[Idr] Re: draft-smn-idr-inter-domain-ibgp

Moshiko Nayman <mnayman@juniper.net> Thu, 20 June 2024 16:46 UTC

Return-Path: <mnayman@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DA46C14CE3B; Thu, 20 Jun 2024 09:46:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.251
X-Spam-Level:
X-Spam-Status: No, score=-2.251 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.148, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b="S6V7oTYM"; dkim=neutral reason="invalid (public key: not available)" header.d=juniper.net header.b="ezJkFq7+"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GJdIHcfHTi6P; Thu, 20 Jun 2024 09:46:18 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C645C15155A; Thu, 20 Jun 2024 09:46:15 -0700 (PDT)
Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 45KBn5PP024497; Thu, 20 Jun 2024 09:46:14 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h= cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to; s=PPS1017; bh=yCWnGj0FTWQ2WxQXfJXE35sf3h gkvFBQRdQ1k6ziyjQ=; b=S6V7oTYMnFuGQatkC3H7nLpEKrE+XC7LG4aNFwrF9r 3QDP5BFN+h0loikxj1aAWwFkeI0426T8nVR6FT6XLu/xxWMqbeAUUFcgz+qvAgN7 mCKJgP35XcxRmHDj5BMUWK4q3bxNw51vcSpxUNwNVho3lgItca+OPRHxaRh4pfOB BMAu4vCoK9RD4iJiGr3HO6lQBbydXMYj1bxYNYOTsdqPv32N6gjWNIC9pL2IfJOC Fud7xWdG2DV7v+6W1iheu/roWbv4HNC3Mrm/desWwqhSvOJSk5PjYf0xCeZZUlEP SNdRaNVS9ilzNqFsWZPDmj6rLmYvM/9jkTLqG1hc6jFw==
Received: from nam10-bn7-obe.outbound.protection.outlook.com (mail-bn7nam10lp2045.outbound.protection.outlook.com [104.47.70.45]) by mx0b-00273201.pphosted.com (PPS) with ESMTPS id 3yuj9h4ayj-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 20 Jun 2024 09:46:13 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ACosYPEBFmJZ0dgbLsVVH1p25+YIBDLn45yeFWB1V8W9pBpV5cSMyhQkn3Raq+7LrrXPB/MmDdB+hhLmbqyUYQSOZHZx8R7B8KZyUIKudNTVDm7S1A/Fp5KeuwxZvaMyIr4YKI0GA53N6TTgdQjl9OtDwoAhfj4Q5Zm1VdJ9dmgYmh3mxCQeUsyJpJIEdy+Zwq4KYmALvbgBMVMen6vrxv3z947R3o/zObtv+RB5idrBzhevyuYRNzxZW4TZiW+ZReM73K44LDFAOenXaEDbGTEgzBstAXjhBtzKH2pMrJgC5lLdotfkOZk2vNrTywZ/Y//pHPIOksF6ZG45MX/UJg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=yCWnGj0FTWQ2WxQXfJXE35sf3hgkvFBQRdQ1k6ziyjQ=; b=nvG96EHcLa231GncbFBK22TzpPyr5iuKd+uU2Kp2JFWiMFTCM9fLy//vyU1ZL/XXsCWEVhiio+yosX2OTQQ2v+EzQIO39n96tjDLD4mdChErlTj1JMjBnR2Ec66iOyK3al0rPezsf9cQTUWpQ3jn0yTv+0+JwoNNPkDhpBfLnczGV8xIiOAAq6CKr+Ys/ZKqo5wpdXz5+7sSfXy1IrWBmhMUia7yGyMGvCp1ZY6UZkaXlPRb94eiQkRpY70VVpwfVXyNNu23xi3dsRQ0BMSH16OLNvSqV+wWkDL8+thNrKPaArGnEWbF9j7CPHnbbzh24kwOP75Djejat74jUppnMw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yCWnGj0FTWQ2WxQXfJXE35sf3hgkvFBQRdQ1k6ziyjQ=; b=ezJkFq7+4GDmNaPnE8J+nqiF+Oa0AAoRZsCRy1iltBx8SRXo5hRAaNXElsxmIcWnOaBbJfLJYQXcjPWuWxWk/8KfQW/Svjv05FT6AKHls81NCJzJL1TGtacBxRTtieHFTAo5ClpNe0/vouWAkXGzoGz0F2DigPH40I92tYYmNMk=
