Re: [Idr] [spring] New draft for data center gateways

Robert Raszuk <robert@raszuk.net> Tue, 24 May 2016 21:59 UTC

Return-Path: <rraszuk@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 157DC12D817; Tue, 24 May 2016 14:59:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.4
X-Spam-Level:
X-Spam-Status: No, score=-2.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.198, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VaBAYkm4IL85; Tue, 24 May 2016 14:59:06 -0700 (PDT)
Received: from mail-lf0-x230.google.com (mail-lf0-x230.google.com [IPv6:2a00:1450:4010:c07::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24FBA12D9D5; Tue, 24 May 2016 14:59:06 -0700 (PDT)
Received: by mail-lf0-x230.google.com with SMTP id k98so11305826lfi.1; Tue, 24 May 2016 14:59:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc; bh=GKn8aaixS6J6nllQucGsIHvgSMJjxgFU9c5Hxw3BZVo=; b=0KeQL2MRbNL6IcVAP8IxEp8lXFMpsFBarVu7NhK89TVW9fp+PQtNH+Xcw6NRaVHhNB 6/REbpdm2bWWXdqwxa5Rc46rTQJ+EEXeBCDzq1QnKjJJZIk8+7u2wG+VjnV66hYw20sl bYUfaoCm9k1SNhPgyVVc0RBHrgBcWrLbHqUX6cEXM/FwjABRQ73H4jLMLISWNkHmXsTT 1KAKUigZX44MZQIH4Iymk3v4AwaKHMce2QXG3WWnpJxtWCXCP9XPabJ7rB3vfzbl8ACm 2IoBB9f4owSkrawxB56ImdVSEGMfYq3GfoVageDXpTvIsJ/iUxQw4WEi+1pa+0ED93EG jUSg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:date :message-id:subject:from:to:cc; bh=GKn8aaixS6J6nllQucGsIHvgSMJjxgFU9c5Hxw3BZVo=; b=EJQsL3gnbXeO686y1CY0DKLh6lUnVmMabPns38gxd1ZWJo18Z8+pXBMMtlTh8s4Iol CqN8YuXQDfZIimqAQuunvK4/8qgcwlp/rLlDUh5Xzy6NUlnyZr/8h1kVCH3jz28Gqh1u ZDkQqZUMNy6k1MhyRFNxcoVZnJedDIdynXhwAwWSSjRly9sQbfluJNCSeDgyfVLyoDVR laFGdda6ekZ5s2nFsBozy6bW29ABlXyVlRL684VRzdYSrP1KIdJSMRJT9d67tEP0E8fK k1s/1CbjnIgtZq9VWly5kmwQdVLYlkjP/9kLwTYBzc1dsEuRLuDS+qxsVYljMuiwsF4S oBDw==
X-Gm-Message-State: ALyK8tKFaJcnRCXxxBpCtd0yIpYuDldY7qkC7ErNWtVJT4aglf+W0D/Bin3odfWul7XGDKU53FcUllxoeo+xSw==
MIME-Version: 1.0
X-Received: by 10.25.33.133 with SMTP id h127mr78927lfh.82.1464127144268; Tue, 24 May 2016 14:59:04 -0700 (PDT)
Sender: rraszuk@gmail.com
Received: by 10.25.134.196 with HTTP; Tue, 24 May 2016 14:59:04 -0700 (PDT)
In-Reply-To: <CA+b+ERnLC1wtkGCduTL2-eXu0fMgbM1OSz1N5CugyPxKD5dVvg@mail.gmail.com>
References: <01ea01d1b51a$7cf31e60$76d95b20$@olddog.co.uk> <CA+b+ERmKjq9h5LP5k3+dygkRjbwzsXrogyzvopPZ61DTTuaitA@mail.gmail.com> <CA+b+ERnZt0BgrHHqBD4BopunjEZLUstfsAbw__u0wGJ2v0Wy-w@mail.gmail.com> <SN1PR0501MB1709C670BFB005BDB241845DC74F0@SN1PR0501MB1709.namprd05.prod.outlook.com> <CA+b+ERnLC1wtkGCduTL2-eXu0fMgbM1OSz1N5CugyPxKD5dVvg@mail.gmail.com>
Date: Tue, 24 May 2016 23:59:04 +0200
X-Google-Sender-Auth: g6oeAjEeJDQmqDS7VcF-hKapOqo
Message-ID: <CA+b+ERmWU0YEpT5r7LDCHq3KKnYqFDirn1GRaG_Aev0VDsFiCw@mail.gmail.com>
From: Robert Raszuk <robert@raszuk.net>
To: John E Drake <jdrake@juniper.net>
Content-Type: multipart/alternative; boundary="001a113f1888571bf205339daac7"
Archived-At: <http://mailarchive.ietf.org/arch/msg/idr/RKFXP5jmAo9b-s5KWKP25E5xX34>
Cc: "spring@ietf.org" <spring@ietf.org>, idr wg <idr@ietf.org>
Subject: Re: [Idr] [spring] New draft for data center gateways
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 May 2016 21:59:08 -0000

