaPhm4d+EzSj9A@mail.gmail.com>
To: Nagendra Kumar <nagendrakumar.nainar@gmail.com>
Cc: ops-dir@ietf.org, draft-ietf-idr-sr-policy-safi.all@ietf.org, idr@ietf.org
Content-Type: multipart/alternative; boundary="000000000000fbea900614342b8b"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/CxK5tcUhzkbyQIj-JGd4L0m7u_Y>
Subject: Re: [Idr] Opsdir early review of draft-ietf-idr-sr-policy-safi-01
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Mar 2024 23:36:16 -0000

Hi Nagendra,

Please check inline with KT2.


On Fri, Mar 22, 2024 at 2:35 AM Nagendra Kumar <
nagendrakumar.nainar@gmail.com> wrote:

> HI Ketan,
>
> Thanks a lot for your response and clarifying most of the queries. I just
> have one follow up query based on the response.
>
> KT> This is covered in RFC9256 in section 2 and more specifically the
> tiebreaker in section 2.9.
>
> <Nagendra> Thanks. I think I read RFC9256 before crafting my previous
> query and re-read the highlighted section again. I am not sure if that
> clarifies (or if I am confused) :).
>
> Section 2.9 appears to discuss the tie breaker from SRPM point of view
> between different paths received from heterogeneous sources/protocols (BGP,
> PCEP, manual, etc).
>
> As per Section 2.4 of RFC9256, When BGP is the signaling protocol,
> BGP will provide ASN-ID and Node-ID for the candidate paths. Once the
> candidates paths are with the BGP process, this draft suggests the below:
>
> It has to be noted that if several candidate paths of the same SR Policy
> (endpoint, color) are signaled via BGP to a headend, then it is RECOMMENDED
> that each NLRI uses a different distinguisher.
>
> The above statement (from sender perspective) is followed by the
> processing procedure (receiver perspective) details when receiving multiple
> candidate paths with different distinguishers.
>
> If BGP has installed into the BGP table two advertisements whose
> respective NLRIs have the same color and endpoint, but different
> distinguishers, both advertisements are passed to the SRPM as different
> candidate paths along with their respective originator information (i.e.,
> ASN and BGP Router-ID) as described in section 2.4 of [RFC9256
> <https://www.rfc-editor.org/info/rfc9256>].
>
> So it appears to assume that different candidate paths with the same
> <Color, Endpoint> will always be received with different distinguishers.
>

KT2> There is no such assumption - it is simply the recommendation of how
things should be done when the desire is to signal multiple CPs (say for
fallback from one to the other) from the same controller via BGP.



> I am wondering what is the action when it is not the case. When the
> headend receives the BGP update with the same <Color, Endpoint> and same
> distinguisher in the NLRI with different candidate paths, how will the
> headend treat the same?.
>

KT2> In this case, these are two paths for the same "route" - i.e., it is
the same CP being signaled (perhaps two copies being received via two RRs).
And so in this case BGP will run its bestpath and send only that bestpath
to SRPM. This is covered in section 4.2.


>
> Once again, thanks a lot for the response and clarifying the queries.
>

KT2> Thanks for your review and I hope the above clarifies your query.

