Re: [Idr] comments on draft-ietf-idr-rs-bfd

Jeffrey Haas <jhaas@pfrc.org> Tue, 01 August 2017 17:19 UTC

Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 198C31321B9 for <idr@ietfa.amsl.com>; Tue, 1 Aug 2017 10:19:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level:
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LZPaVV0Erg9K for <idr@ietfa.amsl.com>; Tue, 1 Aug 2017 10:19:40 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id C3E861321B4 for <idr@ietf.org>; Tue, 1 Aug 2017 10:19:40 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id A4F111E345; Tue, 1 Aug 2017 13:19:54 -0400 (EDT)
Date: Tue, 01 Aug 2017 13:19:54 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Nick Hilliard <nick@foobar.org>
Cc: IETF IDR Working Group <idr@ietf.org>
Message-ID: <20170801171954.GF24942@pfrc.org>
References: <59807D1E.4050807@foobar.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <59807D1E.4050807@foobar.org>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/TXv3OKP7qF9eku2TaaMYv38Rwk4>
Subject: Re: [Idr] comments on draft-ietf-idr-rs-bfd
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Aug 2017 17:19:42 -0000

Robert and Job answered some of the points already.  I'll skip those.

On Tue, Aug 01, 2017 at 02:07:42PM +0100, Nick Hilliard wrote:
> It's unnecessary because if there is a mechanism available to broker bfd
> sessions between rsclients, then this allows each rsclient to make their
> own decision about whether they want to use this and make their own
> decisions about NH reachability.  If this is in place, the RS doesn't
> need to augment this information because the client has all the tools
> they need to be able to do this.

In the absence of multiple paths from the RS, the only choice the client
gets to make is use/don't use.

> - it puts the ixp in the position of making pronouncements about the
> reachability of its rsclient base.  From a layer 9 point of view, it
> could be argued that there might be liability problems if it gets this
> wrong due to e.g. poisoned / late / incorrect data from rsclients.

Vs. announce stuff that is blackholing?  Recall we're having this
conversation for a reason.

> - the draft makes an implicit assumption that reachability between each
> rsclient is a ternary state, which it is not.  E.g. one of the most
> common ixp commutativity failure situations is where you have an
> ecmp/lag bundle between rsclient A and B, and a single member link dies,
> leading to partial failure between A and B.  If BFD and BGP work fine,
> then the IXP has just made a pronouncement that NH reachability is good,
> which it is not.  Awkward.

Already an existing issue.  Perfect? No.  Not trying to be.

> - this proposal adds a good deal of complication to the interaction
> between RS, rsclients and the routing decision engine functionality.

Route selection using proxied reachability state in a RS view is hard?  No,
same as existing RS cost.

The one valid criticism is what to do when a RS view contains multiple
peers.  In such cases, this proposal is less useful except in the clear case
where all peers in the view are unable to reach the relevant nexthop.

> - route server connectivity brokerage is generally considered to be the
> poor first cousin of bilateral connectivity over an IXP and the poor
> second cousin of a private network interconnection.  If an rsclient
> cares enough about its data flows that reachability is sufficiently
> important to justify being protected by BFD, then I'd argue that they
> should just do this rather than outsourcing the problem to someone else.

The issue is fundamental to BGP third-party nexthops.  It's particularly the
case when such nexthops are available across a fundamentally NBMA
environment.

>  There are plenty of automation tools out there and it's not that hard
> to do.

It's not clear what you're suggesting.

-- Jeff