Received: from CO1PR05MB7974.namprd05.prod.outlook.com (2603:10b6:303:fa::5) by CY8PR05MB9379.namprd05.prod.outlook.com (2603:10b6:930:92::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7677.31; Thu, 20 Jun 2024 16:46:10 +0000
Received: from CO1PR05MB7974.namprd05.prod.outlook.com ([fe80::170a:9ab4:4eb4:5802]) by CO1PR05MB7974.namprd05.prod.outlook.com ([fe80::170a:9ab4:4eb4:5802%6]) with mapi id 15.20.7698.017; Thu, 20 Jun 2024 16:46:10 +0000
From: Moshiko Nayman <mnayman@juniper.net>
To: Krzysztof Szarkowicz <kszarkowicz@juniper.net>, "bruno.decraene@orange.com" <bruno.decraene@orange.com>
Thread-Topic: [Idr] draft-smn-idr-inter-domain-ibgp
Thread-Index: AdoFy1cwbsuQnpJeQpq83HeQN0+5yQDKo9uALoZ7NAA=
Date: Thu, 20 Jun 2024 16:46:10 +0000
Message-ID: <1E48D211-2970-4D19-9936-6CAD5B456ED2@juniper.net>
References: <AS2PR02MB883932457DEB84F94E7AA28AF0D8A@AS2PR02MB8839.eurprd02.prod.outlook.com> <07D43173-DE35-449E-BACA-9EF3AE59D6F5@juniper.net>
In-Reply-To: <07D43173-DE35-449E-BACA-9EF3AE59D6F5@juniper.net>
Accept-Language: en-US, en-GB
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true;MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=0;MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4;MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=daec9fcf-b957-449a-9013-d5805b799202;MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2024-06-20T15:03:13Z;MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard;MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only;MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true;
user-agent: Microsoft-MacOutlook/16.85.24052614
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: CO1PR05MB7974:EE_|CY8PR05MB9379:EE_
x-ms-office365-filtering-correlation-id: a0f7916c-bf1b-4097-f0c2-08dc91487d79
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230037|376011|1800799021|366013|38070700015;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CO1PR05MB7974.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230037)(376011)(1800799021)(366013)(38070700015);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: ortryJ1iVlGAcakMl98ysWNG2dHNnG2moPXmIK9k5WNmlM7dzg/Yx7CPu4xDqUZtC0E69Cl7HvDOKIqPdTXBkfSydane5Qkz4/Of7tDAiYyUK6715MsAbpIwTdyYljodr2sWY/gVLjxMWfyEQleYmbrvWl9qfly3GQitfPXXugbXvtpZEx9c0b5XiQFUbO+Cb4D6DWWRKShKfHQBXoVnx4wuxU6FBpSk0jonSLumkbaAZf4lFICzp2NxglQdx4D3Y3tM3N5/ZHxhe+5qstbB8Kztd/kD2gFH4XbaBB7KeWngaJI+OiFffMm77PB1nChwUC7aIoGSqrzzVZbG42r1TPtCgkD4sXKQwwdAp5Ot2iHp/E4HE2OhLyfD9PAaXbLnmkChTnNsbPv+y/2EHd1f4720yGKFBxVMszZ7+IFz9OHoWttLXKe1uZ1UooQcJk6CWmZ17Owp97MoLZopTwOk7Ze43rKxxogZ5IsvBYrWoQgGmV/TBcPwleHj/QAhyO+5tMtrna7Q9YLjXAATxybqlWGFODYqYLWSUkLOKAiEN5+HzLnd0mQPdtwkVktyKc1j+1dco6TxmHEFRO0G54oMcAV5SIAG1V9ykKC9dQO+gJA6Iarn3BCzTYdDeVBFY8SOK39no37LqIVHY5qCZoRFuSQ1easBHs5BYfmccGtLgR9U07b9