Re: [Idr] Adoption and IPR call for draft-wang-idr-vpn-prefix-orf-03.txt (8/16 to 8/30)

Igor Malyushkin <gmalyushkin@gmail.com> Sat, 20 August 2022 10:54 UTC

Return-Path: <gmalyushkin@gmail.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86E51C14CE2E for <idr@ietfa.amsl.com>; Sat, 20 Aug 2022 03:54:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.004
X-Spam-Level:
X-Spam-Status: No, score=-2.004 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XsDNVqCzQRbR for <idr@ietfa.amsl.com>; Sat, 20 Aug 2022 03:54:54 -0700 (PDT)
Received: from mail-il1-x12e.google.com (mail-il1-x12e.google.com [IPv6:2607:f8b0:4864:20::12e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B3C3C14CE40 for <idr@ietf.org>; Sat, 20 Aug 2022 03:54:54 -0700 (PDT)
Received: by mail-il1-x12e.google.com with SMTP id z8so3468908ile.0 for <idr@ietf.org>; Sat, 20 Aug 2022 03:54:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc; bh=GUJnI1QxvxWaTaZ8ll+yeinJ5p++jOp1pi80xLwT3vQ=; b=ngLj5dncRNf0ct53f0HMnlTq1kMlkfJt0j0EaLyls0A99205wgn0a06ejrAEowgd2Q kkyhQf4985jkvlwTiZAJsg5mhMDa7JgHqKn5YRKnBHnpHxKY1rMgjA+mmyGVsKf982gp KszfPRJWW/kyeM3oSbAGwmHR5qYirIzgfs2ex18Qmlm75nK9b/vQ/X4uSUpat4RiFurC lh1r/pi2cQXg3aUB6K3iZ+xLjXxIRugF9UAgNQFAqeP0bOeMrhwU+dD4ZAvByjP1vEGL BTY9wxMXDNJHkLA2FO8KqgG8DvvBAu4mdYON4tLwShud0ppUQ25AtacnjwvfGtiAJFQV gMag==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc; bh=GUJnI1QxvxWaTaZ8ll+yeinJ5p++jOp1pi80xLwT3vQ=; b=E9p58Wdm/RX2t3iNYhIZLgny4mpGWMuqSQfJ1RxjXDo/SjbKP7ymJZs2Bw4613T+yw WRArcEPGAXHxArie2hBH9hsr59FSLhnt3a1UtmtSJ7uo12JRoyOEWNj8iD06pcZRiPpa EJwc5FaQG4EzOE+bDit+oE4cOYLtuwo1dl7DK4R1FIxfYtOJsMlgkc8Zt16Uijxy3UXv KXzP9WeQ49JM6c1EeAoyLvfs/edk4EPa00he6xOMalDCPIkg6eSW183As68nUZ0Zs9Qy 8K9X3SulCD+jcEK62fyP6ERfpNit90T1QkUbe2BAyMyggIrvbOQfHR+FolPfuS5qG+Ad 89eg==
X-Gm-Message-State: ACgBeo2wqEseHnC8YAbd0OOtMy/XYcglJ2dcJ+VG6riFSNCouc1NntNk NSL58Usixj6+Dla1LLPpR+tRBgxq7QRSltPnsfc=
X-Google-Smtp-Source: AA6agR6GmB9+0VJOuAIjh31dFjZ0MGiLGtlQxxLTJphGkoxpuwEM6Y4OavT0FGElW3ujoCkOZip/pLVe5e+JOYtHS+I=
X-Received: by 2002:a05:6e02:1687:b0:2e0:c51b:6a1e with SMTP id f7-20020a056e02168700b002e0c51b6a1emr5595454ila.153.1660992893569; Sat, 20 Aug 2022 03:54:53 -0700 (PDT)
MIME-Version: 1.0
References: <BYAPR08MB487262F752C8777A1B9698EFB36B9@BYAPR08MB4872.namprd08.prod.outlook.com> <d9e07ea96dd64ea081ba763941a22b17@huawei.com> <CAOj+MMG=JH=RUtxbmuLsTsTe73+aT9PkqMLpmMbLi-O06inLaQ@mail.gmail.com> <MW4PR02MB7394D29827B69B604455BA1EC66F9@MW4PR02MB7394.namprd02.prod.outlook.com>
In-Reply-To: <MW4PR02MB7394D29827B69B604455BA1EC66F9@MW4PR02MB7394.namprd02.prod.outlook.com>
From: Igor Malyushkin <gmalyushkin@gmail.com>
Date: Sat, 20 Aug 2022 12:54:42 +0200
Message-ID: <CAEfhRryX_C3WkhMXLDMm0Ba8TpRjwFBaVubVKESxkDnMhehUNw@mail.gmail.com>
To: "UTTARO, JAMES" <ju1738@att.com>
Cc: Robert Raszuk <robert@raszuk.net>, Susan Hares <shares@ndzh.com>, "idr@ietf.org" <idr@ietf.org>, Zhuangshunwan <zhuangshunwan=40huawei.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="00000000000065530c05e6aa0bdc"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/XpA2l8IrGzPex1xL9xltJ1t3K54>
Subject: Re: [Idr] Adoption and IPR call for draft-wang-idr-vpn-prefix-orf-03.txt (8/16 to 8/30)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 20 Aug 2022 10:54:58 -0000

Hi all,

This draft requires configuring limits for every possible VRF on a PE with
every possible pair of "source PE, RD" for these VRFs. For many
deployments, such an approach leads to an operation burden. From my
perspective, it is desirable to have some auto-discovery mechanism for
these limits if the community is going to proceed with this draft.