Thanks,
Ketan


>
> Thanks,
> Nagendra
>
>
>
>
> On Mon, Mar 4, 2024 at 11:47 PM Ketan Talaulikar <ketant.ietf@gmail.com>
> wrote:
>
>> Hi Nagendra,
>>
>> Thanks for your review and please check inline below for responses.
>>
>>
>> On Tue, Mar 5, 2024 at 8:16 AM Nagendra Nainar via Datatracker <
>> noreply@ietf.org> wrote:
>>
>>> Reviewer: Nagendra Nainar
>>> Review result: Has Issues
>>>
>>> Hi,
>>>
>>> I have reviewed this document as part of the Operational directorate's
>>> ongoing
>>> effort to review all IETF documents being processed by the IESG.  These
>>> comments were written with the intent of improving the operational
>>> aspects of
>>> the IETF drafts per guidelines in RFC5706.
>>>
>>> Comments that are not addressed in last call may be included
>>> in AD reviews during the IESG review.  Document editors and WG chairs
>>> should
>>> treat these comments just like any other last call comments.
>>>
>>> Overall Summary:
>>>
>>> This draft is a standard track proposing SR Policy NLRI and the relevant
>>> TLVs
>>> along with the handling procedures. Overall this is a well written
>>> document and
>>> addresses all potential operational aspects. I am marking it as "Has
>>> issues"
>>> only to get some clarification on the below as I could not get any
>>> clarity
>>> based on my reading.
>>>
>>> More details below:
>>>
>>> An SR Policy intended only for the receiver will, in most cases, not
>>>    traverse any Route Reflector (RR, [RFC4456]).
>>>
>>> --> Normally, it is expected to have BGP session between the PEs and the
>>> RRs.
>>>
>>
>> KT> That is for BGP VPN services. This is a different SAFI.
>>
>>
>>> The above statement appears to give an impression that - in addition to
>>> the
>>> PE-RR session(s), does this machinery require additional/adhoc sessions
>>> between
>>> the PEs?. Or is this statement only applicable for the PCE-PE scenario?.
>>> Can
>>> you clarify the same?
>>>
>>
>> KT> Yes, there is further text in the section that describes the same.
>> Since this is a BGP spec, the term "controller" is used as opposed to PCE
>> which is construed by many as a PCEP construct.
>>
>>
>>>
>>> It has to be noted that if several candidate paths of the same SR
>>>    Policy (endpoint, color) are signaled via BGP to a headend, then it
>>>    is RECOMMENDED that each NLRI uses a different distinguisher.  If BGP
>>>    has installed into the BGP table two advertisements whose respective
>>>    NLRIs have the same color and endpoint, but different distinguishers,
>>>    both advertisements are passed to the SRPM as different candidate
>>>    paths along with their respective originator information (i.e., ASN
>>>    and BGP Router-ID) as described in section 2.4 of [RFC9256].
>>>
>>> --> What happens when the BGP receives several candidate paths for the
>>> <Color,
>>> Endpoint> but with the same distinguisher?. Will it override or the
>>> preference
>>> sub-TLV will handle it?. I was looking into the related drafts/RFCs but
>>> I am
>>> not sure if this is handled properly and would like to add here to
>>> clarify as
>>> required.
>>>
>>
>> KT> This is covered in RFC9256 in section 2 and more specifically the
>> tiebreaker in section 2.9.
>>
>>
>>>
>>> --> What happens if a node receives the SR Policy NLRI with the length
>>> field of
>>> the Binding SID Sub-TLV set to 6 and the label value from the reserved
>>> range
>>> (0-15 may be)?
>>>
>>
>> KT> That is handled by the SRPM and outside the scope of BGP. In this
>> specific case, the specified BSID is not usable/available and the behavior
>> is covered by section 6.2 of RFC9256.
>>
>>
>>>
>>> --> Section 2.4.3 describes the Sub-TLV for SRv6 BSID. Any reason why
>>> section
>>> 2.4.2 includes a length field and describes another way to represent
>>> SRv6 BSID?
>>>
>>
>> KT> Section 2.4.2 specifies the SR BSID sub-TLV that was used for both
>> SR-MPLS and SRv6. But it was defined during the early stages of SR
>> evolution and did not cover the SRv6 aspects fully and hence the SRv6 BSID
>> sub-TLV was introduced in section 2.4.3. For backward compatibility with
>> existing implementations, the use of SR BSID sub-TLV for SRv6 was retained
>> (with a reduced functionality).
>>
>> Thanks,
>> Ketan
>>
>>
>>>
>>> Thanks,
>>> Nagendra
>>>
>>>
>>>
>>>