+X8EF6TZNk6KdpcFPrzzPqk55SubtTZReI0w17084E7llDE0Md3tw5NN/BauaRzNcVPZIadUSmpAWzRoO1Vn9bHtUb9kWY6HUjvBi5D7Di0WQR9e5gusuxj9R0xZHUkRMMRMGL+AS35UTih2vh/5uGQ16fasDyD2aiNXWbvHJBj6S0YTcJbCbiwan/KcvPu6RkC2fg4H0F0NIBrA53ninJr+5DEq045bhnT1h/OY/dfzJKUgh8irPEmauuZBJiHnx2rNOmTERpKccOCXgL8lkgEOHJibEt76lZA+lN7NRd+cR46m+kaAEECu0HGNtiYGxei1L758F/sdLAK56tLQwuv13maRp7gwpu7Zv4JdPdZ52mZbZZcLJS6qI/1tqX9bQ7ODMZiXB7L1AONwf14228aKvJNTlQ/gPl3sHOyQHz9ee/WGSTzXC/ASiu61qjbRnga4fFyJAG9psZUhx0slG0358M6aoe3WJ/OH4TAj9rlx/0Y0ty2rKOtIH3e8ijCs6ObsQhmxVemaS0zJDjUzMx29T3AkgFxOQBq0IXCdXiYc5hN+dlWXgRsQemeDdmVeoroI1wzoXhp2TkLEiS3+fw8/TKYW6WNEaR771sWGVGlhVJgod67hMHhP80AVCALJ3NW+GfxaqRMfBRsBAd0LWeT3aJvcODVMI4yT9ZcWdFhJUJgsTNLho1IkXvkXDSC4dQpb56tShFSBRd9R1XdIhG8SflsNxCbaeKg2P1VCNkDlVO1aH9+2yx9ACCYH72S2S2hBdQHCX1zUawuyIkz07kuaMgS8sikwQSVngq5u2WLRsliKMpGSGqVYWePxplfiMH8pcIONL+MAQk/9gCTm3pB91hVEPQVrj7WSgGx+y3I6TTpk+w0NmAD3x1OrVs9VsWWX6R6rKI6RsMAerZ8YfgM1rXYweYjA1d0PAw==
Content-Type: multipart/alternative; boundary="_000_1E48D21129704D1999366CAD5B456ED2junipernet_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CO1PR05MB7974.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a0f7916c-bf1b-4097-f0c2-08dc91487d79
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jun 2024 16:46:10.8048 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: pav8bML09wvRrhKQSBYR0K4I/6sUo8GU366h3rkdlB4GMQtlqr5nvJ20ip8yi0h5uxbuqkFvUccgLYJQlQiQGA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY8PR05MB9379
X-Proofpoint-GUID: BpcFulPxhnsQyIQWMXttpVVd-tXLUco5
X-Proofpoint-ORIG-GUID: BpcFulPxhnsQyIQWMXttpVVd-tXLUco5
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.680,FMLib:17.12.28.16 definitions=2024-06-20_08,2024-06-20_04,2024-05-17_01
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 malwarescore=0 priorityscore=1501 impostorscore=0 mlxscore=0 clxscore=1011 phishscore=0 adultscore=0 lowpriorityscore=0 spamscore=0 suspectscore=0 bulkscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2405170001 definitions=main-2406200121
Message-ID-Hash: KZLPXPHABS2B3ZUPK6IMD6B43Q5SO4NK
X-Message-ID-Hash: KZLPXPHABS2B3ZUPK6IMD6B43Q5SO4NK
X-MailFrom: mnayman@juniper.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-idr.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: idr <idr@ietf.org>, "draft-smn-idr-inter-domain-ibgp@ietf.org" <draft-smn-idr-inter-domain-ibgp@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [Idr] Re: draft-smn-idr-inter-domain-ibgp
List-Id: Inter-Domain Routing <idr.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/Dvdp2sghXVGUgquzn-c6fN8e6TQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Owner: <mailto:idr-owner@ietf.org>
List-Post: <mailto:idr@ietf.org>
List-Subscribe: <mailto:idr-join@ietf.org>
List-Unsubscribe: <mailto:idr-leave@ietf.org>

