Re: [Idr] Please discuss the use cases for draft-xie-idr-mpbgp-extention-4map6

Robert Raszuk <robert@raszuk.net> Sat, 16 March 2024 09:13 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F299C14F604 for <idr@ietfa.amsl.com>; Sat, 16 Mar 2024 02:13:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.095
X-Spam-Level:
X-Spam-Status: No, score=-7.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7zRqUIy4IoHP for <idr@ietfa.amsl.com>; Sat, 16 Mar 2024 02:13:15 -0700 (PDT)
Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38DB3C14F5FE for <idr@ietf.org>; Sat, 16 Mar 2024 02:13:14 -0700 (PDT)
Received: by mail-ed1-x531.google.com with SMTP id 4fb4d7f45d1cf-5684073ab38so5431107a12.0 for <idr@ietf.org>; Sat, 16 Mar 2024 02:13:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; t=1710580393; x=1711185193; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=vosKFAtJ5dWNCd/7LK5L9aLnm42Vono1QfqczmPCGJo=; b=ApL5Z3+4IrUFTqt7tfHxBuflN8AIbdZVoRT3AQ9KnEiTd2/znnhBemN91RbWTtYsuR 52HGU01M9bjNXyV3laSsP8uyILy9WoSt1OTCQl0zsZAmn7006ztvKfC6A5D3jQeykwl3 IHD3jx8itni8wemILWrDuQxBwq/hkgcAdzeHBDV0cCsmLh8OWh0drW1LFplA6ifM0H9w pkhKOZTejnUqEtDceRoTiDRMDoxLMOirQWNTvdVFiLYAxWduX7tb8cjw3oKkhuvxCVpE Y7JJxGU9nxlzaSbVLanyaq62fYNYqQB9xoZl2mEQCan7HbEXIC7d58pZ22zY1Ww7SYZx XO8w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1710580393; x=1711185193; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=vosKFAtJ5dWNCd/7LK5L9aLnm42Vono1QfqczmPCGJo=; b=jbz9G22NWikc7uy1AtD/5Y9qHg+O57I02KPIVBnIkJqZGgztpM+8QQ8lk6Gi+ylEAH UriCWy4G8J9JeQwMGIlwZYNEICV6r0H1ncdKG1EqAWk7RZK973lRKAzn2yc8S4iWl48f OpV9pjP30jGeaiaPDyHonP6KFYJJsYdCrMlWhPt5lSeKSaER2ZdIbMgLfxKWmfnk+AYo GuPxjpXUFPyJkct1cH4WKeh+W3BgmzTuXnNLWEin12b8kG7lyiesuOYsQb1FmQqY/7Vu K4ya2aooeSmL7AlPePZ+My6PMNIJGe4a7KEo+0YVkIVVRwwNoSoJF1OoZCHBlS0Y42iK kEEw==
X-Gm-Message-State: AOJu0Yz/Gop+nWpLFuPu/xPWxzBXmKLIFKJSP0IBpV8kacdNfM063wiv N3YMid/gdd3EcqoL8HMw8zWW5pJDVYDNcl2s+xvn8QjKk8vhV06/zWrjLzR4u+meHVIXh/SEb6T DBN3A4EGeh4kpXR1s8Sk3nuT556N4vDrgf4epsgCklAXx75s/
X-Google-Smtp-Source: AGHT+IECa5fRS9ZVtX25ozbF3L0VoOFnvCH3WcwqcJVZd74YGSC3UGydzKyVSnK4lqbtxJigkLZB49Q7awhG3mBxIBQ=
X-Received: by 2002:a05:6402:3892:b0:566:59a2:7a10 with SMTP id fd18-20020a056402389200b0056659a27a10mr6680669edb.1.1710580392699; Sat, 16 Mar 2024 02:13:12 -0700 (PDT)
MIME-Version: 1.0
References: <BYAPR08MB487294F5C1EE87A8184EDC8BB3AEA@BYAPR08MB4872.namprd08.prod.outlook.com> <tencent_CBB12F958C85FDF962D76180EB1C51662408@qq.com> <20240122223242.GA29681@pfrc.org> <tencent_446B00493916CCB662EB2AC90A17F2AFAF09@qq.com> <DB175FC2-BD0A-424A-B8E6-31345BEAC8D6@pfrc.org> <tencent_FF24FFF11A1B308B03C3EC27F6B8B2B09005@qq.com> <F64BDA83-5A46-4FEA-AD6F-16CDDD817EAA@pfrc.org> <tencent_6F855FF963D740807C1C166681B1FD950908@qq.com> <CAH6gdPzMfZ8NFXcGiMkFJu_=eA9jAW+oj6ir4sbaVvyAzbzzEQ@mail.gmail.com> <tencent_BE90355FEE1A05D09F03C18C2276AB72A705@qq.com> <CAOj+MMHuEbM-7BRNMNdv8s_pYqTWfw055WhOAvro8qX9Uoa_ow@mail.gmail.com> <tencent_6501D6701898ADC4EA57061416E7975F2B0A@qq.com>
In-Reply-To: <tencent_6501D6701898ADC4EA57061416E7975F2B0A@qq.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Sat, 16 Mar 2024 10:13:01 +0100
Message-ID: <CAOj+MMH_5L3tFmku=iew7fHBZuanWC3CTenQgAdJBPkPJxGBgQ@mail.gmail.com>
To: Chongfeng Xie <chongfeng.xie@foxmail.com>
Cc: idr <idr@ietf.org>, xing <xing@cernet.edu.cn>
Content-Type: multipart/alternative; boundary="000000000000aac4350613c388d7"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/_-3kWdSUgY6ufezafo5TwtalfXE>
Subject: Re: [Idr] Please discuss the use cases for draft-xie-idr-mpbgp-extention-4map6
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Mar 2024 09:13:19 -0000

