Re: [Idr] draft-lapukhov-bgp-opaque-signaling

Petr Lapukhov <petr@fb.com> Tue, 15 March 2016 12:55 UTC

Return-Path: <prvs=2882db3d47=petr@fb.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D339712D9F2 for <idr@ietfa.amsl.com>; Tue, 15 Mar 2016 05:55:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.72
X-Spam-Level:
X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fb.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4JbCZM6jYWJM for <idr@ietfa.amsl.com>; Tue, 15 Mar 2016 05:55:15 -0700 (PDT)
Received: from mx0a-00082601.pphosted.com (mx0a-00082601.pphosted.com [67.231.145.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7112312D572 for <idr@ietf.org>; Tue, 15 Mar 2016 05:55:15 -0700 (PDT)
Received: from pps.filterd (m0044010.ppops.net [127.0.0.1]) by mx0a-00082601.pphosted.com (8.16.0.11/8.16.0.11) with SMTP id u2FCpj0N003591; Tue, 15 Mar 2016 05:55:13 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fb.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=facebook; bh=xUO35ZVBZO/r71g1iqgjbvPeQ53ckH7IFtacidjeOQU=; b=QM/m7BASPSx/hbc/LLjChQqwG9Avj+nEixKImGQDkyJ4c54snkBq2KK9v9NyPASre1W6 7Ng0zIgBGJOAWWHI4maZwv5IyUnfMufdy7JoMohzv7JTEjjSHpmMp/wdVYh1eF8SETfA FzR3ijqGhE9KUClKoT4bppwX+Xr5z186TW0=
Received: from mail.thefacebook.com ([199.201.64.23]) by mx0a-00082601.pphosted.com with ESMTP id 21pbk41mv1-1 (version=TLSv1 cipher=AES128-SHA bits=128 verify=NOT); Tue, 15 Mar 2016 05:55:13 -0700
Received: from PRN-MBX01-2.TheFacebook.com ([169.254.3.204]) by PRN-CHUB04.TheFacebook.com ([fe80::7ded:c10e:ef04:80d8%12]) with mapi id 14.03.0248.002; Tue, 15 Mar 2016 05:55:13 -0700
From: Petr Lapukhov <petr@fb.com>
To: "Jakob Heitz (jheitz)" <jheitz@cisco.com>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: draft-lapukhov-bgp-opaque-signaling
Thread-Index: AdF8nS8FQTTx9jiyQtWM4z1Bl2FmugABRu++AABFuBAAPFwa0ABI9jVQ
Date: Tue, 15 Mar 2016 12:55:12 +0000
Message-ID: <3F437107848A5140A6A19222EFFB3481200E8833@PRN-MBX01-2.TheFacebook.com>
References: <2d12cade49ac4ec19a7f2c80aee3b72d@XCH-ALN-014.cisco.com> <3F437107848A5140A6A19222EFFB3481200E2389@PRN-MBX01-2.TheFacebook.com> <976fb2df5f974b298a04b547afb917b7@XCH-ALN-014.cisco.com>, <82489e182ab34b74a29cea2f5e3866bf@XCH-ALN-014.cisco.com>
In-Reply-To: <82489e182ab34b74a29cea2f5e3866bf@XCH-ALN-014.cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [192.168.52.123]
Content-Type: multipart/alternative; boundary="_000_3F437107848A5140A6A19222EFFB3481200E8833PRNMBX012TheFac_"
MIME-Version: 1.0
X-Proofpoint-Spam-Reason: safe
X-FB-Internal: Safe
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2016-03-15_04:, , signatures=0
Archived-At: <http://mailarchive.ietf.org/arch/msg/idr/HXY1xWmUQvPVBJLUAaKQGh2YTMQ>
Subject: Re: [Idr] draft-lapukhov-bgp-opaque-signaling
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Mar 2016 12:55:19 -0000

Jakob,

So I was hoping to make the minimal amount of requirements needed to get this working. Using new AFI/SAFI already creates some burden, though it's not that hard to enable in a datacenter, once code supports it (e.g. it could be deployed to just one pod).