Hi Bruno,

There will be no routing loop because the cluster-id attribute will be enhanced so even when four different cluster-id, the loop will be broken.

In a box topology where each RR is assigned a different cluster-id, routing loops will be prevented because each DBR (act as RR) includes its own cluster-id when advertising routes to other DBRs. This attribute will be enhanced with every advertisement within the box to ensures that when one DBR (e.g., DBR1) receives routes from another DBR, it will detect its own cluster-id in the received route's cluster list and break the loop.


Moshiko.



Juniper Business Use Only
From: Krzysztof Szarkowicz <kszarkowicz@juniper.net>
Date: Friday, October 27, 2023 at 12:52 PM
To: "bruno.decraene@orange.com" <bruno.decraene@orange.com>
Cc: idr <idr@ietf.org>, "draft-smn-idr-inter-domain-ibgp@ietf.org" <draft-smn-idr-inter-domain-ibgp@ietf.org>
Subject: Re: [Idr] draft-smn-idr-inter-domain-ibgp

Hi Bruno,

Thank you for your review. Please see inline.

Regards,
Krzysztof



On 2023 -Oct-23, at 18:34, bruno.decraene@orange.com<mailto:bruno.decraene@orange.com> wrote:

Hi authors,

Thanks for the draft.

I’ve very quickly had a look at your draft. (so please take those comments with a grain of salt)

Use case looks valid to me. IINM, it can be done today with or without a draft (I’m pretty sure at least for a sub-part of the daft 😉 )

Krzysztof> Indeed, there is (some) information scattered here and there. We intend to consolidate, and enhance, where needed.



Please find below some proposed comments.

Avoiding BGP routing loops seems important to me. I would suggest:

  *   Duplicating (or factoring) the text in both options (B & C) (currently it’s only described for option B)
  *   Mandating the same cluster-ID with a MUST (currently a SHOULD and I don’t see any reason why someone would want to create a signaling loop.)
  *   Representing two inter-domain BGP signaling paths in all figures so that every reader has a chance to see the loop. (believe me, some people may miss the loop when figures show a single path hence no possibility for loops; while any real network typically has redundant paths/signaling and hence would create loops)

Krzysztof> That are valid comments. We will enhance in the next revision of the draft.


--
Option C seems essentially the same (or a subset) of draft-ietf-mpls-seamless-mpls

Krzysztof> Indeed. Similar concepts are used. However, draft-ietf-mpls-seamless-mpls ihas expired long time ago, and we hope to bring draft-smn-idr-inter-domain-ibgp to the RFC, eventually.


---
For both option C & B, the loopbacks of the ASBR essentially “carry” a large part of the traffic (half of the traffic assuming equal repartition of PE/customers across domains). Therefore it would make sense to mark those loopback as very high priority during FIB rewrite following an IGP convergence. (assuming that the implementation supports multiple/enough priorities for FIB prioritization)

Krzysztof> Ack.



§ 6. Security Considerations
“Consequently, interfaces facilitating DBR connections where Option B or C is implemented should be associated with this newly introduced table label.”

+1 May be I would call for a :s/should/SHOULD to make it real. That been said, vendors not implementing this may not agree. Also, what is important is the requirement for the isolation, not the solution. So alternatively you could refers to RFC4364 which already mention the requirement without mentioning a solution.


“If MPLS is being used as the tunneling technology, this means that a
   router in the backbone MUST NOT accept a labeled packet from any
   adjacent non-backbone device unless the following two conditions
   hold:

      1. the label at the top of the label stack was actually
         distributed by that backbone router to that non-backbone
         device, and »
https://www.rfc-editor.org/rfc/rfc4364.html#section-6

Finally, I’d say that the security considerations should probably be different for option B & option C. (I don’t see that this “trick” really helps for option C)

Krzysztof> Noted, we will work in security section



Regards,
--Bruno

____________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc

pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler

a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,

Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.



This message and its attachments may contain confidential or privileged information that may be protected by law;

they should not be distributed, used or copied without authorisation.

If you have received this email in error, please notify the sender and delete this message and its attachments.

As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.

Thank you.
_______________________________________________
Idr mailing list
Idr@ietf.org<mailto:Idr@ietf.org>
https://www.ietf.org/mailman/listinfo/idr