Re: [Idr] draft-ietf-idr-next-hop-capability

bruno.decraene@orange.com Fri, 16 September 2022 13:44 UTC

Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C31A2C14CE3A; Fri, 16 Sep 2022 06:44:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uImbH5udlvQn; Fri, 16 Sep 2022 06:44:55 -0700 (PDT)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.41]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44F71C14F740; Fri, 16 Sep 2022 06:44:52 -0700 (PDT)
Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by opfedar20.francetelecom.fr (ESMTP service) with ESMTPS id 4MTb0f1kZPz8t70; Fri, 16 Sep 2022 15:44:50 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1663335890; bh=FEvtabeAdgv8vtyzR4hnK1fBvmW+Leil3HcaNXzFttQ=; h=From:To:Subject:Date:Message-ID:Content-Type:MIME-Version; b=UFx28K5Y/3b8iTqArZl5xjwI9JPSuSFy1zSl/3dFDqxiLXuVJ4sLys1jjCL2Bsxuf 1J2WPhFtTYe9QEa849hvPKlazF4w6hEgU+rO3VLCX/GE6k5YgTMcpgt5nca8sEWcFw 6e7MTh0zaBOR070+CmHTqXN4ZQDEl+OltS49s/UIQIy5q2bU2+FxYfECriLLYfGqn3 8rINaXmTh5uC6G2WFwlh4pWgH8LmuOvqvsCNNtPnXdHqOG1qvXLGy8qBMgo0H4meMQ e2cWlUJJ3V7WdWQ6BRZod0DON1DIPis3CUXL73fbgSzd6HK8oZc+x0/EVNx6s/Xbf9 4WX51UDF4nfAQ==
From: bruno.decraene@orange.com
To: "idr@ietf.org" <idr@ietf.org>, Gyan Mishra <hayabusagsm@gmail.com>
CC: "draft-ietf-idr-next-hop-capability@ietf.org" <draft-ietf-idr-next-hop-capability@ietf.org>, "draft-scudder-idr-entropy-label@ietf.org" <draft-scudder-idr-entropy-label@ietf.org>
Thread-Topic: draft-ietf-idr-next-hop-capability
Thread-Index: AdjJq3EeyFmY9pWSSa2x5YtjTuf7uAAJDM0g
Date: Fri, 16 Sep 2022 13:44:49 +0000
Message-ID: <32649_1663335890_63247DD2_32649_422_1_86edac24a23447ca8781c4f32e8f8cc8@orange.com>
References: <5fd5be91594a4a6393302fe7a0f321ee@orange.com>
In-Reply-To: <5fd5be91594a4a6393302fe7a0f321ee@orange.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Enabled=true; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SetDate=2022-09-16T12:10:51Z; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Method=Privileged; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Name=unrestricted_parent.2; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SiteId=90c7a20a-f34b-40bf-bc48-b9253b6f5d20; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ActionId=02a0f604-b664-4e1c-a6d5-22cc4a175c42; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ContentBits=0
x-originating-ip: [10.115.27.51]
Content-Type: multipart/alternative; boundary="_000_86edac24a23447ca8781c4f32e8f8cc8orangecom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/FFKkt9dQ5MaCel72NEMzorpn2X8>
Subject: Re: [Idr] draft-ietf-idr-next-hop-capability
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Sep 2022 13:44:59 -0000

Of-list, I've been told that some form of backward compatibility with a deployed software (namely ELCv2, minus the squatted code-point) is a significant aspect for some actors.

I think that there may be a path to account for both the past history (ELCv2) and the future generic capabilities (BGP Next-Hop Capability) with the following attribute encoding:
-Transitive BGP attribute, code point TBD.
- Capability encoding :

      +---------------------------------------------------------+
      | Address Family Identifier (2 octets)                    |
      +---------------------------------------------------------+
      | Subsequent Address Family Identifier (1 octet)          |
      +---------------------------------------------------------+
      | Length of Next Hop Network Address (1 octet)            |
      +---------------------------------------------------------+
      | Network Address of Next Hop (variable)                  |
      +---------------------------------------------------------+

Followed by an optional set of NH Capabilities encoded as

                     +------------------------------+

                     | Capability Code (2 octets)   |

                     +------------------------------+

                     | Capability Length (2 octets) |

                     +------------------------------+

                     | Capability Value (variable)  |

                     ~                              ~

                     +------------------------------+


That way:
- Existing implementations see the same content as ELCv2/v3. All they need is to accept and ignore trailing octets
- Other BGP Next-Hop capabilities may be encoded as BGP Next-Hop capability code and allowing capability value.

The main drawback that I can see is that if, in a distant future, one implementation would need to advertise some BGP Next-Hop Capabilities but without advertise ELC, we would need to define a BGP Next-Hop capability code to signal the non-support  of ELC (negative capability announcement).
However, given the existing history (ELCv2), that may be seen as a reasonable way to merge both approaches into a single solution, with minimal impact for existing implementations (accept trailing octets, use a different codepoint).

Hope this helps,
Regards,
Bruno






From: DECRAENE Bruno INNOV/NET
Sent: Friday, September 16, 2022 2:11 PM
To: idr@ietf.org; 'Gyan Mishra' <hayabusagsm@gmail.com>
Subject: draft-ietf-idr-next-hop-capability

Dear WG, Gyan

draft-ietf-idr-next-hop-capability provides the ability to advertise BGP Next-Hop dependent capabilities. This is typically useful for advertising data plane related capabilities.
The draft also defines a first BGP Next-Hop capability to advertise the Entropy Label Capability. As such the draft updates RFC6790.

For this, the draft defines a new non-transitive BGP Attribute.
The use of a non-transitive attribute (vs a transitive attribute) has benefits and disadvantages, more specifically with regards to legacy implementations not supporting draft-ietf-idr-next-hop-capability.

- the benefit of using a non-transitive attribute is that the attribute is automatically removed by implementation not supporting draft-ietf-idr-next-hop-capability, with no extra complexity (logic, data, code and related tests/bugs) as RFC 4271 already provides the non-transitivity.
- the cost of using a non-transitive attribute is that a BGP node which is both 1) propagating the BGP route while not in the data plane path (not changing the BGP Next-Hop) and  2) not supporting draft-ietf-idr-next-hop-capability will remove the attributes/Next-Hop capabilities even though it would not need to as the BGP Next-Hop (hence the Next-Hop capabilities) is unchanged. So essentially the benefit is for BGP Route Reflectors which do not support yet draft-ietf-idr-next-hop-capability. The benefit is likely to be transient and for a small portion of the nodes (e.g. 1%)  however it's definitely real and helps for incremental deployments.

I have two questions for the WG:
- is the above pro & con analysis complete or are there points that would need to be added or removed ?
- given the pro & con, does the WG prefer the use of a non-transitive or a transitive capability?


Note that moving to a transitive attribute would require to add extra logic/code and extra data in the attribute (both being described in draft-scudder-idr-entropy-label) and in short:
- the extra data: capability Next-Hop (AFI, SAFI, length of Next-Hop field, Next-Hop address)
- the extra logic: if Next-Hop address is different in the attribute and in the BGP Next-Hop, then disregard and remove the attribute.
The editor and authors of draft-scudder would be welcome to join as co-authors. (To be transparent, the chairs and AD would likely impose a 5 or 6 authors limit)

Regards,
Bruno





_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.