A new transitive attribute with existing AFI (IPv4/IPv6) is another option, as Robert suggested, but I feel uneasy about mixing routing and non-routing data: even though this approach allows for transparent data tunneling over existing BGP clouds. Using new AFI/SAFI, on the other hand, allows for fixing the contiguous distribution topology only to devices that are willing to support it.

RTC or other extended communities are definitely a great option to constrain information flooding, but I decided to leave any filtering requirements up to the implementation - e.g. either automated RT filtering or ORF could be possibly used, depending on system capabilities. Simplest case, everything could be flooded everywhere, if the user wishes to.

Re: precedence. The proposal merge conflict resolution is to be done by using BGP best-path selection process. Therefore, to set precedences a user is required to manipulate the usual attributes (e.g. bumping local-preference). IGP cost, obviously, does not exist, but this haven't been a problem in the best for eBGP tie-breaking. AS_PATH still has topological meaning, exposing path to the data-source, which I find useful for debugging purposes.

Regards.

Petr

________________________________
From: Jakob Heitz (jheitz) [jheitz@cisco.com]
Sent: Sunday, March 13, 2016 9:37 PM
To: Petr Lapukhov; idr@ietf.org
Subject: RE: draft-lapukhov-bgp-opaque-signaling

I was thinking more of how a service provider would use this with different
customers that don't know about each other, like preventing ships in the night from
crashing into each other. However, it could work in private.

Without a route target, any data sent will go everywhere and be stored in every router.
You probably don't want that.
This new AFI should require a route target. That means an update message without an RT must be dropped.

BGP treats all updates the same.
Once the floodgates are open to generic data, you might want to invent a precedence attribute.

Thanks,
Jakob.


From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Jakob Heitz (jheitz)
Sent: Saturday, March 12, 2016 1:12 PM
To: Petr Lapukhov <petr@fb.com>; idr@ietf.org
Subject: Re: [Idr] draft-lapukhov-bgp-opaque-signaling

Without this problem solved, the proposal is not useful.
Everybody using it must stick to the eventual solution to ensure interoperability.
Therefore, it should be inside the scope.

Actually, BGP already has a way to distinguish applicationd: AFI and SAFI.

Jakob.

From: Petr Lapukhov [mailto:petr@fb.com]
Sent: Saturday, March 12, 2016 1:06 PM
To: Jakob Heitz (jheitz) <jheitz@cisco.com>; idr@ietf.org
Subject: RE: draft-lapukhov-bgp-opaque-signaling

Hi Jakob,

There is an ongoing discussion around avoiding NLRI (key) collisions. For now, the plan is to externally generate unique key prefix per application, e.g. application name, or UUID or some other globally unique string. Ensuring the uniqueness of those prefixes is outside the scope of the proposal, though - it's more of a deployment consideration.

Regards,

Petr

________________________________
From: Idr [idr-bounces@ietf.org] on behalf of Jakob Heitz (jheitz) [jheitz@cisco.com]
Sent: Saturday, March 12, 2016 12:26 PM
To: idr@ietf.org
Subject: [Idr] [WARNING : A/V UNSCANNABLE] draft-lapukhov-bgp-opaque-signaling

I read

http://www.ietf.org/id/draft-lapukhov-bgp-opaque-signaling-01.txt<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.ietf.org_id_draft-2Dlapukhov-2Dbgp-2Dopaque-2Dsignaling-2D01.txt&d=CwMFAg&c=5VD0RTtNlTh3ycd41b3MUw&r=LU_vJaM_EQu1Ssm35j2xlA&m=y8paWUSIMD4YG8hfWC8k0b55e7qWYVRgGAwsXJKLMD4&s=-jEO1Jw88BI6pWUJf9es7WC0Q8Sm0XfBIhYRrWQCBHg&e=>


Is this intended for any and multiple applications to use?
If so, how do independent applications guarantee no duplication in NLRI?
If not, what is the target application?

Thanks
Jakob.