Re: [Idr] 答复: WG adoption call for draft-xu-idr-neighbor-autodiscovery

" 徐小虎(义先) " <xiaohu.xxh@alibaba-inc.com> Tue, 17 July 2018 09:27 UTC

Return-Path: <xiaohu.xxh@alibaba-inc.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EBF0A130DE0; Tue, 17 Jul 2018 02:27:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.02
X-Spam-Level:
X-Spam-Status: No, score=-1.02 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.979, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=alibaba-inc.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k297BcNw5MiJ; Tue, 17 Jul 2018 02:27:27 -0700 (PDT)
Received: from out0-142.mail.aliyun.com (out0-142.mail.aliyun.com [140.205.0.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94582130DD5; Tue, 17 Jul 2018 02:27:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1531819634; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type; bh=/StJFwNoUoCpt+WvzYK/Or1mgD1f7JBAoYUh2P4u6O8=; b=AgMCwU4rYJ80CEPchce0eMhqJcOxUnZR1nBcYTcKVsLnhAEjL7DzRwHqgIAnmaNZzTEPaCE7AsGqq6EapyB3BsjGC2hMGvkj90n30MdiH+X7BAvJ11yehJ0OAzWLqCNOqltL9XNhm1xbcOb4pytBr8zatNkAyFuzx0hyr8KxWZA=
X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R421e4; CH=green; FP=0|-1|-1|-1|0|-1|-1|-1; HT=e02c03299; MF=xiaohu.xxh@alibaba-inc.com; NM=1; PH=DW; RN=5; SR=0; TI=W4_5305839_v5ForWebDing_0A9326CB_1531818844456_o7001c3265;
Received: from WS-web (xiaohu.xxh@alibaba-inc.com[W4_5305839_v5ForWebDing_0A9326CB_1531818844456_o7001c3265]) by e02c03272.eu6 at Tue, 17 Jul 2018 17:21:43 +0800
Date: Tue, 17 Jul 2018 17:21:43 +0800
From: "徐小虎(义先)" <xiaohu.xxh@alibaba-inc.com>
To: rraszuk <rraszuk@gmail.com>
Cc: Idr <idr-bounces@ietf.org>, Lizhenbin <lizhenbin@huawei.com>, Susan Hares <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>
Reply-To: "徐小虎(义先)" <xiaohu.xxh@alibaba-inc.com>
Message-ID: <fbf60956-9db5-44b5-a215-4dcc058dc474.xiaohu.xxh@alibaba-inc.com>
X-Mailer: [Alimail-Mailagent revision 268][W4_5305839][v5ForWebDing][Safari]
MIME-Version: 1.0
References: <19AB2A007F56DB4E8257F949A2FB9858DC3B8B4C@NKGEML515-MBX.china.huawei.com> <5A5B4DE12C0DAC44AF501CD9A2B01A8D8F45D82A@DGGEMM532-MBX.china.huawei.com> <CA+b+ER=UVaE61h57m3z=TpaS9-CQs8oahMu-tuA9i1521Jad9w@mail.gmail.com> <1ec22cba-dbee-4b65-8a75-a8afa213e8bb.xiaohu.xxh@alibaba-inc.com>, <CA+b+ERmR779wtr3__QUz440z4YUsqixQnvohOTWDEdhuQQm60Q@mail.gmail.com>
In-Reply-To: <CA+b+ERmR779wtr3__QUz440z4YUsqixQnvohOTWDEdhuQQm60Q@mail.gmail.com>
x-aliyun-mail-creator: W4_5305839_v5ForWebDing_QvNTW96aWxsYS81LjAgKE1hY2ludG9zaDsgSW50ZWwgTWFjIE9TIFggMTBfMTJfNikgQXBwbGVXZWJLaXQvNjA0LjUuNiAoS0hUTUwsIGxpa2UgR2Vja28pIFZlcnNpb24vMTEuMC4zIFNhZmFyaS82MDQuNS42La
Content-Type: multipart/alternative; boundary="----=ALIBOUNDARY_83262_47e32940_5b4db527_290578"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/IqzINvBKoKGykXglANyO8QG2_gU>
Subject: Re: [Idr] 答复: WG adoption call for draft-xu-idr-neighbor-autodiscovery
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Jul 2018 09:27:30 -0000

Robert,

Please see my response inline with [Xiaohu]


------------------------------------------------------------------
From:Robert Raszuk <robert@raszuk.net>
Send Time:2018年7月17日(星期二) 15:10
To:徐小虎(义先) <xiaohu.xxh@alibaba-inc.com>
Cc:Idr <idr-bounces@ietf.org>; Lizhenbin <lizhenbin@huawei.com>; Susan Hares <shares@ndzh.com>; idr@ietf.org <idr@ietf.org>
Subject:Re: [Idr] 答复: WG adoption call for draft-xu-idr-neighbor-autodiscovery

Xiaohu,

First I did not deny anything. 

I still believe that DCs should use following reachability protocols in the order of preference: 

1. Link state IGP (vast majority of DCs can use it *as is*)
2. MSDCs link state with flooding reduction
3. EBGP with central configuration

I can see a value of automatic bring-up for SD-WAN CPE - you buy a box, place it anywhere in the world and it joins the local provider's underlay and then VPNs you are authorized to join all with just a login name. 

But in DC things do not work that way. In order to install a box you need to open a ticket with exact connectivity map as otherwise it will not get mounted. So you do know exactly where it is placed and who to peer with. Configuration will be necessary anyway. 

Note that validation if connectivity is done correctly according to your map is very important, but clearly does not belong to BGP. 

I wrote my proposal to a little bit enhance the #3 above mainly due to: 

a) points made by some folks that IETF should not mandate or limit operators on how to build his network

b) to limit damage which other similar proposals will result with. 


> please list them explicitly and then we can consider how to address your concerns.

Sure: 

A) Permanently installing routes in RIB & FIB carried in BGP Hellos TLVs which are UDP based is something never heard of. Clearly you are up to great precedence here. There is no mention in the current draft when such routes are removed. 

[Xiaohu] It said in the draft that "
   If the timer
   expires without receipt of a matching Hello from the peer, BGP
   concludes that the peer no longer wishes to keep BGP session for that
   link or that the peer has failed.  The BGP peer then deletes the
   Hello adjacency.  The route towards the BGP neighbor's loopback
   address that had been dynamically created due to that BGP Hello
   adjacency SHOULD be deleted accordingly. "

B) All TLVs which are defined outside of need to bring up BGP session are dangerous as they glue current BGP with say new innovation (ex: LSVR) Once done here you can no longer separate the two. 

[Xiaohu] Could you please explicitly point out which TLVs are not needed?

C) Creation of new message instead of using existing BGP message requires more changes then necessary. It also allows for extensible framework which while normally is a feature here has a clear potential to be rather a bad thing.  

[Xiaohu] Which existing BGP message could be used for this BGP peer auto-discovery purpose from your POV? 

D) Sending BGP Hellos periodically - after session is up does not seems to bring any value especially for p2p links. For LANs on the other hand (if such requirement is in place) there are much better solutions other then periodic BGP Hellos. 

[Xiaohu] Good point. We could consider how to optimize it in the future. Do you have any concrete suggestions for such optimization?

E) I see no reason to suggest in any form use of port 179 to such UDP multicast messages

[Xiaohu] If port 179 is reserved for other purpose, it looks fine for me to use another port number.

Best regards,
Xiaohu

Thx,
R.