Also, Section 5.1 states:
  In single-domain or Option C cross-domain scenario, NEXT_HOP attribute is
unchanged during routing transmission, so it can be used as source address.

It is not actually true. There are some deployments using different
next-hops for outbound VPN routes belonging to a single PE-VRF pair (e.g.,
core diversity pattern). Thus, there should be a more precise definition of
a source PE that is absolutely decoupled from the NEXT_HOP attribute.

сб, 20 авг. 2022 г. в 12:41, UTTARO, JAMES <ju1738@att.com>:

> *I do not support adoption of this draft. *
>
>
>
> *Thanks,*
>
> *          Jim Uttaro*
>
>
>
> *From:* Idr <idr-bounces@ietf.org> *On Behalf Of * Robert Raszuk
> *Sent:* Saturday, August 20, 2022 4:28 AM
> *To:* Susan Hares <shares@ndzh.com>
> *Cc:* idr@ietf.org; Zhuangshunwan <zhuangshunwan=
> 40huawei.com@dmarc.ietf.org>
> *Subject:* Re: [Idr] Adoption and IPR call for
> draft-wang-idr-vpn-prefix-orf-03.txt (8/16 to 8/30)
>
>
>
> Hi,
>
>
>
> > and all the comments raised in the IDR list have been addressed
>
>
>
> That is not true.
>
>
>
> For the record I am still opposing adoption of this draft.
>
>
>
> Sample list of issues which were not addressed:
>
>
>
> #1 - RD allocation can be per VRF or Global in a given VPN. This scheme
> works only in the case of per VRF allocation.
>
>
>
> #2 - Filtering by src RD can result in loss of reachability to other VPNs
> on a given node which only import subset of routes.
>
>
>
> #3 - Use of prefix ORF can be applied where prefix is just /64 RD without
> any new draft. The draft says:
>
>
>
>
>
> *Using Address Prefix ORF to filter VPN routes need to pre-
>  configuration, but it is impossible to know which prefix may cause
>  overflow in advance.*
>
>
>
>     .. which clearly is not correct as irrespective on the encoding you
> need to know what RD to push.
>
>     Here in this context of RFC5292 PREFIX == RD == /64 PREFIX
>
>
>
> #4 - Change of ORF list results in advertisement of ALL routes of a a
> given AFI/SAFI to the peer.
>
>         That is the same irrespective if IMMEDIATE or DEFER flags are set.
> That puts burden on the peer especially in
>
>         VPN cases when the number of routes may be high.
>
>
>
> #5 - Sender of ORF does not know when it is safe to remove the filter.
> Manual action is still required.
>
>
>
> #6 - Control plane memory is not an issue these days. To mitigate the real
> issue this draft tries to solve a PE which
>
>        suffers from excessive number of VPN routes with given RD can
> suppress installation of those routes to data plane
>
>        or locally drop it. Signalling it to the peer is practically not
> needed and only causes more issues then it solves.
>
>
>
> Kind regards,
>
> Robert
>
>
>
> On Sat, Aug 20, 2022 at 3:48 AM Zhuangshunwan <zhuangshunwan=
> 40huawei.com@dmarc.ietf.org> wrote:
>
> Hi Sue and WG,
>
>
>
> I support the WG adoption of this draft.
>
> The current draft has been actively discussed by the WG over the past
> months, and all the comments raised in the IDR list have been addressed,
> now it is a result of the joint efforts of the WG and worth continuing to
> optimize it as a WG draft.
>
> The solution would help to quickly isolate a faulty VPN and avoid further
> deterioration of the network operation status.
>
> I am unaware of other undisclosed IPR for this draft.
>
>
>
> Best Regards
>
> Shunwan
>
>
>
>
>
> *From:* Idr [mailto:idr-bounces@ietf.org] *On Behalf Of *Susan Hares
> *Sent:* Tuesday, August 16, 2022 11:56 PM
> *To:* idr@ietf.org
> *Subject:* [Idr] Adoption and IPR call for
> draft-wang-idr-vpn-prefix-orf-03.txt (8/16 to 8/30)
>
>
>
> This begins a 2 week WG Adoption call for
> draft-wang-idr-vpn-prefix-orf-03.txt
>
> https://datatracker.ietf.org/doc/draft-wang-idr-vpn-prefix-orf/
> <https://urldefense.com/v3/__https:/datatracker.ietf.org/doc/draft-wang-idr-vpn-prefix-orf/__;!!BhdT!ldABksoTX4ZcjR7ustBB-6Br7ALCA-0ovGEa4nQwptA-Ly5ULxnLlHqXUFgjtKPYCDfuwxIXRSI$>
>
>
>
> The authors believe that they have addressed the concerns raised in
>
> the previous 2 WG adoption calls.
>
>
>
> The WG should consider if:
>
>
>
> 1) The revised text answers the previous concerns regarding
>
> the scope of this draft?
>
>
>
> 2) Does the revised text provide a useful function for
>
> networks?
>
>
>
> 3) Are there any additional concerns regarding the new text?
>
>
>
> Each of the authors should send an IPR statement for
>
> this version of the draft.
>
>
>
> The adoption call was moved to 8/29 to 8/30 to allow questions
>
> to be asked at the IDR interim meeting on 8/29/2022 (10am – 12pm EDT).
>
>
>
> Cheers, Sue Hares
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
> <https://urldefense.com/v3/__https:/www.ietf.org/mailman/listinfo/idr__;!!BhdT!ldABksoTX4ZcjR7ustBB-6Br7ALCA-0ovGEa4nQwptA-Ly5ULxnLlHqXUFgjtKPYCDfunxv7nkg$>
>
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>