Dear Chongfeng,

When you need to transport IPv4 packet over IPv6 core and you want to do it
via translation just swapping the address is not enough. You need to deal
with *all* other IPv4 and IPv6 header elements and describe how they are
going to be mapped when you are "translating" IPv4 header to IPv6 header on
ingress and the reverse operation on egress.

Typically customers do not want transit to touch their header bits so
translation transparency becomes often the requirement.

In your draft you are just describing how to signal the address
translation in BGP. But in which document there is clear description how to
map all other fields of IPv4 header and how to assure their transparent
reappearance on the other side of the transit ?

Kind regards,
Robert


On Sat, Mar 16, 2024 at 1:40 AM Chongfeng Xie <chongfeng.xie@foxmail.com>
wrote:

> Hi Robert,
>
> I understand that VPN4 is about encapsulation.  As mentioned before, the
> new extension in my draft focuses on the case of IPv4 delivery over
> multi-domain IPv6-only underlay network, it can support not only IPv4/IPv6
> encapsualtion, but also IPv4/IPv6 translation simultaneously. Translation
> is important transition mechanism, it has been widely developed.  From the
> perspective of an operator, it is better for a unified control plane to
> support all possible functions at the data plane. Further more, address
> mapping mechanism from IPv4 to IPv6 has several advantages for network
> operation, which have been discussed before.
>
> Thank you very much.
>
> Chongfeng
>
>
> *From:* Robert Raszuk <robert@raszuk.net>
> *Date:* 2024-03-11 00:23
> *To:* Chongfeng Xie <chongfeng.xie@foxmail.com>
> *CC:* ketant.ietf <ketant.ietf@gmail.com>; idr <idr@ietf.org>
> *Subject:* Re: [Idr] Please discuss the use cases for
> draft-xie-idr-mpbgp-extention-4map6
> Hi Chongfeng,
>
> > It adopts address mapping rule which is the 1:1 mapping between IPv4
> address and IPv6 address
>
> Let's assume that you are talking about prefixes not actual addresses as
> this is what draft says.
>
> But I have a fundamental question as an alternative to this proposal:
>
> Why not to use VPNv4 with IPv6 next hops as is without changing anything
> in the protocols or shipping implementations ?
>
> At min please kindly document pros and cons of using VPN signalling to
> accomplish the very same outcome.  For transport as you know VPNs can run
> over lot's of data plane options: IPv6, SRv6 etc ...
>
> Note that if you would not propose a new SAFI I could see some benefits to
> what you are after ... but you do hence we better very well understand the
> reason for this extra dev and ops cost.
>
> Many thx,
> Robert
>
>
> On Sun, Mar 10, 2024 at 9:40 AM Chongfeng Xie <chongfeng.xie@foxmail.com>
> wrote:
>
>>
>> Hi Ketant,
>>
>> Sorry for my negligence of your mail accidentally. Actually your question
>> has been discussed early last year.  I try to answer it again as below,
>>
>> As mentioned The use case of 4map6 proposal in this draft is to support
>> IPv4aaS in the multi-domain IPv6-only networks.  It adopts address mapping
>> rule which is the 1:1 mapping between IPv4 address and IPv6 address, and
>> IPv4 address become part of IPv6 address. With this design,PE devices can
>> map the source and destination addresses of IPv4 packets to the source
>> addresses of outer IPv6 packets, respectively.  It mainly meets the
>> following requirements:
>>
>> 1)Compatibility with both encapsulation and translation, as we all know,
>> IPv4 service delivery over IPv6 network has two transition approaches:
>> Encapsulation and translation,  both of them have been used in current
>> networks. 4map6 proposal can meet their needs simultaneously. Especially in
>> translation, it can support both doulbe translation and single translation.
>>
>> 2)Security,the outer IPv6 address is dynamically generated based on
>> mapping, and does not require a statically configured address as the tunnel
>> endpoint address in advance.  This will be helpful to avoid the static IPv6
>> address from becoming the target of the DDOS attack.
>>
>> 3)Load balancing,the 4map6 proposal assigns a corresponding IPv6 address
