Re: [Idr] [bess] draft-rosen-mpls-rfc3107bis

<bruno.decraene@orange.com> Wed, 13 April 2016 11:41 UTC

Return-Path: <bruno.decraene@orange.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E1C612DA0E; Wed, 13 Apr 2016 04:41:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.618
X-Spam-Level:
X-Spam-Status: No, score=-2.618 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6yJQe2pxUMXY; Wed, 13 Apr 2016 04:41:30 -0700 (PDT)
Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FAD912D9AE; Wed, 13 Apr 2016 04:41:30 -0700 (PDT)
Received: from omfedm06.si.francetelecom.fr (unknown [xx.xx.xx.2]) by omfedm12.si.francetelecom.fr (ESMTP service) with ESMTP id A98B218C548; Wed, 13 Apr 2016 13:32:41 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.27]) by omfedm06.si.francetelecom.fr (ESMTP service) with ESMTP id 735FF27C067; Wed, 13 Apr 2016 13:32:24 +0200 (CEST)
Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM7C.corporate.adroot.infra.ftgroup ([fe80::8007:17b:c3b4:d68b%19]) with mapi id 14.03.0279.002; Wed, 13 Apr 2016 13:32:24 +0200
From: bruno.decraene@orange.com
To: Eric C Rosen <erosen@juniper.net>
Thread-Topic: [bess] draft-rosen-mpls-rfc3107bis
Thread-Index: AQHRjDXCqHf38G7z/0eG06bIad1uvp+Gad4g
Date: Wed, 13 Apr 2016 11:32:24 +0000
Message-ID: <20149_1460547161_570E2E48_20149_19157_1_53C29892C857584299CBF5D05346208A0F86D0F8@OPEXCLILM21.corporate.adroot.infra.ftgroup>
References: <3515_1458832652_56F4050B_3515_774_1_53C29892C857584299CBF5D05346208A0F819B1E@OPEXCLILM21.corporate.adroot.infra.ftgroup> <56F42E71.9020201@juniper.net> <9656_1458905159_56F52047_9656_7014_1_53C29892C857584299CBF5D05346208A0F81AAA7@OPEXCLILM21.corporate.adroot.infra.ftgroup> <56FEA566.8070605@juniper.net>
In-Reply-To: <56FEA566.8070605@juniper.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.168.234.3]
Content-Type: multipart/alternative; boundary="_000_53C29892C857584299CBF5D05346208A0F86D0F8OPEXCLILM21corp_"
MIME-Version: 1.0
X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2016.4.13.110317
Archived-At: <http://mailarchive.ietf.org/arch/msg/idr/RXX_cQq5dg8r9UlfSgKnAe4aVyw>
Cc: "idr@ietf.org" <idr@ietf.org>, BESS <bess@ietf.org>, "mpls@ietf.org" <mpls@ietf.org>
Subject: Re: [Idr] [bess] draft-rosen-mpls-rfc3107bis
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Apr 2016 11:41:32 -0000

Sorry for the late answer and for breaking the email thread. (my laptop hard drive failed during the IETF week).

Please see 2 comments inline [Bruno]

And as already expressed, I support the adoption of this document.



From: Eric C Rosen [mailto:erosen@juniper.net]

Right now, we're arguing about which of the following two strategies is

more likely to cause a problem:



1. In the first strategy, 3107bis requires the S bit to be set when

there is a single label.  This will allow 3107bis to interoperate with

3107 implementations of "multiple labels", but it will not allow 3107bis

to interoperate with (buggy) 3107 implementations that send a single

label, but don't set the S bit.



2. In the second strategy, 3107bis assumes, in the absence of the

Capability, that there is only a single label, and doesn't bother to

check the S bit.  This will allow 3107bis to interoperate with (buggy)

implementations that send a single label but fail to set the S bit; it

will not allow 3107bis to interoperate with (non-buggy) 3107

implementations of multiple labels.



My argument is that the second strategy is better because it will be

less disruptive.  This is based on my belief that the "day 1" bugs do

exist, and that the "multiple labels" feature has yet to be deployed.



Your argument seems to be that the first strategy is better because (a)

it only causes disruption if the 3107 implementation has a bug, in which

case the bug can be fixed, and (b) if the second strategy is used, a

3107-compliant implementation of multiple labels will fail to

interoperate with a 3107bis-compliant implementation of multiple labels,

and both implementors will claim compliance.



[Bruno] Thank you for this good and fair summary.

I would add: (c) a 3107-compliant implementation of multiple labels sending one route with multiple labels to a 3107bis-compliant implementation of a single label, will trigger the shutdown of the BGP sessions and hence the removal of all labelled routes and most likely all routes from all AFI/SAFI sharing this BGP session. This is very disruptive. And both implementors will claim compliance.





There may be a third strategy: second strategy, plus when a BGP error is found when parsing the NLRI, search for the S bit in order to identify the IP prefix and treat it as withdraw. (rather than kill the BGP session)



To be on the extra safe side, I'd prefer the third strategy, on the basis that you never know what you can receive (cf the BGP attribute 99 incident, which nobody asked for/expected), plus the 3107 speaker sending multiple labels IS compliant.

If you don't think that this is feasible/reasonable, I'm fine with the second strategy.





I think your argument is reasonable, the question is really just which

strategy will cause less disruption.



[Bruno] In either case, it seems like the draft will need to document the issue and warn the network operator about it.



Do other members of the WGs have opinions about this?

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.