John, Adrian & Eric,

Btw .. indirection I am suggesting may not only be realized by choice of a
new overlay system.

Alternative design would be to only encode a given's DC "COLOR" or "ID"
into the tunnel encapsulation attribute which would not change for each X
then to establish full mesh EBGP multihop sessions between interesting GWs
with each again carrying the tunnel attribute with same set of "IDs" or
"COLORS" as would do atomic prefixes.

- If such full eBGP mesh would be getting large use of stock BGP Route
Server may be used at any DC or in the backbone.

- Over such sessions single prefixes would be exchanged - something what
you refer to auto discovery routes in current document but those would be
only send over EBGP not IBGP.

- This would also remove any need to run intra-DC auto discovery.

- The connectivity restoration time would be significantly reduced as
multihop BFD may be used (directly or to RS).


The above described proposal changes your current architecture however I
believe it significantly simplifies things, removes the concern of scale
and simplifies or even eliminates any new development needed to deploy it
today provided that given's vendor policy already allows to match routes
with specific attribute payload.

Cheers,
R.

PS. If this game is under same administration (which I think it is based on
the requirements) then to mark the routes use of standard or extended
community can be used instead of tunnel encapsulation attribute.










On Tue, May 24, 2016 at 11:27 PM, Robert Raszuk <robert@raszuk.net> wrote:

> Hi John,
>
> *[JD]  We were assuming that a) GW/backbone links would be advertised in
>> BGP LS (optionally w/ EPE) and b) a GW that is disconnected from the
>> backbone does not advertise an auto-discovery route.  This will be made
>> explicit in the next revision.  *
>>
>
> ​Ad a) - EPE works fine with next hop self on the ASBRs of the bacbone. So
> if your proposal requires external links to be passive in the backbone IGP
> then the draft needs to state it well. Besides it may not be sufficient if
> more then one backbone instance is used to interconnect DCs.
>
> Ad b) - The current set of procedures described in section 2 for
> constructing auto discovery routes is not sufficient. GW may be
> interconnected to more then one backbone each serving different set of
> prefixes within each DC (you call it X). So much more would need to go into
> the auto-discovery to make this work in practice. And even if you would go
> that way it will be slow to re-advertise all prefixes with different tunnel
> attribute content.
>
> *[JD]   Are you simply repeating the opinion you expressed when the
>> tunnel-encaps draft first came out, or do you have a scalability concern
>> that hasn't already been discussed?*
>>
>>
> ​I am expressing the observation that tunnel-encaps may work well to pass
> static information or information which may change by configiration.
>
> Here you are using it to pass remote reachability info embedded into it. I
> find it far from optimal which as combined with possible DC prefix scale is
> likely to cause more issues then benefits.
>
> That's why I suggest use of indirection layer to solve this overall
> problem. As mentioned one could be LISP or any other SD-WAN solutions.
>
> Thx,
> R.
>
>