>> to each host's IPv4 address in the IPv6 network, and the IPv6 address newly
>> generated can more accurately identify the host. This allows for IPv6
>> address based load balancing and management of the host in the IPv6 network
>> based on the IPv6 address.
>>
>>  I hope this explanation can address your concerns. Welcome to continue
>> the discussion.
>>
>> Best regards
>> Chongfeng
>>
>>
>> ------------------------------
>> chongfeng.xie@foxmail.com
>>
>>
>> *From:* Ketan Talaulikar <ketant.ietf@gmail.com>
>> *Date:* 2024-02-12 22:57
>> *To:* Chongfeng Xie <chongfeng.xie@foxmail.com>;
>> draft-xie-idr-mpbgp-extension-4map6
>> <draft-xie-idr-mpbgp-extension-4map6@ietf.org>
>> *CC:* jhaas <jhaas@pfrc.org>; Susan Hares <shares@ndzh.com>; idr
>> <idr@ietf.org>
>> *Subject:* Re: [Idr] Please discuss the use cases for
>> draft-xie-idr-mpbgp-extention-4map6
>> Hi Chongfeng/Authors,
>>
>> Thanks for your updates to the document.
>>
>> I am still struggling to find the answer to the question on why it is
>> necessary to perform mapping from IPv4 to IPv6 and then back to IPv4 when
>> providing IPv4 connectivity service over an IPv6 core? Why is it not
>> sufficient to simply encapsulate the IPv4 payload into any encapsulation
>> (e.g., IPv4-in-IPv6, SRv6, MPLS, GRE, etc.) using RFC8950 encoding for the
>> IPv4 unicast/VPN SAFI. These solutions are documented
>> in draft-mishra-idr-v4-islands-v6-core-4pe
>>
>> Perhaps I am missing something and it would help me understand the need
>> for such mapping by service provider PE routers.
>>
>> Thanks,
>> Ketan
>>
>>
>> On Thu, Feb 8, 2024 at 5:14 AM Chongfeng Xie <chongfeng.xie@foxmail.com>
>> wrote:
>>
>>>
>>>
>>> Hi Jeff,
>>>
>>> We have submitted a new version of draft-xie-idr-mpbgp-extention-4map6.
>>> Based on your suggestions, the contents of new attribute is placed in a new
>>> TLV in the tunnel encapsulation attribute of RFC9012, and the format of the
>>> NLRI is revised as well. In addition, the section of operation has been
>>> changed accordingly.
>>>
>>>
>>>         Name:     draft-xie-idr-mpbgp-extension-4map6
>>>         Revision: 09
>>>         Title:    MP-BGP Extension and the Procedures for IPv4/IPv6
>>> Mapping Advertisement
>>>         Date:     2024-02-09
>>>         Group:    idr
>>>         Pages:    16
>>>         URL:
>>> https://www.ietf.org/archive/id/draft-xie-idr-mpbgp-extension-4map6-09.txt
>>>         Status:
>>> https://datatracker.ietf.org/doc/draft-xie-idr-mpbgp-extension-4map6/
>>>         HTMLized:
>>> https://datatracker.ietf.org/doc/html/draft-xie-idr-mpbgp-extension-4map6
>>>         Diff:
>>> https://author-tools.ietf.org/iddiff?url2=draft-xie-idr-mpbgp-extension-4map6-09
>>>
>>> We express sincere thanks to you for reviewing the draft as WG chair and
>>> providing a couple of important suggestions.  We also thank idr WG for the
>>> comments and suggestions received so far.
>>>
>>> If you have any new comments or suggestions, please feel free to let me
>>> know. Thanks!
>>>
>>> Best regards
>>> Chongfeng
>>>
>>>
>>> *From:* 【外部账号】Jeffrey Haas <jhaas@pfrc.org>
>>> *Date:* 2024-02-05 00:02
>>> *To:* Chongfeng Xie <chongfeng.xie@foxmail.com>
>>> *CC:* Sue Hares <shares@ndzh.com>; idr <idr@ietf.org>;
>>> draft-xie-idr-mpbgp-extension-4map6
>>> <draft-xie-idr-mpbgp-extension-4map6@ietf.org>
>>> *Subject:* Re: [Idr] Please discuss the use cases for
>>> draft-xie-idr-mpbgp-extention-4map6
>>> Chongfeng,
>>>
>>>
>>> On Jan 29, 2024, at 10:38 AM, Chongfeng Xie <chongfeng.xie@foxmail.com>
>>> wrote:
>>> Based on your comment and suggestions, we have made the following
>>> revisions and submitted a new version,
>>>
>>>
>>>
>>> [...]
>>>
>>> If you have any further comments, please feel free to let me know.
>>>
>>>
>>> Your changes significantly address my operational concerns.  Thank you.
>>>
>>> -- Jeff
>>>
>>> _______________________________________________
>>> Idr mailing list
>>> Idr@ietf.org
>>> https://www.ietf.org/mailman/listinfo/idr
>>>
>> _______________________________________________
>> Idr mailing list
>> Idr@ietf.org
>> https://www.ietf.org/mailman/listinfo/idr
>>
>